Warning: Permanently added '[localhost]:14877' (ECDSA) to the list of known hosts. 2026/01/18 19:19:25 fuzzer started 2026/01/18 19:19:26 dialing manager at localhost:42157 syzkaller login: [ 51.909597] cgroup: Unknown subsys name 'net' [ 51.982437] cgroup: Unknown subsys name 'cpuset' [ 52.000400] cgroup: Unknown subsys name 'rlimit' 2026/01/18 19:19:36 syscalls: 201 2026/01/18 19:19:36 code coverage: enabled 2026/01/18 19:19:36 comparison tracing: enabled 2026/01/18 19:19:36 extra coverage: enabled 2026/01/18 19:19:36 setuid sandbox: enabled 2026/01/18 19:19:36 namespace sandbox: enabled 2026/01/18 19:19:36 Android sandbox: enabled 2026/01/18 19:19:36 fault injection: enabled 2026/01/18 19:19:36 leak checking: enabled 2026/01/18 19:19:36 net packet injection: enabled 2026/01/18 19:19:36 net device setup: enabled 2026/01/18 19:19:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/18 19:19:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/18 19:19:36 USB emulation: enabled 2026/01/18 19:19:36 hci packet injection: enabled 2026/01/18 19:19:36 wifi device emulation: enabled 2026/01/18 19:19:36 802.15.4 emulation: enabled 2026/01/18 19:19:36 fetching corpus: 0, signal 0/0 (executing program) 2026/01/18 19:19:38 starting 8 fuzzer processes 19:19:38 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44804}, 0x80) socketpair(0x2c, 0xa, 0x7, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1}, @device_b, @random="ecc900c8321e"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000780)=0x2) accept$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) 19:19:38 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) clone3(&(0x7f0000002080)={0x100000200, &(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940), {0x1d}, &(0x7f0000000980)=""/114, 0x72, &(0x7f0000000a00)=""/182, &(0x7f0000002040)=[r4, r3, r3, r3, r5, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(r6, &(0x7f0000002100)) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ipvlan0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:19:38 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x20000) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000007c0)={0x2, 0x13, 0x8, 0x43, "134d5ed6f17d0340d3c9dc3afc00c0074994e3a36ddc1b39038801e554db32bb"}) process_mrelease(r0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000840)=""/79) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000900)=""/4096) 19:19:38 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) r8 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r8}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:19:38 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) r9 = clone3(&(0x7f00000008c0)={0x410b000, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/152, 0x98, &(0x7f0000000800)=""/107, &(0x7f0000000880)=[r3, r4, r5, r4, r3, r4, r4, r4], 0x8}, 0x58) pidfd_open(r9, 0x0) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000940)=""/13) r11 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r11, 0xb) r12 = shmget(0x2, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, r9, r10, 0x400}) 19:19:38 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r10) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x10084}, 0x44800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x56}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x40c0) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:19:38 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf89}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd39}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x2000881a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10001}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x200}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x400}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xf512}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x70}}, 0x10) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000940)) [ 62.800129] audit: type=1400 audit(1768763978.475:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:19:38 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r9 = syz_open_dev$mouse(&(0x7f0000000d40), 0x400000000, 0x101000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000001240)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x424, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}, @device_a, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x68, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd0f}, @broadcast, @from_mac=@broadcast, @broadcast, {0x9, 0x4}}, {0x3, 0x1, 0x1}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {}, @from_mac=@broadcast, @device_a, @initial, {0x5, 0x5}}, {0xa, 0x0, 0x3}}}, @ver_80211n={0x0, 0xffc, 0x2, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xc, "ae448e0a388873b7952cc80e"}, {@device_a, @device_b}]}}, @NL80211_ATTR_FRAME={0x36c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @device_b, @random="08bb0fff8e6c", {0x1, 0x40}}, {0x8, 0x0, 0x1, 0x0, 0x3f}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @from_mac, @device_a, @random="c47b8429b192", {0x0, 0x81}}, {0x3, 0x0, 0x0, 0x1, 0x7c}}}, @ver_80211n={0x0, 0x4393, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x72, "7d1f60b58c797bf8c37d724984ca5b0adbddfab4d8a8de7dcf25d0823ebf8ede3342bca9dd1136752d9a8a15d545e936bf74c645c56b1f31a488e2fbfe0f33af90d1f5ca8f6f117a615a8ed5054ffab5b27b5dedcbf51acdc97c07a66384d5d193f956cca35d7dcd85f0cf5e561a146b0872"}, {@broadcast, @device_b, 0xc1, "b1b5a62137dad6673a9c89bab197e8f20e5cbd288319ed5cc31f467225b12a6dda7c18d6d17d4810270079fb1c620346f6e7a4cef2f8e4f23c9db7f7918c8fcf14393e413533b74e82d4d6e0819ee1028eb0854eacf8613e9723b2653a54b494982c24809dd887d028e5870977fc596744fed78c951d324329ebf56d80bef625197fde4a3215fc42978f85008981317171c75393cc8e148864275e36e22de33fd8835733f0a4707da7baa3003746160cfcaf50de084097d54ae41bc1dd6b867c0b"}, {@device_b, @device_a, 0x1e, "3b0a35e5ffa461adef7a7eeb85c407a3e0c2c53f7f29469fa9c6c17c255f"}, {@broadcast, @broadcast, 0xcb, "9e1ed779d42775e47a4253b80b26e3fe5c06b6a28f7415dde72ffc7da2e4254cf37b2a0960870b378a186e8684fa77da897d52fdcdd330e762c7f77ad5c8498238d32a306ba6c0597ea1e3fc7b49d9997275f7829c968381ffa3b3cd816557b14705cd7aa9a2d909dc4b5bf7f07a3450fbcda6caa9aeafedb296d446f426f429f4499990fa03f97ad73f48567346a6eeea6a24a53e539d438f0a36fee8648a1dd8b37d797b1493d2184459cf5bc68e389bd222dbfbeeebee23eb0ca24866ffba16e72e727295d49af9671c"}, {@device_a, @device_b, 0x70, "d28e576d55d9b2342590a5fe74f10111f36246732a5ab8adf978b873400f2c9e55fc1c48eaeb3e0fe8073c3a02021e35435fe0ded21924be85fa98a8bbb803bd8ba999d3b021b2a545094bc492779a04164118b094b3c5ea42787244d2c38c1be4c1bac0f0747fb8afbf6c136d95b8a9"}, {@device_b, @device_b, 0x47, "e16cde4e9142f09cfdcad07efcfd96c1f525867489d586474780511b6d93c9419adf1a640872ce0109e895d15f24bc398c776b538eb0fd8235ce57b4d1d9b57e3eb39bbd0baadb"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x424}, 0x1, 0x0, 0x0, 0x4004010}, 0x44001) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) [ 64.006866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.009846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.012072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.017911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.021894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.071182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.074657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.079018] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.089572] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.094622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.128486] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.136660] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.139617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.147549] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.149462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.152445] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.154982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.156558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.159451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.160718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.162109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.166426] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.182083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.183551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.188171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.239907] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.243630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.245876] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.248161] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.252530] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.255631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.256075] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.263723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.264959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.284879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.286706] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.288109] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.301445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.302826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.345877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.102627] Bluetooth: hci0: command tx timeout [ 66.165986] Bluetooth: hci1: command tx timeout [ 66.231545] Bluetooth: hci4: command tx timeout [ 66.231585] Bluetooth: hci2: command tx timeout [ 66.294327] Bluetooth: hci3: command tx timeout [ 66.422559] Bluetooth: hci5: command tx timeout [ 66.422680] Bluetooth: hci6: command tx timeout [ 66.487088] Bluetooth: hci7: command tx timeout [ 68.149710] Bluetooth: hci0: command tx timeout [ 68.214707] Bluetooth: hci1: command tx timeout [ 68.278542] Bluetooth: hci2: command tx timeout [ 68.278961] Bluetooth: hci4: command tx timeout [ 68.341635] Bluetooth: hci3: command tx timeout [ 68.469560] Bluetooth: hci5: command tx timeout [ 68.470002] Bluetooth: hci6: command tx timeout [ 68.535541] Bluetooth: hci7: command tx timeout [ 70.199448] Bluetooth: hci0: command tx timeout [ 70.262567] Bluetooth: hci1: command tx timeout [ 70.325564] Bluetooth: hci4: command tx timeout [ 70.325624] Bluetooth: hci2: command tx timeout [ 70.389545] Bluetooth: hci3: command tx timeout [ 70.519574] Bluetooth: hci5: command tx timeout [ 70.520064] Bluetooth: hci6: command tx timeout [ 70.582573] Bluetooth: hci7: command tx timeout [ 72.246534] Bluetooth: hci0: command tx timeout [ 72.310578] Bluetooth: hci1: command tx timeout [ 72.373564] Bluetooth: hci2: command tx timeout [ 72.373973] Bluetooth: hci4: command tx timeout [ 72.437529] Bluetooth: hci3: command tx timeout [ 72.565638] Bluetooth: hci6: command tx timeout [ 72.566330] Bluetooth: hci5: command tx timeout [ 72.630540] Bluetooth: hci7: command tx timeout [ 96.516471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.517195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.572628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.573206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.618479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.619074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.674374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.674966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.679177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.679818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.761650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.762241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.770801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.771378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.803648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.804224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.825114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.825857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:20:12 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) clone3(&(0x7f0000002080)={0x100000200, &(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940), {0x1d}, &(0x7f0000000980)=""/114, 0x72, &(0x7f0000000a00)=""/182, &(0x7f0000002040)=[r4, r3, r3, r3, r5, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(r6, &(0x7f0000002100)) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ipvlan0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) [ 96.961423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.962517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.976817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.977413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:20:12 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) clone3(&(0x7f0000002080)={0x100000200, &(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940), {0x1d}, &(0x7f0000000980)=""/114, 0x72, &(0x7f0000000a00)=""/182, &(0x7f0000002040)=[r4, r3, r3, r3, r5, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(r6, &(0x7f0000002100)) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ipvlan0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:20:12 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) r8 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r8}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:20:12 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) r8 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r8}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 97.145899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.146517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.181593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.182163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:20:12 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) r8 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r8}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 97.205482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.213544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.270950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.273537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:20:12 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) r8 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r8}) [ 97.322630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.323229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:20:13 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) clone3(&(0x7f0000002080)={0x100000200, &(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940), {0x1d}, &(0x7f0000000980)=""/114, 0x72, &(0x7f0000000a00)=""/182, &(0x7f0000002040)=[r4, r3, r3, r3, r5, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(r6, &(0x7f0000002100)) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ipvlan0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) [ 97.338095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.340116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:20:13 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) r8 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r8}) 19:20:24 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x20000) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000007c0)={0x2, 0x13, 0x8, 0x43, "134d5ed6f17d0340d3c9dc3afc00c0074994e3a36ddc1b39038801e554db32bb"}) process_mrelease(r0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000840)=""/79) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000900)=""/4096) 19:20:24 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) clone3(&(0x7f0000002080)={0x100000200, &(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940), {0x1d}, &(0x7f0000000980)=""/114, 0x72, &(0x7f0000000a00)=""/182, &(0x7f0000002040)=[r4, r3, r3, r3, r5, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(r6, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:20:24 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf89}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd39}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x2000881a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10001}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x200}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x400}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xf512}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x70}}, 0x10) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000940)) 19:20:24 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) r9 = clone3(&(0x7f00000008c0)={0x410b000, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/152, 0x98, &(0x7f0000000800)=""/107, &(0x7f0000000880)=[r3, r4, r5, r4, r3, r4, r4, r4], 0x8}, 0x58) pidfd_open(r9, 0x0) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000940)=""/13) r11 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r11, 0xb) r12 = shmget(0x2, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, r9, r10, 0x400}) 19:20:24 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44804}, 0x80) socketpair(0x2c, 0xa, 0x7, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1}, @device_b, @random="ecc900c8321e"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000780)=0x2) accept$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) 19:20:24 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r10) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x10084}, 0x44800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x56}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x40c0) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:20:24 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "2174077cad1d75eb1534495e04bc5a37bd7cec3e81d163754fcf84d55b61b37b73213b2638444ed84ccf8d081cfa30717524c6baea9b862bd340f0f660734c833c3c8110d96552b9b952f20845f864ad6b11b12dad964dfe251b2c59f8c3a760b93aabc2614c3d899a101227ee1b79b657a99bd1db96abd618508be345ff9d324f3aeec72f3075ed80757163e9bf2588cc330a5e59e68f767215b4cb3d1fc3f04bd403c82314c3cb6fd76c39f2538d66591095087bd1ae9b14c9384a1e701404e12a265eebac12a891a1fd4b2e25c66ad78976388e6ff663b8b1d82160ea53622f2b80fd9085f4f99c8d610218838c88226a790eded423d92072"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r9 = syz_open_dev$mouse(&(0x7f0000000d40), 0x400000000, 0x101000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000001240)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x424, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}, @device_a, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x68, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd0f}, @broadcast, @from_mac=@broadcast, @broadcast, {0x9, 0x4}}, {0x3, 0x1, 0x1}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {}, @from_mac=@broadcast, @device_a, @initial, {0x5, 0x5}}, {0xa, 0x0, 0x3}}}, @ver_80211n={0x0, 0xffc, 0x2, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xc, "ae448e0a388873b7952cc80e"}, {@device_a, @device_b}]}}, @NL80211_ATTR_FRAME={0x36c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @device_b, @random="08bb0fff8e6c", {0x1, 0x40}}, {0x8, 0x0, 0x1, 0x0, 0x3f}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @from_mac, @device_a, @random="c47b8429b192", {0x0, 0x81}}, {0x3, 0x0, 0x0, 0x1, 0x7c}}}, @ver_80211n={0x0, 0x4393, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x72, "7d1f60b58c797bf8c37d724984ca5b0adbddfab4d8a8de7dcf25d0823ebf8ede3342bca9dd1136752d9a8a15d545e936bf74c645c56b1f31a488e2fbfe0f33af90d1f5ca8f6f117a615a8ed5054ffab5b27b5dedcbf51acdc97c07a66384d5d193f956cca35d7dcd85f0cf5e561a146b0872"}, {@broadcast, @device_b, 0xc1, "b1b5a62137dad6673a9c89bab197e8f20e5cbd288319ed5cc31f467225b12a6dda7c18d6d17d4810270079fb1c620346f6e7a4cef2f8e4f23c9db7f7918c8fcf14393e413533b74e82d4d6e0819ee1028eb0854eacf8613e9723b2653a54b494982c24809dd887d028e5870977fc596744fed78c951d324329ebf56d80bef625197fde4a3215fc42978f85008981317171c75393cc8e148864275e36e22de33fd8835733f0a4707da7baa3003746160cfcaf50de084097d54ae41bc1dd6b867c0b"}, {@device_b, @device_a, 0x1e, "3b0a35e5ffa461adef7a7eeb85c407a3e0c2c53f7f29469fa9c6c17c255f"}, {@broadcast, @broadcast, 0xcb, "9e1ed779d42775e47a4253b80b26e3fe5c06b6a28f7415dde72ffc7da2e4254cf37b2a0960870b378a186e8684fa77da897d52fdcdd330e762c7f77ad5c8498238d32a306ba6c0597ea1e3fc7b49d9997275f7829c968381ffa3b3cd816557b14705cd7aa9a2d909dc4b5bf7f07a3450fbcda6caa9aeafedb296d446f426f429f4499990fa03f97ad73f48567346a6eeea6a24a53e539d438f0a36fee8648a1dd8b37d797b1493d2184459cf5bc68e389bd222dbfbeeebee23eb0ca24866ffba16e72e727295d49af9671c"}, {@device_a, @device_b, 0x70, "d28e576d55d9b2342590a5fe74f10111f36246732a5ab8adf978b873400f2c9e55fc1c48eaeb3e0fe8073c3a02021e35435fe0ded21924be85fa98a8bbb803bd8ba999d3b021b2a545094bc492779a04164118b094b3c5ea42787244d2c38c1be4c1bac0f0747fb8afbf6c136d95b8a9"}, {@device_b, @device_b, 0x47, "e16cde4e9142f09cfdcad07efcfd96c1f525867489d586474780511b6d93c9419adf1a640872ce0109e895d15f24bc398c776b538eb0fd8235ce57b4d1d9b57e3eb39bbd0baadb"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x424}, 0x1, 0x0, 0x0, 0x4004010}, 0x44001) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:20:24 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) r8 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r8}) 19:20:24 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) r9 = clone3(&(0x7f00000008c0)={0x410b000, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/152, 0x98, &(0x7f0000000800)=""/107, &(0x7f0000000880)=[r3, r4, r5, r4, r3, r4, r4, r4], 0x8}, 0x58) pidfd_open(r9, 0x0) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000940)=""/13) r11 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r11, 0xb) r12 = shmget(0x2, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, r9, r10, 0x400}) 19:20:24 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 109.314620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.334085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:20:25 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) r9 = clone3(&(0x7f00000008c0)={0x410b000, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/152, 0x98, &(0x7f0000000800)=""/107, &(0x7f0000000880)=[r3, r4, r5, r4, r3, r4, r4, r4], 0x8}, 0x58) pidfd_open(r9, 0x0) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000940)=""/13) r11 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r11, 0xb) r12 = shmget(0x2, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, r9, r10, 0x400}) 19:20:33 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44804}, 0x80) socketpair(0x2c, 0xa, 0x7, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1}, @device_b, @random="ecc900c8321e"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000780)=0x2) accept$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) 19:20:33 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x20000) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000007c0)={0x2, 0x13, 0x8, 0x43, "134d5ed6f17d0340d3c9dc3afc00c0074994e3a36ddc1b39038801e554db32bb"}) process_mrelease(r0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000840)=""/79) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000900)=""/4096) 19:20:33 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:20:33 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) r9 = clone3(&(0x7f00000008c0)={0x410b000, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/152, 0x98, &(0x7f0000000800)=""/107, &(0x7f0000000880)=[r3, r4, r5, r4, r3, r4, r4, r4], 0x8}, 0x58) pidfd_open(r9, 0x0) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000940)=""/13) r11 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r11, 0xb) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, r9, r10, 0x400}) 19:20:33 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r9 = syz_open_dev$mouse(&(0x7f0000000d40), 0x400000000, 0x101000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000001240)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x424, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}, @device_a, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x68, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd0f}, @broadcast, @from_mac=@broadcast, @broadcast, {0x9, 0x4}}, {0x3, 0x1, 0x1}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {}, @from_mac=@broadcast, @device_a, @initial, {0x5, 0x5}}, {0xa, 0x0, 0x3}}}, @ver_80211n={0x0, 0xffc, 0x2, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xc, "ae448e0a388873b7952cc80e"}, {@device_a, @device_b}]}}, @NL80211_ATTR_FRAME={0x36c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @device_b, @random="08bb0fff8e6c", {0x1, 0x40}}, {0x8, 0x0, 0x1, 0x0, 0x3f}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @from_mac, @device_a, @random="c47b8429b192", {0x0, 0x81}}, {0x3, 0x0, 0x0, 0x1, 0x7c}}}, @ver_80211n={0x0, 0x4393, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x72, "7d1f60b58c797bf8c37d724984ca5b0adbddfab4d8a8de7dcf25d0823ebf8ede3342bca9dd1136752d9a8a15d545e936bf74c645c56b1f31a488e2fbfe0f33af90d1f5ca8f6f117a615a8ed5054ffab5b27b5dedcbf51acdc97c07a66384d5d193f956cca35d7dcd85f0cf5e561a146b0872"}, {@broadcast, @device_b, 0xc1, "b1b5a62137dad6673a9c89bab197e8f20e5cbd288319ed5cc31f467225b12a6dda7c18d6d17d4810270079fb1c620346f6e7a4cef2f8e4f23c9db7f7918c8fcf14393e413533b74e82d4d6e0819ee1028eb0854eacf8613e9723b2653a54b494982c24809dd887d028e5870977fc596744fed78c951d324329ebf56d80bef625197fde4a3215fc42978f85008981317171c75393cc8e148864275e36e22de33fd8835733f0a4707da7baa3003746160cfcaf50de084097d54ae41bc1dd6b867c0b"}, {@device_b, @device_a, 0x1e, "3b0a35e5ffa461adef7a7eeb85c407a3e0c2c53f7f29469fa9c6c17c255f"}, {@broadcast, @broadcast, 0xcb, "9e1ed779d42775e47a4253b80b26e3fe5c06b6a28f7415dde72ffc7da2e4254cf37b2a0960870b378a186e8684fa77da897d52fdcdd330e762c7f77ad5c8498238d32a306ba6c0597ea1e3fc7b49d9997275f7829c968381ffa3b3cd816557b14705cd7aa9a2d909dc4b5bf7f07a3450fbcda6caa9aeafedb296d446f426f429f4499990fa03f97ad73f48567346a6eeea6a24a53e539d438f0a36fee8648a1dd8b37d797b1493d2184459cf5bc68e389bd222dbfbeeebee23eb0ca24866ffba16e72e727295d49af9671c"}, {@device_a, @device_b, 0x70, "d28e576d55d9b2342590a5fe74f10111f36246732a5ab8adf978b873400f2c9e55fc1c48eaeb3e0fe8073c3a02021e35435fe0ded21924be85fa98a8bbb803bd8ba999d3b021b2a545094bc492779a04164118b094b3c5ea42787244d2c38c1be4c1bac0f0747fb8afbf6c136d95b8a9"}, {@device_b, @device_b, 0x47, "e16cde4e9142f09cfdcad07efcfd96c1f525867489d586474780511b6d93c9419adf1a640872ce0109e895d15f24bc398c776b538eb0fd8235ce57b4d1d9b57e3eb39bbd0baadb"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x424}, 0x1, 0x0, 0x0, 0x4004010}, 0x44001) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:20:33 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) clone3(&(0x7f0000002080)={0x100000200, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940), {0x1d}, &(0x7f0000000980)=""/114, 0x72, &(0x7f0000000a00)=""/182, &(0x7f0000002040)=[r4, r3, r3, r3, r5, r3], 0x6, {r2}}, 0x58) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:20:33 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf89}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd39}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x2000881a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10001}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x200}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x400}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xf512}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x70}}, 0x10) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000940)) 19:20:33 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r10) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x10084}, 0x44800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x56}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x40c0) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:20:33 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) r9 = clone3(&(0x7f00000008c0)={0x410b000, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/152, 0x98, &(0x7f0000000800)=""/107, &(0x7f0000000880)=[r3, r4, r5, r4, r3, r4, r4, r4], 0x8}, 0x58) pidfd_open(r9, 0x0) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000940)=""/13) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, r9, r10, 0x400}) 19:20:33 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r7 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001600)=""/241) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000001700)={0x7, 0x80000001, 0x7, 0x5, 0xcb1, 0x3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:20:33 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) r9 = clone3(&(0x7f00000008c0)={0x410b000, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/152, 0x98, &(0x7f0000000800)=""/107, &(0x7f0000000880)=[r3, r4, r5, r4, r3, r4, r4, r4], 0x8}, 0x58) pidfd_open(r9, 0x0) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000940)=""/13) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, r9, r10, 0x400}) [ 118.219376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.235889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:20:33 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44804}, 0x80) socketpair(0x2c, 0xa, 0x7, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1}, @device_b, @random="ecc900c8321e"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000780)=0x2) accept$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) 19:20:43 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x20000) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000007c0)={0x2, 0x13, 0x8, 0x43, "134d5ed6f17d0340d3c9dc3afc00c0074994e3a36ddc1b39038801e554db32bb"}) process_mrelease(r0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000840)=""/79) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000900)=""/4096) 19:20:43 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) r8 = clone3(&(0x7f00000008c0)={0x410b000, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/152, 0x98, &(0x7f0000000800)=""/107, &(0x7f0000000880)=[r3, r4, r5, r4, r3, r4, r4, r4], 0x8}, 0x58) pidfd_open(r8, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, r8, r9, 0x400}) 19:20:43 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r6 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000001600)=""/241) r7 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r7}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:20:43 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf89}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd39}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x2000881a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10001}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x200}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x400}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xf512}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x70}}, 0x10) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000940)) 19:20:43 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) clone3(&(0x7f0000002080)={0x100000200, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940), {0x1d}, &(0x7f0000000980)=""/114, 0x72, &(0x7f0000000a00)=""/182, &(0x7f0000002040)=[r4, r3, r3, r3, r5, r3], 0x6, {r2}}, 0x58) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:20:43 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44804}, 0x80) socketpair(0x2c, 0xa, 0x7, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1}, @device_b, @random="ecc900c8321e"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000780)=0x2) 19:20:43 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r10) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x10084}, 0x44800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x56}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x40c0) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:20:43 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r9 = syz_open_dev$mouse(&(0x7f0000000d40), 0x400000000, 0x101000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000001240)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x424, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}, @device_a, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x68, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd0f}, @broadcast, @from_mac=@broadcast, @broadcast, {0x9, 0x4}}, {0x3, 0x1, 0x1}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {}, @from_mac=@broadcast, @device_a, @initial, {0x5, 0x5}}, {0xa, 0x0, 0x3}}}, @ver_80211n={0x0, 0xffc, 0x2, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xc, "ae448e0a388873b7952cc80e"}, {@device_a, @device_b}]}}, @NL80211_ATTR_FRAME={0x36c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @device_b, @random="08bb0fff8e6c", {0x1, 0x40}}, {0x8, 0x0, 0x1, 0x0, 0x3f}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @from_mac, @device_a, @random="c47b8429b192", {0x0, 0x81}}, {0x3, 0x0, 0x0, 0x1, 0x7c}}}, @ver_80211n={0x0, 0x4393, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x72, "7d1f60b58c797bf8c37d724984ca5b0adbddfab4d8a8de7dcf25d0823ebf8ede3342bca9dd1136752d9a8a15d545e936bf74c645c56b1f31a488e2fbfe0f33af90d1f5ca8f6f117a615a8ed5054ffab5b27b5dedcbf51acdc97c07a66384d5d193f956cca35d7dcd85f0cf5e561a146b0872"}, {@broadcast, @device_b, 0xc1, "b1b5a62137dad6673a9c89bab197e8f20e5cbd288319ed5cc31f467225b12a6dda7c18d6d17d4810270079fb1c620346f6e7a4cef2f8e4f23c9db7f7918c8fcf14393e413533b74e82d4d6e0819ee1028eb0854eacf8613e9723b2653a54b494982c24809dd887d028e5870977fc596744fed78c951d324329ebf56d80bef625197fde4a3215fc42978f85008981317171c75393cc8e148864275e36e22de33fd8835733f0a4707da7baa3003746160cfcaf50de084097d54ae41bc1dd6b867c0b"}, {@device_b, @device_a, 0x1e, "3b0a35e5ffa461adef7a7eeb85c407a3e0c2c53f7f29469fa9c6c17c255f"}, {@broadcast, @broadcast, 0xcb, "9e1ed779d42775e47a4253b80b26e3fe5c06b6a28f7415dde72ffc7da2e4254cf37b2a0960870b378a186e8684fa77da897d52fdcdd330e762c7f77ad5c8498238d32a306ba6c0597ea1e3fc7b49d9997275f7829c968381ffa3b3cd816557b14705cd7aa9a2d909dc4b5bf7f07a3450fbcda6caa9aeafedb296d446f426f429f4499990fa03f97ad73f48567346a6eeea6a24a53e539d438f0a36fee8648a1dd8b37d797b1493d2184459cf5bc68e389bd222dbfbeeebee23eb0ca24866ffba16e72e727295d49af9671c"}, {@device_a, @device_b, 0x70, "d28e576d55d9b2342590a5fe74f10111f36246732a5ab8adf978b873400f2c9e55fc1c48eaeb3e0fe8073c3a02021e35435fe0ded21924be85fa98a8bbb803bd8ba999d3b021b2a545094bc492779a04164118b094b3c5ea42787244d2c38c1be4c1bac0f0747fb8afbf6c136d95b8a9"}, {@device_b, @device_b, 0x47, "e16cde4e9142f09cfdcad07efcfd96c1f525867489d586474780511b6d93c9419adf1a640872ce0109e895d15f24bc398c776b538eb0fd8235ce57b4d1d9b57e3eb39bbd0baadb"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x424}, 0x1, 0x0, 0x0, 0x4004010}, 0x44001) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:20:43 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) r8 = clone3(&(0x7f00000008c0)={0x410b000, &(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/152, 0x98, &(0x7f0000000800)=""/107, &(0x7f0000000880)=[r3, r4, r5, r4, r3, r4, r4, r4], 0x8}, 0x58) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, r8, r9, 0x400}) 19:20:43 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) r6 = syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000001600)=""/241) r7 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r7}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 128.042605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 19:20:43 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x20000) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000007c0)={0x2, 0x13, 0x8, 0x43, "134d5ed6f17d0340d3c9dc3afc00c0074994e3a36ddc1b39038801e554db32bb"}) process_mrelease(r0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000840)=""/79) [ 128.061225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:20:43 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000640)=""/23) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:20:43 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf89}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd39}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x2000881a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10001}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x200}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x400}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xf512}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x70}}, 0x10) 19:20:43 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r10) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x10084}, 0x44800) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r9) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:20:43 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) shmget$private(0x0, 0x2000, 0x106a1415789e4a8b, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:20:43 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44804}, 0x80) socketpair(0x2c, 0xa, 0x7, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1}, @device_b, @random="ecc900c8321e"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) 19:20:43 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00)=0x0, &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) clone3(&(0x7f0000002080)={0x100000200, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940), {0x1d}, &(0x7f0000000980)=""/114, 0x72, &(0x7f0000000a00)=""/182, &(0x7f0000002040)=[r4, r3, r3, r3, r5, r3], 0x6, {r2}}, 0x58) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:20:52 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x20000) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000007c0)={0x2, 0x13, 0x8, 0x43, "134d5ed6f17d0340d3c9dc3afc00c0074994e3a36ddc1b39038801e554db32bb"}) process_mrelease(r0, 0x0) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:20:52 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r9 = syz_open_dev$mouse(&(0x7f0000000d40), 0x400000000, 0x101000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000001240)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x424, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}, @device_a, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x68, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd0f}, @broadcast, @from_mac=@broadcast, @broadcast, {0x9, 0x4}}, {0x3, 0x1, 0x1}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {}, @from_mac=@broadcast, @device_a, @initial, {0x5, 0x5}}, {0xa, 0x0, 0x3}}}, @ver_80211n={0x0, 0xffc, 0x2, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xc, "ae448e0a388873b7952cc80e"}, {@device_a, @device_b}]}}, @NL80211_ATTR_FRAME={0x36c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @device_b, @random="08bb0fff8e6c", {0x1, 0x40}}, {0x8, 0x0, 0x1, 0x0, 0x3f}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @from_mac, @device_a, @random="c47b8429b192", {0x0, 0x81}}, {0x3, 0x0, 0x0, 0x1, 0x7c}}}, @ver_80211n={0x0, 0x4393, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x72, "7d1f60b58c797bf8c37d724984ca5b0adbddfab4d8a8de7dcf25d0823ebf8ede3342bca9dd1136752d9a8a15d545e936bf74c645c56b1f31a488e2fbfe0f33af90d1f5ca8f6f117a615a8ed5054ffab5b27b5dedcbf51acdc97c07a66384d5d193f956cca35d7dcd85f0cf5e561a146b0872"}, {@broadcast, @device_b, 0xc1, "b1b5a62137dad6673a9c89bab197e8f20e5cbd288319ed5cc31f467225b12a6dda7c18d6d17d4810270079fb1c620346f6e7a4cef2f8e4f23c9db7f7918c8fcf14393e413533b74e82d4d6e0819ee1028eb0854eacf8613e9723b2653a54b494982c24809dd887d028e5870977fc596744fed78c951d324329ebf56d80bef625197fde4a3215fc42978f85008981317171c75393cc8e148864275e36e22de33fd8835733f0a4707da7baa3003746160cfcaf50de084097d54ae41bc1dd6b867c0b"}, {@device_b, @device_a, 0x1e, "3b0a35e5ffa461adef7a7eeb85c407a3e0c2c53f7f29469fa9c6c17c255f"}, {@broadcast, @broadcast, 0xcb, "9e1ed779d42775e47a4253b80b26e3fe5c06b6a28f7415dde72ffc7da2e4254cf37b2a0960870b378a186e8684fa77da897d52fdcdd330e762c7f77ad5c8498238d32a306ba6c0597ea1e3fc7b49d9997275f7829c968381ffa3b3cd816557b14705cd7aa9a2d909dc4b5bf7f07a3450fbcda6caa9aeafedb296d446f426f429f4499990fa03f97ad73f48567346a6eeea6a24a53e539d438f0a36fee8648a1dd8b37d797b1493d2184459cf5bc68e389bd222dbfbeeebee23eb0ca24866ffba16e72e727295d49af9671c"}, {@device_a, @device_b, 0x70, "d28e576d55d9b2342590a5fe74f10111f36246732a5ab8adf978b873400f2c9e55fc1c48eaeb3e0fe8073c3a02021e35435fe0ded21924be85fa98a8bbb803bd8ba999d3b021b2a545094bc492779a04164118b094b3c5ea42787244d2c38c1be4c1bac0f0747fb8afbf6c136d95b8a9"}, {@device_b, @device_b, 0x47, "e16cde4e9142f09cfdcad07efcfd96c1f525867489d586474780511b6d93c9419adf1a640872ce0109e895d15f24bc398c776b538eb0fd8235ce57b4d1d9b57e3eb39bbd0baadb"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x424}, 0x1, 0x0, 0x0, 0x4004010}, 0x44001) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:20:52 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:20:52 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r10) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x10084}, 0x44800) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r9) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:20:52 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf89}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd39}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x2000881a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10001}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x200}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x400}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xf512}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x70}}, 0x10) 19:20:52 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44804}, 0x80) socketpair(0x2c, 0xa, 0x7, &(0x7f0000000640)) 19:20:52 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:20:52 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3219}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:20:52 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) pipe(&(0x7f00000004c0)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:20:52 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) clone3(&(0x7f0000001fc0)={0x2d272b1412384bbb, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40), {0x25}, &(0x7f0000000e80)=""/4096, 0x1000, &(0x7f0000001e80)=""/211, &(0x7f0000001f80)=[r3, r3], 0x2, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) [ 137.131614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.145425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:21:02 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44804}, 0x80) 19:21:02 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x44804) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:02 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:02 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "2174077cad1d75eb1534495e04bc5a37bd7cec3e81d163754fcf84d55b61b37b73213b2638444ed84ccf8d081cfa30717524c6baea9b862bd340f0f660734c833c3c8110d96552b9b952f20845f864ad6b11b12dad964dfe251b2c59f8c3a760b93aabc2614c3d899a101227ee1b79b657a99bd1db96abd618508be345ff9d324f3aeec72f3075ed80757163e9bf2588cc330a5e59e68f767215b4cb3d1fc3f04bd403c82314c3cb6fd76c39f2538d66591095087bd1ae9b14c9384a1e701404e12a265eebac12a891a1fd4b2e25c66ad78976388e6ff663b8b1d82160ea53622f2b80fd9085f4f99c8d610218838c88226a790eded423d92072"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r9 = syz_open_dev$mouse(&(0x7f0000000d40), 0x400000000, 0x101000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000001240)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x424, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}, @device_a, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x68, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd0f}, @broadcast, @from_mac=@broadcast, @broadcast, {0x9, 0x4}}, {0x3, 0x1, 0x1}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {}, @from_mac=@broadcast, @device_a, @initial, {0x5, 0x5}}, {0xa, 0x0, 0x3}}}, @ver_80211n={0x0, 0xffc, 0x2, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xc, "ae448e0a388873b7952cc80e"}, {@device_a, @device_b}]}}, @NL80211_ATTR_FRAME={0x36c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @device_b, @random="08bb0fff8e6c", {0x1, 0x40}}, {0x8, 0x0, 0x1, 0x0, 0x3f}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @from_mac, @device_a, @random="c47b8429b192", {0x0, 0x81}}, {0x3, 0x0, 0x0, 0x1, 0x7c}}}, @ver_80211n={0x0, 0x4393, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x72, "7d1f60b58c797bf8c37d724984ca5b0adbddfab4d8a8de7dcf25d0823ebf8ede3342bca9dd1136752d9a8a15d545e936bf74c645c56b1f31a488e2fbfe0f33af90d1f5ca8f6f117a615a8ed5054ffab5b27b5dedcbf51acdc97c07a66384d5d193f956cca35d7dcd85f0cf5e561a146b0872"}, {@broadcast, @device_b, 0xc1, "b1b5a62137dad6673a9c89bab197e8f20e5cbd288319ed5cc31f467225b12a6dda7c18d6d17d4810270079fb1c620346f6e7a4cef2f8e4f23c9db7f7918c8fcf14393e413533b74e82d4d6e0819ee1028eb0854eacf8613e9723b2653a54b494982c24809dd887d028e5870977fc596744fed78c951d324329ebf56d80bef625197fde4a3215fc42978f85008981317171c75393cc8e148864275e36e22de33fd8835733f0a4707da7baa3003746160cfcaf50de084097d54ae41bc1dd6b867c0b"}, {@device_b, @device_a, 0x1e, "3b0a35e5ffa461adef7a7eeb85c407a3e0c2c53f7f29469fa9c6c17c255f"}, {@broadcast, @broadcast, 0xcb, "9e1ed779d42775e47a4253b80b26e3fe5c06b6a28f7415dde72ffc7da2e4254cf37b2a0960870b378a186e8684fa77da897d52fdcdd330e762c7f77ad5c8498238d32a306ba6c0597ea1e3fc7b49d9997275f7829c968381ffa3b3cd816557b14705cd7aa9a2d909dc4b5bf7f07a3450fbcda6caa9aeafedb296d446f426f429f4499990fa03f97ad73f48567346a6eeea6a24a53e539d438f0a36fee8648a1dd8b37d797b1493d2184459cf5bc68e389bd222dbfbeeebee23eb0ca24866ffba16e72e727295d49af9671c"}, {@device_a, @device_b, 0x70, "d28e576d55d9b2342590a5fe74f10111f36246732a5ab8adf978b873400f2c9e55fc1c48eaeb3e0fe8073c3a02021e35435fe0ded21924be85fa98a8bbb803bd8ba999d3b021b2a545094bc492779a04164118b094b3c5ea42787244d2c38c1be4c1bac0f0747fb8afbf6c136d95b8a9"}, {@device_b, @device_b, 0x47, "e16cde4e9142f09cfdcad07efcfd96c1f525867489d586474780511b6d93c9419adf1a640872ce0109e895d15f24bc398c776b538eb0fd8235ce57b4d1d9b57e3eb39bbd0baadb"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x424}, 0x1, 0x0, 0x0, 0x4004010}, 0x44001) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:21:02 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x20000) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000007c0)={0x2, 0x13, 0x8, 0x43, "134d5ed6f17d0340d3c9dc3afc00c0074994e3a36ddc1b39038801e554db32bb"}) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:02 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf89}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd39}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x2000881a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10001}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x200}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x400}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xf512}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x70}}, 0x10) 19:21:02 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r10) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x10084}, 0x44800) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:02 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:02 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) [ 146.973963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.977252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:21:02 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:02 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) syz_open_dev$evdev(&(0x7f00000015c0), 0x1, 0x212000) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:02 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x8000, 0x1, &(0x7f0000ff8000/0x8000)=nil) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:02 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:02 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf89}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd39}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x2000881a) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) 19:21:02 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x20000) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:02 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() r3 = clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r4, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r2, r1, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x7fff, 0x40, r3, r5, 0x4}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:02 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r9) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:02 executing program 3: r0 = geteuid() r1 = getuid() r2 = getegid() clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x3, r0, 0xffffffffffffffff, r1, r2, 0x80, 0x7fff}, 0x5, 0x1000, 0x9, 0xffffffff, r3, 0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r2, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:11 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:11 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:11 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:11 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:11 executing program 3: r0 = geteuid() getuid() r1 = getegid() clone3(&(0x7f0000000240)={0x48011000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x35}, &(0x7f00000000c0)=""/143, 0x8f, &(0x7f0000000180)=""/102, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r1, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:11 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) 19:21:11 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000700)) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:11 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r9 = syz_open_dev$mouse(&(0x7f0000000d40), 0x400000000, 0x101000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000001240)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x424, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}, @device_a, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x68, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd0f}, @broadcast, @from_mac=@broadcast, @broadcast, {0x9, 0x4}}, {0x3, 0x1, 0x1}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {}, @from_mac=@broadcast, @device_a, @initial, {0x5, 0x5}}, {0xa, 0x0, 0x3}}}, @ver_80211n={0x0, 0xffc, 0x2, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xc, "ae448e0a388873b7952cc80e"}, {@device_a, @device_b}]}}, @NL80211_ATTR_FRAME={0x36c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @device_b, @random="08bb0fff8e6c", {0x1, 0x40}}, {0x8, 0x0, 0x1, 0x0, 0x3f}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @from_mac, @device_a, @random="c47b8429b192", {0x0, 0x81}}, {0x3, 0x0, 0x0, 0x1, 0x7c}}}, @ver_80211n={0x0, 0x4393, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x72, "7d1f60b58c797bf8c37d724984ca5b0adbddfab4d8a8de7dcf25d0823ebf8ede3342bca9dd1136752d9a8a15d545e936bf74c645c56b1f31a488e2fbfe0f33af90d1f5ca8f6f117a615a8ed5054ffab5b27b5dedcbf51acdc97c07a66384d5d193f956cca35d7dcd85f0cf5e561a146b0872"}, {@broadcast, @device_b, 0xc1, "b1b5a62137dad6673a9c89bab197e8f20e5cbd288319ed5cc31f467225b12a6dda7c18d6d17d4810270079fb1c620346f6e7a4cef2f8e4f23c9db7f7918c8fcf14393e413533b74e82d4d6e0819ee1028eb0854eacf8613e9723b2653a54b494982c24809dd887d028e5870977fc596744fed78c951d324329ebf56d80bef625197fde4a3215fc42978f85008981317171c75393cc8e148864275e36e22de33fd8835733f0a4707da7baa3003746160cfcaf50de084097d54ae41bc1dd6b867c0b"}, {@device_b, @device_a, 0x1e, "3b0a35e5ffa461adef7a7eeb85c407a3e0c2c53f7f29469fa9c6c17c255f"}, {@broadcast, @broadcast, 0xcb, "9e1ed779d42775e47a4253b80b26e3fe5c06b6a28f7415dde72ffc7da2e4254cf37b2a0960870b378a186e8684fa77da897d52fdcdd330e762c7f77ad5c8498238d32a306ba6c0597ea1e3fc7b49d9997275f7829c968381ffa3b3cd816557b14705cd7aa9a2d909dc4b5bf7f07a3450fbcda6caa9aeafedb296d446f426f429f4499990fa03f97ad73f48567346a6eeea6a24a53e539d438f0a36fee8648a1dd8b37d797b1493d2184459cf5bc68e389bd222dbfbeeebee23eb0ca24866ffba16e72e727295d49af9671c"}, {@device_a, @device_b, 0x70, "d28e576d55d9b2342590a5fe74f10111f36246732a5ab8adf978b873400f2c9e55fc1c48eaeb3e0fe8073c3a02021e35435fe0ded21924be85fa98a8bbb803bd8ba999d3b021b2a545094bc492779a04164118b094b3c5ea42787244d2c38c1be4c1bac0f0747fb8afbf6c136d95b8a9"}, {@device_b, @device_b, 0x47, "e16cde4e9142f09cfdcad07efcfd96c1f525867489d586474780511b6d93c9419adf1a640872ce0109e895d15f24bc398c776b538eb0fd8235ce57b4d1d9b57e3eb39bbd0baadb"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x424}, 0x1, 0x0, 0x0, 0x4004010}, 0x44001) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:21:11 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:12 executing program 3: r0 = geteuid() getuid() r1 = getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, r1, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) [ 156.344362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.356334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:21:12 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:12 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:12 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:12 executing program 3: r0 = geteuid() getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, 0x0, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:12 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000014c0)=""/239) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:12 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008c40) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:20 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:20 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:20 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r9 = syz_open_dev$mouse(&(0x7f0000000d40), 0x400000000, 0x101000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000001240)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x424, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x5}, @device_a, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x68, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd0f}, @broadcast, @from_mac=@broadcast, @broadcast, {0x9, 0x4}}, {0x3, 0x1, 0x1}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {}, @from_mac=@broadcast, @device_a, @initial, {0x5, 0x5}}, {0xa, 0x0, 0x3}}}, @ver_80211n={0x0, 0xffc, 0x2, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xc, "ae448e0a388873b7952cc80e"}, {@device_a, @device_b}]}}, @NL80211_ATTR_FRAME={0x36c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @device_b, @random="08bb0fff8e6c", {0x1, 0x40}}, {0x8, 0x0, 0x1, 0x0, 0x3f}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @from_mac, @device_a, @random="c47b8429b192", {0x0, 0x81}}, {0x3, 0x0, 0x0, 0x1, 0x7c}}}, @ver_80211n={0x0, 0x4393, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x72, "7d1f60b58c797bf8c37d724984ca5b0adbddfab4d8a8de7dcf25d0823ebf8ede3342bca9dd1136752d9a8a15d545e936bf74c645c56b1f31a488e2fbfe0f33af90d1f5ca8f6f117a615a8ed5054ffab5b27b5dedcbf51acdc97c07a66384d5d193f956cca35d7dcd85f0cf5e561a146b0872"}, {@broadcast, @device_b, 0xc1, "b1b5a62137dad6673a9c89bab197e8f20e5cbd288319ed5cc31f467225b12a6dda7c18d6d17d4810270079fb1c620346f6e7a4cef2f8e4f23c9db7f7918c8fcf14393e413533b74e82d4d6e0819ee1028eb0854eacf8613e9723b2653a54b494982c24809dd887d028e5870977fc596744fed78c951d324329ebf56d80bef625197fde4a3215fc42978f85008981317171c75393cc8e148864275e36e22de33fd8835733f0a4707da7baa3003746160cfcaf50de084097d54ae41bc1dd6b867c0b"}, {@device_b, @device_a, 0x1e, "3b0a35e5ffa461adef7a7eeb85c407a3e0c2c53f7f29469fa9c6c17c255f"}, {@broadcast, @broadcast, 0xcb, "9e1ed779d42775e47a4253b80b26e3fe5c06b6a28f7415dde72ffc7da2e4254cf37b2a0960870b378a186e8684fa77da897d52fdcdd330e762c7f77ad5c8498238d32a306ba6c0597ea1e3fc7b49d9997275f7829c968381ffa3b3cd816557b14705cd7aa9a2d909dc4b5bf7f07a3450fbcda6caa9aeafedb296d446f426f429f4499990fa03f97ad73f48567346a6eeea6a24a53e539d438f0a36fee8648a1dd8b37d797b1493d2184459cf5bc68e389bd222dbfbeeebee23eb0ca24866ffba16e72e727295d49af9671c"}, {@device_a, @device_b, 0x70, "d28e576d55d9b2342590a5fe74f10111f36246732a5ab8adf978b873400f2c9e55fc1c48eaeb3e0fe8073c3a02021e35435fe0ded21924be85fa98a8bbb803bd8ba999d3b021b2a545094bc492779a04164118b094b3c5ea42787244d2c38c1be4c1bac0f0747fb8afbf6c136d95b8a9"}, {@device_b, @device_b, 0x47, "e16cde4e9142f09cfdcad07efcfd96c1f525867489d586474780511b6d93c9419adf1a640872ce0109e895d15f24bc398c776b538eb0fd8235ce57b4d1d9b57e3eb39bbd0baadb"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x424}, 0x1, 0x0, 0x0, 0x4004010}, 0x44001) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:21:20 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/218, 0xda}) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:20 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:20 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000600)=0xfce2) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:20 executing program 3: r0 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, r0, 0xffffffffffffffff, 0x0, 0x0, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:20 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) 19:21:20 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:20 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x198, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:20 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) syz_open_dev$evdev(&(0x7f00000005c0), 0x5, 0x441) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:20 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) pidfd_open(r3, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:20 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) 19:21:20 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 164.992839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.993833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:21:20 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd4c, 0x7d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:20 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x8800, &(0x7f0000001480)={0xa, 0x101, 0x1a0000, {r5}}, 0x20) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:20 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:20 executing program 3: shmctl$IPC_SET(0x0, 0x1, 0x0) 19:21:29 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) pipe(&(0x7f0000000540)) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) 19:21:29 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "2174077cad1d75eb1534495e04bc5a37bd7cec3e81d163754fcf84d55b61b37b73213b2638444ed84ccf8d081cfa30717524c6baea9b862bd340f0f660734c833c3c8110d96552b9b952f20845f864ad6b11b12dad964dfe251b2c59f8c3a760b93aabc2614c3d899a101227ee1b79b657a99bd1db96abd618508be345ff9d324f3aeec72f3075ed80757163e9bf2588cc330a5e59e68f767215b4cb3d1fc3f04bd403c82314c3cb6fd76c39f2538d66591095087bd1ae9b14c9384a1e701404e12a265eebac12a891a1fd4b2e25c66ad78976388e6ff663b8b1d82160ea53622f2b80fd9085f4f99c8d610218838c88226a790eded423d92072"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_open_dev$mouse(&(0x7f0000000d40), 0x400000000, 0x101000) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:21:29 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:29 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:29 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:29 executing program 3: shmctl$IPC_SET(0x0, 0x1, 0x0) 19:21:29 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000500)=""/131) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:29 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:29 executing program 3: shmctl$IPC_SET(0x0, 0x1, 0x0) 19:21:29 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/24) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:29 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:29 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r6 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r5}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r6}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 174.236855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.246416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:21:30 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:30 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x416001) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:30 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) 19:21:30 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:39 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:39 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, 0x0, 0xffffffffffffffff}, 0x1000, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:39 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:39 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) r0 = syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000440)=""/34) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:39 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() ptrace$peekuser(0x3, r3, 0x3) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:39 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0xf1, 0x200, 0x7, 0x5, 0x401, 0x3, 0x80000001}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) 19:21:39 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:39 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:21:39 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:39 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:39 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x1f, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:39 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:39 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) syz_open_dev$mouse(&(0x7f0000000400), 0xffff, 0x200000) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:39 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) [ 184.070162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.071109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:21:39 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r5 = pidfd_getfd(r3, r4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) 19:21:39 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:39 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) [ 187.835612] Bluetooth: hci7: command 0x0406 tx timeout [ 187.836696] Bluetooth: hci2: command 0x0406 tx timeout [ 187.837998] Bluetooth: hci3: command 0x0406 tx timeout [ 187.838945] Bluetooth: hci5: command 0x0406 tx timeout [ 187.838987] Bluetooth: hci6: command 0x0406 tx timeout [ 187.839015] Bluetooth: hci0: command 0x0406 tx timeout [ 187.840070] Bluetooth: hci1: command 0x0406 tx timeout [ 187.840988] Bluetooth: hci4: command 0x0406 tx timeout 19:21:48 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x5c79, 0x80, 0x0, 0x0, 0x400}) 19:21:48 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340)={0x11, 0x0, 0x0}, &(0x7f0000001380)=0x14) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:48 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:21:48 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:48 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x400, 0xd52, 0x80000000, 0x5, 0xfff, 0x2}, 0x1c) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:48 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:48 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:21:48 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000340)=""/174) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:48 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x400}) 19:21:48 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/139) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:48 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:48 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) socket$packet(0x11, 0x2, 0x300) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:49 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}) [ 193.446517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.448574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:21:57 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:57 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:21:57 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:21:57 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:21:57 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a40)={{0x3, 0x0, 0xffffffffffffffff}}) 19:21:57 executing program 1: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:57 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:21:57 executing program 1: syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x24040) 19:21:57 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/235) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:57 executing program 1: syz_open_dev$mouse(0x0, 0x5, 0x24040) 19:21:57 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x3, 0x41, &(0x7f00000000c0)="9982f6cc7ebe2a7505a809c4d34840900103799e35a2bba7fec6827cf8fde2d68f25f3ec490fceca13dd649ffc60eaffc3102e512a8dd5f320bbcbef3c42afa6b5"}) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:57 executing program 1: syz_open_dev$mouse(0x0, 0x5, 0x24040) [ 201.986172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.990787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:21:57 executing program 5: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/165) syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:21:57 executing program 1: syz_open_dev$mouse(0x0, 0x5, 0x24040) 19:21:57 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) r2 = pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0)=r3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:21:57 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:21:57 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:06 executing program 1: syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x24040) 19:22:06 executing program 5: syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x0) 19:22:06 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) pidfd_getfd(r1, r0, 0x0) pipe(&(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:06 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:06 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:06 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:06 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "2174077cad1d75eb1534495e04bc5a37bd7cec3e81d163754fcf84d55b61b37b73213b2638444ed84ccf8d081cfa30717524c6baea9b862bd340f0f660734c833c3c8110d96552b9b952f20845f864ad6b11b12dad964dfe251b2c59f8c3a760b93aabc2614c3d899a101227ee1b79b657a99bd1db96abd618508be345ff9d324f3aeec72f3075ed80757163e9bf2588cc330a5e59e68f767215b4cb3d1fc3f04bd403c82314c3cb6fd76c39f2538d66591095087bd1ae9b14c9384a1e701404e12a265eebac12a891a1fd4b2e25c66ad78976388e6ff663b8b1d82160ea53622f2b80fd9085f4f99c8d610218838c88226a790eded423d92072"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:06 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) r3 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:06 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:06 executing program 1: syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x0) 19:22:06 executing program 5: syz_open_dev$mouse(0x0, 0x8, 0x0) 19:22:06 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 210.909870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.921277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:22:06 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) pidfd_getfd(r1, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:06 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) r3 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:06 executing program 1: syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x0) 19:22:06 executing program 5: syz_open_dev$mouse(0x0, 0x8, 0x0) 19:22:06 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/103) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:15 executing program 1: syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x0) 19:22:15 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) 19:22:15 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:15 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:15 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:15 executing program 5: syz_open_dev$mouse(0x0, 0x8, 0x0) 19:22:15 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:15 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004810}, 0xc840) r3 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) [ 219.484731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.490137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:22:15 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:15 executing program 5: syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x0) 19:22:15 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:15 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) 19:22:15 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x4, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xc}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80d5) r3 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:15 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:15 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:15 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:15 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) 19:22:15 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000480), 0x2, &(0x7f0000000500)) r3 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:15 executing program 5: syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x0) 19:22:23 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:23 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:23 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) r3 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:23 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:23 executing program 5: syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x0) 19:22:23 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:23 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:23 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:23 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:23 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) [ 227.840895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.842797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:22:23 executing program 5: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:23 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:23 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) r1 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) io_uring_setup(0x1401, &(0x7f0000000300)={0x0, 0x65b9, 0x0, 0x3, 0x27c, 0x0, r1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:23 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:23 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:23 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = syz_open_dev$mouse(&(0x7f0000000440), 0x0, 0x8000) r3 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r3, r3, r3, r3, r3, r3], 0x6, {r2}}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) [ 228.030533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.031438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:22:23 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) r5 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r4}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r5}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:23 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbe7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb4}, @NL80211_ATTR_WIPHY_NAME={0x14}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:23 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:23 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) accept$packet(r0, &(0x7f0000001340), &(0x7f0000001380)=0x14) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:23 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r2, r2, r2, r2, r2, r2], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:23 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:23 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:32 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x4, 0x7ff, 0x3, 0x1f, 0x20}) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:32 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:32 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:32 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) syz_open_dev$mouse(&(0x7f00000002c0), 0x8001, 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:32 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) r2 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r2, r2, r2, r2, r2, r2], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:32 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:32 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "2174077cad1d75eb1534495e04bc5a37bd7cec3e81d163754fcf84d55b61b37b73213b2638444ed84ccf8d081cfa30717524c6baea9b862bd340f0f660734c833c3c8110d96552b9b952f20845f864ad6b11b12dad964dfe251b2c59f8c3a760b93aabc2614c3d899a101227ee1b79b657a99bd1db96abd618508be345ff9d324f3aeec72f3075ed80757163e9bf2588cc330a5e59e68f767215b4cb3d1fc3f04bd403c82314c3cb6fd76c39f2538d66591095087bd1ae9b14c9384a1e701404e12a265eebac12a891a1fd4b2e25c66ad78976388e6ff663b8b1d82160ea53622f2b80fd9085f4f99c8d610218838c88226a790eded423d92072"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:32 executing program 5: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:32 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:32 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) [ 237.113276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.139218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.158057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.171060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:22:42 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:42 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) r2 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r2, r2, r2, r2, r2, r2], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:42 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:42 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:42 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:42 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000012c0)=0x5) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:42 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:42 executing program 5: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) [ 246.905849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.910889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.955469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.959436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:22:51 executing program 5: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "2174077cad1d75eb1534495e04bc5a37bd7cec3e81d163754fcf84d55b61b37b73213b2638444ed84ccf8d081cfa30717524c6baea9b862bd340f0f660734c833c3c8110d96552b9b952f20845f864ad6b11b12dad964dfe251b2c59f8c3a760b93aabc2614c3d899a101227ee1b79b657a99bd1db96abd618508be345ff9d324f3aeec72f3075ed80757163e9bf2588cc330a5e59e68f767215b4cb3d1fc3f04bd403c82314c3cb6fd76c39f2538d66591095087bd1ae9b14c9384a1e701404e12a265eebac12a891a1fd4b2e25c66ad78976388e6ff663b8b1d82160ea53622f2b80fd9085f4f99c8d610218838c88226a790eded423d92072"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:51 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) r3 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r3}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:51 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:51 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:51 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:51 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:51 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:51 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) wait4(0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) r2 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r2, r2, r2, r2, r2, r2], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:51 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) process_madvise(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="6d3e395bd6d3e6d892ccb681647266feb80d12edff94480a59b1500c8cf8b96ce1b042ed7599435246561aa6e5b9a887f6835defd04e56db74ced83a660eb8c0b99376cb32ddbfc99d230d", 0x4b}, {&(0x7f0000000200)="1ae308ed003cecefb967e6ff5d0d311adeaf133c2464e259c970a87e67eac80fc135dec1e61076e2a5941616dcb1a561f5f4b5de586fe78e7fd942251dbf280909558c8c7f00776452a725b9955fa9715c5ec14f46274718f2e4ce", 0x5b}], 0x2, 0xc, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r2 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r2, r2, r2, r2, r2, r2], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:51 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:51 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) [ 256.226097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 19:22:51 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r3 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r3}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:51 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 256.248157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.249203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.280019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:22:51 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 19:22:52 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r1 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r1, r1, r1, r1, r1, r1], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:52 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:59 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:22:59 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:59 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:59 executing program 5: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:22:59 executing program 0: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r1 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r1, r1, r1, r1, r1, r1], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:59 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) r2 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r2}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:59 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 19:22:59 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:22:59 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:59 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 19:22:59 executing program 0: pidfd_open(0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r0 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r0, r0, r0, r0, r0, r0], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:59 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 263.916153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.917075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:22:59 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:22:59 executing program 4: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r1 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r1, r1, r1, r1, r1, r1], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:22:59 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r2}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 263.969260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.972832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.019263] [ 264.019454] ===================================== [ 264.019833] WARNING: bad unlock balance detected! [ 264.020205] 6.19.0-rc5-next-20260116 #1 Not tainted [ 264.020594] ------------------------------------- [ 264.020965] syz-executor.3/4976 is trying to release lock (rcu_read_lock) at: [ 264.021537] [] __wait_on_freeing_inode+0x105/0x350 [ 264.022048] but there are no more locks to release! [ 264.022436] [ 264.022436] other info that might help us debug this: [ 264.022937] 4 locks held by syz-executor.3/4976: [ 264.023305] #0: ffff88800fa083f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 264.023992] #1: ffff88801bb6f640 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 264.025086] #2: ffff88800fa0c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 264.026790] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 264.028511] [ 264.028511] stack backtrace: [ 264.029635] CPU: 1 UID: 0 PID: 4976 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 264.029649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 264.029657] Call Trace: [ 264.029661] [ 264.029665] dump_stack_lvl+0xca/0x120 [ 264.029698] ? __wait_on_freeing_inode+0x105/0x350 [ 264.029712] print_unlock_imbalance_bug+0x118/0x130 [ 264.029727] ? __wait_on_freeing_inode+0x105/0x350 [ 264.029742] lock_release+0x1ee/0x270 [ 264.029756] __wait_on_freeing_inode+0x10a/0x350 [ 264.029771] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 264.029786] ? __pfx_var_wake_function+0x10/0x10 [ 264.029803] ? lock_is_held_type+0x9e/0x120 [ 264.029815] insert_inode_locked+0x25f/0x890 [ 264.029832] __ext4_new_inode+0x223d/0x4cd0 [ 264.029849] ? __pfx___ext4_new_inode+0x10/0x10 [ 264.029863] ? __pfx___dquot_initialize+0x10/0x10 [ 264.029881] ? __pfx_avc_has_perm+0x10/0x10 [ 264.029897] ext4_symlink+0x623/0xb40 [ 264.029916] ? __pfx_ext4_symlink+0x10/0x10 [ 264.029931] ? security_inode_permission+0x72/0xe0 [ 264.029945] vfs_symlink+0x44b/0x840 [ 264.029960] filename_symlinkat+0x158/0x440 [ 264.029975] ? __pfx_filename_symlinkat+0x10/0x10 [ 264.029988] ? strncpy_from_user+0x21b/0x2f0 [ 264.030005] __x64_sys_symlink+0x82/0x110 [ 264.030018] do_syscall_64+0xbf/0x420 [ 264.030031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.030044] RIP: 0033:0x7f0cf0a06427 [ 264.030053] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 264.030064] RSP: 002b:00007ffc0f146818 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 264.030075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0cf0a06427 [ 264.030082] RDX: 00007ffc0f1468f3 RSI: 00007f0cf0a6102f RDI: 00007ffc0f1468e0 [ 264.030090] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc0f1466b0 [ 264.030096] R10: 00007ffc0f146567 R11: 0000000000000206 R12: 0000000000000001 [ 264.030104] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc0f1468e0 [ 264.030114] [ 264.046902] ------------[ cut here ]------------ [ 264.047275] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.3/4976 [ 264.061679] Modules linked in: [ 264.061975] CPU: 1 UID: 0 PID: 4976 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 264.077046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 264.091939] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 264.092401] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 264.109807] RSP: 0018:ffff88804b5af9a0 EFLAGS: 00010286 [ 264.110231] RAX: 00000000ffffffff RBX: ffff88800f4a3700 RCX: ffffffff815660f7 [ 264.125905] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88800f4a3afc [ 264.126467] RBP: ffff88800f4a3700 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 264.141338] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f4a3700 [ 264.156126] R13: 0000000000000001 R14: ffffffff85c0f680 R15: ffff88801b94a938 [ 264.170960] FS: 000055555fb68400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 264.185811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.186267] CR2: 0000001b2cc23000 CR3: 000000000bc8b000 CR4: 0000000000350ef0 [ 264.212893] Call Trace: [ 264.213132] [ 264.230867] __wait_on_freeing_inode+0x10f/0x350 [ 264.248371] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 264.263271] ? __pfx_var_wake_function+0x10/0x10 [ 264.278336] ? lock_is_held_type+0x9e/0x120 [ 264.293235] insert_inode_locked+0x25f/0x890 [ 264.334376] __ext4_new_inode+0x223d/0x4cd0 [ 264.336867] ? __pfx___ext4_new_inode+0x10/0x10 [ 264.338058] ? __pfx___dquot_initialize+0x10/0x10 [ 264.338799] ? __pfx_avc_has_perm+0x10/0x10 [ 264.340532] ext4_symlink+0x623/0xb40 [ 264.342724] ? __pfx_ext4_symlink+0x10/0x10 [ 264.343698] ? security_inode_permission+0x72/0xe0 [ 264.345260] vfs_symlink+0x44b/0x840 [ 264.346543] filename_symlinkat+0x158/0x440 [ 264.347636] ? __pfx_filename_symlinkat+0x10/0x10 [ 264.348331] ? strncpy_from_user+0x21b/0x2f0 [ 264.350172] __x64_sys_symlink+0x82/0x110 [ 264.350892] do_syscall_64+0xbf/0x420 [ 264.351679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.352153] RIP: 0033:0x7f0cf0a06427 [ 264.352536] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 264.353915] RSP: 002b:00007ffc0f146818 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 264.354473] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0cf0a06427 [ 264.355038] RDX: 00007ffc0f1468f3 RSI: 00007f0cf0a6102f RDI: 00007ffc0f1468e0 [ 264.355603] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc0f1466b0 [ 264.356126] R10: 00007ffc0f146567 R11: 0000000000000206 R12: 0000000000000001 [ 264.356690] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc0f1468e0 [ 264.359213] [ 264.359395] irq event stamp: 2975 [ 264.359696] hardirqs last enabled at (2975): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 264.360451] hardirqs last disabled at (2974): [] _raw_spin_lock_irqsave+0x53/0x60 [ 264.361219] softirqs last enabled at (2970): [] kernel_fpu_end+0x59/0x70 [ 264.361940] softirqs last disabled at (2968): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 264.362712] ---[ end trace 0000000000000000 ]--- 19:22:59 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:23:09 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:23:09 executing program 0: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r0 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r0, r0, r0, r0, r0, r0], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:23:09 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:23:09 executing program 4: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r1 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r1, r1, r1, r1, r1, r1], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:23:09 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:23:09 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r2}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:23:09 executing program 7: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001280), 0x9, 0x5bb002) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:23:09 executing program 5: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc, 0x6b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_IE={0x32, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @measure_req={0x26, 0x20, {0x81, 0x27, 0x4, "97b161721702615aab01aefebdaf9c62dbdca968ac8034144782f08a35"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x5, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "20054fc25f28a233a54568200448b2a249dfea145e671376cd448af3f0e302ad66c04b45e1e572724a8ea5af5d581c7e0db04165d54eec945235795edf37aed53c960915ecc6615c43f8bb798cc7702aa8825da5fbb71c2105ae95b92c6a8bce7fea84c31f053767355e8097300718d06d93dd894fe30243f30690c40bae0616074d4c813cab0ffdc9413450764775c7f3fdd68e4b382f8754219fb64f93c144dd774b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0f39648f40f2"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "83717e1972d80872c3e1e117da8393434529dc9249f90e8f6d6c9334fa7e2d71484d2e5cfc291dabbda25661a344da789601c7e4e70ec5bcd875bd36bcbe21b2e076e3bd099e913a47ec5cb0aead2e9b6d6d5a71c27cf38868b7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "1a3f1385"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "d28491019c4f2dcddefaa0d6"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "8b8b065cf965b73d98e2e67f63a3ef6f9c3a02c16d0dde4cd55a238a2414994d6b93fc31b4719f50be660e4f4e03fe3a5f690b5a0d42187ff33778627ed3c83977d2a68e2b41f393193eda13e109bc077fa51c4df6e1a2b6a6aef5884589d891833774fb60b80447ba67627f8d1416e959aa50d54a0789e64c529affd1469c9c92c4942b9b68be9bcb5f760417760d51147440e98f66c22242d12392c8351a2895aa78c1324a2c3658304f371f9e59eee46dd03f1425ef9344e99eae00b2cba440ab76bb940d4d6fc5ad53bac9c8e6078fc4624bd1adafed4bc5aa39f7b704a1150bdbe5426789c4"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "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"}], @NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x55}, @preq={0x82, 0x20, @ext={{}, 0xfd, 0x9, 0x1, @broadcast, 0x2, @device_a, 0x200, 0x7}}, @mic={0x8c, 0x18, {0x2e7, "1779b43bf787", @long="17a1e73d2a1879d8045aa81300a1da36"}}, @supported_rates={0x1, 0x2, [{0x9}, {0x18, 0x1}]}, @measure_req={0x26, 0x4b, {0x5, 0x5, 0xa9, "a38a22edabaf6d69133780bacdebf9e4a1143d3fdb80b337c323c32c9c16b86728a8f5654d2c2ebcf28b29c3a6aa564e56b65f8915464dd35d4a6dd8b6b15571b25051bb782ed264"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbdc3f0fc88614c28}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x8141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20000004) socketpair(0x26, 0xa, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x48}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x2, 0x1}, {0xc}, {0x60}, {0x1c, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x4, 0x5, 0x0, 0x12}, 0x400, 0x1ff, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6e}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xfff, 0x80, 0x1, {0x22, 0xefc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xb2}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x63, 0x2, 0x43, 0x10}, 0x45, &(0x7f0000001440)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x7f, 0x99, 0x8660, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0xae, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7ff96ee, 0xf, 0x4, [0xffc011, 0xfff0]}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x3, 0xf000, 0xfffe, [0xcf, 0x3fc0]}]}, 0x2, [{0x4f, &(0x7f00000014c0)=@string={0x4f, 0x3, "c03478d1b8a890bc61650596e25fbd2add2ae6b0aa5efa483d8134781729a513136699b1a5672ec15aff7005039aa11ec2bb8dd4f9aef4f9982d77940b4d35ecde130b2058db51c884649613b3"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x414}}]}) 19:23:09 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001040)=""/253) r2 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r2}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:23:09 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) [ 273.616716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.636746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:23:09 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) [ 273.671076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.677259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 19:23:09 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) 19:23:09 executing program 0: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r0 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r0, r0, r0, r0, r0, r0], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:23:09 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) r1 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r1}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:23:09 executing program 4: r0 = pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000003c0)=""/106) r1 = gettid() clone3(&(0x7f0000000d40)={0x2000000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0xb}, &(0x7f0000000b80)=""/163, 0xa3, &(0x7f0000000c40)=""/185, &(0x7f0000000d00)=[r1, r1, r1, r1, r1, r1], 0x6}, 0x58) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:23:09 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:23:09 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) r1 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r1}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:23:09 executing program 1: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x9d, 0x4, 0x2}, {0x3, 0x0, 0x1, 0x40}]}, 0x10) io_uring_setup(0x444b, &(0x7f0000000080)={0x0, 0x9108, 0x8, 0x1, 0xac}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100, 0x5, 0x6, 0x1ff}, {0x9, 0x5, 0x3, 0x9}, {0x200, 0x8, 0x76, 0xfffffff9}]}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) 19:23:09 executing program 0: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) gettid() clone3(0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000002100)) process_madvise(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000002240)="838d059abd7b1cd9c13f4410b1830d0a511c5fc81c5a4cf8913c44d717959c49d5dd0fea9bbb4029d3cfb6d4ec4671ddd9a11b307028a46f64343312099d5d4b94fea5e709e493ea6e5c806419737946576e452bd5377479119358032f8e979ba5af6bc0bae9ec493958bc04f960dc2ec14a20e940f318dc53dda7b044af46c2ddf0b91f5da0500c2cda", 0x8a}, {&(0x7f0000002300)="762d5b3be601ab3699e2b70a67b2c5d362ae488aea93748dc5440ade169c25d8faadf67e4f6e640559cb085a42b0e2a20b84785c136833259b260ed1a5a621f75f1cd85362515e735d6236657f9c77e0dcc549a70fbae6a56c31f1bd5d5c015f57b5dc701770d38087c8fb934526b5", 0x6f}], 0x2, 0x9, 0x0) 19:23:09 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) syz_open_dev$evdev(&(0x7f0000001000), 0x4, 0x210000) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) r1 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r1}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) 19:23:09 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/4096) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000001040)=""/253) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001280), 0x2, 0x24000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000012c0)=0x5) connect$packet(r0, &(0x7f00000013c0)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001600)=""/241) r4 = io_uring_setup(0xcba, &(0x7f0000001740)={0x0, 0x4509, 0x4, 0x1, 0x150, 0x0, r3}) io_uring_setup(0x361, &(0x7f00000017c0)={0x0, 0x1e09, 0x8, 0x2, 0x31d, 0x0, r4}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001840)={0x2, 0xefd, 0x8000, 0x1f, 0x4}) VM DIAGNOSIS: 19:22:59 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88804e81f950 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11009d03f2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88804e81f988 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555949fb400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7ccaf89542 CR3=000000001e3af000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =ffffed10016af046 R10=0000000000000065 R11=6572617764726148 R12=0000000000000065 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555fb68400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cc23000 CR3=000000000bc8b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000