Warning: Permanently added '[localhost]:29446' (ECDSA) to the list of known hosts. 2025/08/30 13:29:55 fuzzer started 2025/08/30 13:29:56 dialing manager at localhost:43077 syzkaller login: [ 60.564391] cgroup: Unknown subsys name 'net' [ 60.629547] cgroup: Unknown subsys name 'cpuset' [ 60.643817] cgroup: Unknown subsys name 'rlimit' 2025/08/30 13:30:07 syscalls: 205 2025/08/30 13:30:07 code coverage: enabled 2025/08/30 13:30:07 comparison tracing: enabled 2025/08/30 13:30:07 extra coverage: enabled 2025/08/30 13:30:07 setuid sandbox: enabled 2025/08/30 13:30:07 namespace sandbox: enabled 2025/08/30 13:30:07 Android sandbox: enabled 2025/08/30 13:30:07 fault injection: enabled 2025/08/30 13:30:07 leak checking: enabled 2025/08/30 13:30:07 net packet injection: enabled 2025/08/30 13:30:07 net device setup: enabled 2025/08/30 13:30:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/30 13:30:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/30 13:30:07 USB emulation: enabled 2025/08/30 13:30:07 hci packet injection: enabled 2025/08/30 13:30:07 wifi device emulation: enabled 2025/08/30 13:30:07 802.15.4 emulation: enabled 2025/08/30 13:30:07 fetching corpus: 0, signal 0/0 (executing program) 2025/08/30 13:30:08 starting 8 fuzzer processes 13:30:08 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abbcaf210ccc78fd83261ef786"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "3b687d3e774ebccb"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5000000, 0x50, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000008c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000880)='./file0\x00', 0x47, 0x220100, 0x23456}, 0x1800000) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) 13:30:08 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) socketpair(0x2c, 0xa, 0xcc, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x0) r3 = getegid() r4 = getgid() getgroups(0x3, &(0x7f00000002c0)=[r3, r4, 0x0]) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x5, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) getgid() r8 = getgid() r9 = getegid() getgroups(0x5, &(0x7f0000000480)=[r3, r8, r5, r9, r6]) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000004c0)=0x7fff, &(0x7f0000000500)=0x2) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000540)=0xfb, 0x4) r10 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r10) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000580)={0x5, [0x3, 0x9], 0x1}, 0x10) write$hidraw(r7, &(0x7f00000005c0)="713ce47dd60e40ed072789898a165ab919bbdff38810b6f6e9ccb4b62fcee124cae42f96f5c9ec4b67b0843ec0f86c581b140bc6cc9ddfb085e0a3d9998059eed6dade073ccf9876763ec31ba5d5bd86e7a69b7bed3a3d69f96062237e8e718a28ed315ec4c8a74bd581b11a9a8da5a162936f2aeca8d3d0716c8526f39520463d9af9710325856969f4665828e948dbbb75909ca16e7eb863d45da6a22644c7cca80b79317dc740ac40ff308ab00204ba733cbdb3541e204a423df19acd95545945f088841b5e58b9cc715ce49de76a8709bc4992906ff0407e2517bfd2936bb1a135f55887440e0c086d7b46f7fd6474012e992f69c6216a31060e", 0xfc) 13:30:08 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x2}, {0x3f, 0x1}], "750b7a34b32f8e7b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x6}, {0x30, 0x6}, {0x2}, {0x9, 0x5}], "dc31437c6c820a1f"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xc0, 0x7}, {0xf7, 0x4}, {0x3, 0x5}, {0x15, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x81, 0x5}, {0x2}, {0xff, 0x5}], "91a316be169caacc"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x7}, {0x40, 0x1}, {0x1, 0x3}, {}, {0x9}, {0xff, 0x1}, {0x7}], "b2b7b4d5fec86cfb"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe1, 0x3}, {0x9, 0x6}, {0x3, 0x5}, {0x1e, 0x5}, {0x9, 0x6}, {0x3f, 0x6}, {0x1, 0x3}, {0x2b, 0x1}, {0x5}, {0x6e, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0xdb}, {0x4a, 0x6}, {0xbe, 0x5}, {0x29, 0x7}], "536133e55b4c9c6f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x12, 0x6}, {0xfc, 0x6}, {0xe5, 0x4}, {0xe9, 0x7}, {0x8, 0x3}, {0x6, 0x3}, {0xff, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0xcc, 0x2}, {0x81, 0x4}, {0x0, 0x1}, {0x8, 0x2}, {0x9, 0x2}, {0x5, 0x5}, {0x80, 0x6}, {0x1, 0x4}, {0x7, 0x3}], "ae18d27bc549008c"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x66}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7b5, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2195ad}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1dc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x214}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000880)={0x9, 0x7, 0x3, 0xffffff3c}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "ce42df9f96dff7ee5e628ab7e9292f5cd2cd96ebe3ad0b2c7e4cbde4b5f1fadbdee21f431961ce2e82336d4faf837a5b991836cad876b28145c7bab867df8a7788a3770255a8ad30c1c3d51c73976f9a42ddc50fd1c9d191e8bca11f2c44f171d614333bfc495a25f1f5a375e86fe15e2ca1b23378ac43b6b38b311688f438ac607446496dfb7df0a04b9f66eb622e9b43f5640848ccc19efe11d3732bc4431184c70491e77e6196be2a9e632262724239e4d6816d0a71dd1a53aad99cd13d9c57a87c333d0e16c805c9a291363847a97ac9562ea6f1363407ed1e82bd683f0f938112e4684799f8acfd6eec58a4410a101227871c580c1d9f0a4caf62dac0dade1098a0aef0d05f674dc893fbbfa8da026d79c5c17a9162576f66237a2929cd1bbfb139337e1867cf383960764fdc75c18801fe77c6e8b48f65248cabbe19f627e2f3f9cb87d03c46164d8950ab4a5e559636315b3e5b9aa49e4a2cedbf82cb0a3515a71630641ee6fce937f3acf0989a8323262dfe2fa7bf483b930028c16caa5392903014bedbbfa34f823d19a7fd7c8fd160c8f26e8788d586dd5adf358183a17cc4e627da55bbac3f96abd634102dbe6ad34195f76458f53195db2a081e609aadc6e8976d504a9d9f7bc176d7da42b2e7a98bacbd13342142be55fb7a63a1cf396f283422328ddad0559092e5de344e591432525e5536580905d6c33b72bdf3a2ece1d1475504ffa2f9dc34a9fa28f31b5da97869010881d0059145ff32861163badf217c39b49a95066628083f272c628629d984f1305edd04e19b71eb77b7dd5f9016222ab89b6af493a2d8b966dc6e3fa61f2d7e7d7298e680f54718a13436cc10522cbafc2e5534551c1c5498a021f854215ce26aa4e09f29ee88ce7ab9c73c87fb2cb1db2d97eb177b845a84e11d6a06e29603a2795cb662c79130a1f392260976222f4a5df1fa74ca7a775e48b14e8db7b9c3115dcb6cdb9c480a2461fa671c9cbbe959fc6a1904bc8834bf13cd25722b4e20dc7cb4286ffa22374e89fc54a5089d5d5fd4872e208497be5805d7823cead32044614efc1ad4a369a539e0409393e91d80d4bc2c684806755694750ff753ae61a9afd83ecb19d001a3a427596bbf416ecbab12073dd8ee7afcdd3f09ab16568326d31c536fa5379bc03a11cbcdc3d131ee9e4b36a923a682fe9e3ff9b79c34c135044bcdce537db6c9ff7d1c30777f94cc460594a628d04a861bfaf847a2b584296352cf5d7eea37144ad954766d892b1aa40457ee05"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:30:08 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r6, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c1}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004011) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) socketpair(0x29, 0xe, 0x2, &(0x7f0000000980)={0xffffffffffffffff}) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004011}, 0x841) 13:30:08 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x18d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8001}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b2a67682d76f457d9cd76bf438"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "667f460659"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x508, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4d4, 0x33, @mgmt_frame=@beacon={@wo_ht={{}, {0x34}, @broadcast, @device_b, @from_mac=@device_b, {0x5, 0x1}}, 0xfffffffffffffffc, @random=0x6, 0x200, @void, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x81, 0x8, 0x5, 0x6f}}, @void, @val={0x5, 0x42, {0x0, 0xfb, 0x7, "5b7e1101e157454539c010d91345b4f135e93ec356a3afb056d2d598a18b16a5eccfafe60f6d055b5a2acad2e0f89c359877e7e852fda7963339182f7176b6"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x1f, 0xb3, 0x3f}}, @val={0x2d, 0x1a, {0x282d, 0x1, 0x0, 0x0, {0xfffffffffffffffe, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x81, 0x11, 0x1f}}, [{0xdd, 0xcc, "0ea9cd16e77ff2f867c3a292077a10e335894ad830916dd22176b6f1a3738224fdd078c47ba752ba31cce83eee69c0c24325320ba40d681290f77a2098e4c240b032c0d5e0d111dd4991ca396bafe058f31024f7e09a2010ee3d67bcd43dfb51c8402d4fd3a694145cd3c48e09fde5844d78071e15fecc50e387eaae891239079ef1b739f1262d9f29c8ac3db0dc43c82e745b9edc5434cc1dee6183b4fdb24e4440b074ed105bab8c0608d59aa986a30063eb5ddf00ffede16d03ae263f5b21fa4d38cd74595092ec5a2cbb"}, {0xdd, 0xc8, "6e3415ea0cb3eed20cc5161da73aefcfde5c53e781c28833fa056ba6b0ed69bf8b7dab98ea8251637cc4a04bd74632795c49dbd36745999303bec652f943b4c9209dada02fa8a2cade38c14046425fae2b418a8e8369169ee4a9f31b4f1849886a34bd17044b27394e1475b65288c632ffc1ab2868af41b3bd3deb768c22793c0885e9f3d1aff416c6cf7f7b08fdc1538f0849e3f98f812636b5db0d17a3e4aa00ad226af821b39e3049f44bab775bfb8d1b80b1204e8675836be63df1dc959c5d8b7196e40102b3"}, {0xdd, 0x1a, "b45b2151f9fbb3adcb3762d6c4cdce597c97259ed76f177bd818"}, {0xdd, 0xc3, "ecaf74a42acf31e3391f97c1de28b029663d32bdc4caf6a27899d900279ed0d86508221b8a443d85a3b2a2358bbcf8ac66a3e063f890d167cf694011eacefb6fb1af29f5b17a6df256de5bc232ac29f4ccbb738d88bbde5272e9e880fae9c75524a7124bd04edbacacb3a3d8ce7715db0a5eece2d4c7df151b4cf6b04591b41e3a4bf0940e6c91f86d124ea545c3805fc972c1f918d0d050fa69f861e72537b823a65388052341624ab152ffdb51a1ec7e89711283830ea489195322138bfc5447ad6c"}, {0xdd, 0x6c, "2609a7d125e7e5a0746dd0fd32333915371d3eb24e8c562db698067ae607d5d69fd54c904c4776b513e0fd107b3f1f0b01a9ed0bd7a4abd283e7b20b361651d420f09faf44caabbe7be268bf7403ae28b4b530b127b5d6ddf5000ced28e147d703fd41695112f14ecc70012e"}, {0xdd, 0x4e, "678805b3180e4112e0f0c5ca55046318f6421fac1019b5fefa2aa6fbb8b7fe905a0011f3b9c9b9a133ab17d639bf21b3c817ff4dbf21b5f5533a5a417ed3cda5181a49e0c29eaf8bbc4a22a1207b"}, {0xdd, 0xe6, "96be726e347872cec4ae24a6f1a082782c1c7618ab38289626fd2469bd99404b4a2c9ad53d5fa681b93a76e9f84ccbbaed62fff85282a87e1b802540cab754e33139e614a7d78b2929e1fd3bc9bbe4fb13903d65e82a320cd9c28246b384bc004837dfeadab63b97e173d6f2f072294e13a75b36831ef66bccd9af7c8c833de05e91b237efd1342df8ba9d8d184eb9367f219dc1193dec5e5dac2b5d0b207a0a2441d0b16347045d53786cf32b19bddc736189b3ff3514f4014a2107e20f811d6183b960e346a3e9a4be9423d29c89b7cdb13628e8329ccc061656705de2cdc13e39308a7ba8"}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1d400000, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8fb8704d904bf5a7}, 0x49800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2fc, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xa3, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0xd, 0x138}}, @random="f118ae6ed6cb730b0b82776feb58405286d7526a007cea3e5bf0a7acf8ea39b19720362dcd16c366c59ae851d60bc40a0a5c4a3307cae59c6a660dd87641687e1a7114392e154c2cfd1b005d3dc48a7c119169602d78b9aa0e6b1eeb7b37384b8b83c8185cb656d9e1b5f1475cb4535cde44dffb4659a5406315f26bbcbb5537bb2def6c0a1e8e"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_FRAME={0x1fc, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ff8}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0x9}}, {0x7, 0x1, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @random="513160f81f4e", @initial, {0x7, 0xfe0}}, {0x2, 0x1, 0x0, 0x1, 0x4}}}, @random="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"}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc040}, 0xe6a27aa3d6aa227c) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3cd}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) socketpair(0x5, 0x4, 0x9, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x6b}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8008000}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x74, r7, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x74}, 0x1, 0x0, 0x0, 0x44010}, 0x43) 13:30:08 executing program 4: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x45) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x806, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0xfffffffc, 0x7d}}}}, ["", "", ""]}, 0x28}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) socket$unix(0x1, 0x1, 0x0) socketpair(0x21, 0x6, 0x3, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x676}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x354}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000005) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000a80)={'vxcan0\x00'}) 13:30:08 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24002084}, 0x4) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000800)) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000840)={0x1, 0x151, "6b3586", 0x7, 0x6}) write$hidraw(r6, &(0x7f0000000880)="c89670b6cd480ab3f2f162cb40178819bc28fafe326c99efec2b2337dd5c08d1b213aa85f99dc8ae1c63cb68bacb3ddbe8277362bca9bd3ae8e820b24276bfcdd7ac3c81273dd48443790682da015cd55d0e9a567032623b669b820b0f6e792c35ac1ec7ff4eaed9036adb26fa1d20c6feba6ce6161947ac735820b207a3893e1aa6a7ec27caf44d0547fc4d975f1d344a73f900c8249bd2da59b0d001f361b5fe3f889b8e11169dbf9bb73e3e8bcb01d73442be8e7a133400460ac513083a449ec7f5d00c", 0xc5) 13:30:08 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008010) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x42}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x65}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x64}}, 0x40884) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) [ 72.061230] audit: type=1400 audit(1756560608.650:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 73.153615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.157198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.158805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.162405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.165360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.284578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.289531] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.292943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.295391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.300461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.307202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.308209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.310882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.332711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.344131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.359839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.371774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.373979] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.378396] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.381202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.382930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.384825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.386783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.390283] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.391985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.393746] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.396981] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.400495] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.402128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.403490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.403884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.409507] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.418976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.420881] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.422381] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.422628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.425898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.431944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.436965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.438647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.190459] Bluetooth: hci0: command tx timeout [ 75.383192] Bluetooth: hci2: command tx timeout [ 75.383849] Bluetooth: hci1: command tx timeout [ 75.509559] Bluetooth: hci6: command tx timeout [ 75.510315] Bluetooth: hci7: command tx timeout [ 75.510762] Bluetooth: hci5: command tx timeout [ 75.510922] Bluetooth: hci4: command tx timeout [ 75.575048] Bluetooth: hci3: command tx timeout [ 77.238110] Bluetooth: hci0: command tx timeout [ 77.429159] Bluetooth: hci2: command tx timeout [ 77.429608] Bluetooth: hci1: command tx timeout [ 77.557096] Bluetooth: hci5: command tx timeout [ 77.557512] Bluetooth: hci6: command tx timeout [ 77.558398] Bluetooth: hci4: command tx timeout [ 77.558761] Bluetooth: hci7: command tx timeout [ 77.621173] Bluetooth: hci3: command tx timeout [ 79.285046] Bluetooth: hci0: command tx timeout [ 79.477484] Bluetooth: hci2: command tx timeout [ 79.477934] Bluetooth: hci1: command tx timeout [ 79.605083] Bluetooth: hci7: command tx timeout [ 79.605524] Bluetooth: hci4: command tx timeout [ 79.605883] Bluetooth: hci5: command tx timeout [ 79.606295] Bluetooth: hci6: command tx timeout [ 79.669133] Bluetooth: hci3: command tx timeout [ 81.334299] Bluetooth: hci0: command tx timeout [ 81.525053] Bluetooth: hci2: command tx timeout [ 81.525504] Bluetooth: hci1: command tx timeout [ 81.653191] Bluetooth: hci6: command tx timeout [ 81.653641] Bluetooth: hci5: command tx timeout [ 81.654196] Bluetooth: hci4: command tx timeout [ 81.654220] Bluetooth: hci7: command tx timeout [ 81.719168] Bluetooth: hci3: command tx timeout [ 109.920242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.920893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.096442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.097095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.363032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.363644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.494006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.494589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.674036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.674638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:30:47 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x2}, {0x3f, 0x1}], "750b7a34b32f8e7b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x6}, {0x30, 0x6}, {0x2}, {0x9, 0x5}], "dc31437c6c820a1f"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xc0, 0x7}, {0xf7, 0x4}, {0x3, 0x5}, {0x15, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x81, 0x5}, {0x2}, {0xff, 0x5}], "91a316be169caacc"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x7}, {0x40, 0x1}, {0x1, 0x3}, {}, {0x9}, {0xff, 0x1}, {0x7}], "b2b7b4d5fec86cfb"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe1, 0x3}, {0x9, 0x6}, {0x3, 0x5}, {0x1e, 0x5}, {0x9, 0x6}, {0x3f, 0x6}, {0x1, 0x3}, {0x2b, 0x1}, {0x5}, {0x6e, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0xdb}, {0x4a, 0x6}, {0xbe, 0x5}, {0x29, 0x7}], "536133e55b4c9c6f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x12, 0x6}, {0xfc, 0x6}, {0xe5, 0x4}, {0xe9, 0x7}, {0x8, 0x3}, {0x6, 0x3}, {0xff, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0xcc, 0x2}, {0x81, 0x4}, {0x0, 0x1}, {0x8, 0x2}, {0x9, 0x2}, {0x5, 0x5}, {0x80, 0x6}, {0x1, 0x4}, {0x7, 0x3}], "ae18d27bc549008c"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x66}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7b5, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2195ad}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1dc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x214}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000880)={0x9, 0x7, 0x3, 0xffffff3c}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "ce42df9f96dff7ee5e628ab7e9292f5cd2cd96ebe3ad0b2c7e4cbde4b5f1fadbdee21f431961ce2e82336d4faf837a5b991836cad876b28145c7bab867df8a7788a3770255a8ad30c1c3d51c73976f9a42ddc50fd1c9d191e8bca11f2c44f171d614333bfc495a25f1f5a375e86fe15e2ca1b23378ac43b6b38b311688f438ac607446496dfb7df0a04b9f66eb622e9b43f5640848ccc19efe11d3732bc4431184c70491e77e6196be2a9e632262724239e4d6816d0a71dd1a53aad99cd13d9c57a87c333d0e16c805c9a291363847a97ac9562ea6f1363407ed1e82bd683f0f938112e4684799f8acfd6eec58a4410a101227871c580c1d9f0a4caf62dac0dade1098a0aef0d05f674dc893fbbfa8da026d79c5c17a9162576f66237a2929cd1bbfb139337e1867cf383960764fdc75c18801fe77c6e8b48f65248cabbe19f627e2f3f9cb87d03c46164d8950ab4a5e559636315b3e5b9aa49e4a2cedbf82cb0a3515a71630641ee6fce937f3acf0989a8323262dfe2fa7bf483b930028c16caa5392903014bedbbfa34f823d19a7fd7c8fd160c8f26e8788d586dd5adf358183a17cc4e627da55bbac3f96abd634102dbe6ad34195f76458f53195db2a081e609aadc6e8976d504a9d9f7bc176d7da42b2e7a98bacbd13342142be55fb7a63a1cf396f283422328ddad0559092e5de344e591432525e5536580905d6c33b72bdf3a2ece1d1475504ffa2f9dc34a9fa28f31b5da97869010881d0059145ff32861163badf217c39b49a95066628083f272c628629d984f1305edd04e19b71eb77b7dd5f9016222ab89b6af493a2d8b966dc6e3fa61f2d7e7d7298e680f54718a13436cc10522cbafc2e5534551c1c5498a021f854215ce26aa4e09f29ee88ce7ab9c73c87fb2cb1db2d97eb177b845a84e11d6a06e29603a2795cb662c79130a1f392260976222f4a5df1fa74ca7a775e48b14e8db7b9c3115dcb6cdb9c480a2461fa671c9cbbe959fc6a1904bc8834bf13cd25722b4e20dc7cb4286ffa22374e89fc54a5089d5d5fd4872e208497be5805d7823cead32044614efc1ad4a369a539e0409393e91d80d4bc2c684806755694750ff753ae61a9afd83ecb19d001a3a427596bbf416ecbab12073dd8ee7afcdd3f09ab16568326d31c536fa5379bc03a11cbcdc3d131ee9e4b36a923a682fe9e3ff9b79c34c135044bcdce537db6c9ff7d1c30777f94cc460594a628d04a861bfaf847a2b584296352cf5d7eea37144ad954766d892b1aa40457ee05"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) [ 110.819432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.820058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:30:47 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x2}, {0x3f, 0x1}], "750b7a34b32f8e7b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x6}, {0x30, 0x6}, {0x2}, {0x9, 0x5}], "dc31437c6c820a1f"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xc0, 0x7}, {0xf7, 0x4}, {0x3, 0x5}, {0x15, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x81, 0x5}, {0x2}, {0xff, 0x5}], "91a316be169caacc"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x7}, {0x40, 0x1}, {0x1, 0x3}, {}, {0x9}, {0xff, 0x1}, {0x7}], "b2b7b4d5fec86cfb"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe1, 0x3}, {0x9, 0x6}, {0x3, 0x5}, {0x1e, 0x5}, {0x9, 0x6}, {0x3f, 0x6}, {0x1, 0x3}, {0x2b, 0x1}, {0x5}, {0x6e, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0xdb}, {0x4a, 0x6}, {0xbe, 0x5}, {0x29, 0x7}], "536133e55b4c9c6f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x12, 0x6}, {0xfc, 0x6}, {0xe5, 0x4}, {0xe9, 0x7}, {0x8, 0x3}, {0x6, 0x3}, {0xff, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0xcc, 0x2}, {0x81, 0x4}, {0x0, 0x1}, {0x8, 0x2}, {0x9, 0x2}, {0x5, 0x5}, {0x80, 0x6}, {0x1, 0x4}, {0x7, 0x3}], "ae18d27bc549008c"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x66}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7b5, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2195ad}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1dc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x214}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000880)={0x9, 0x7, 0x3, 0xffffff3c}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "ce42df9f96dff7ee5e628ab7e9292f5cd2cd96ebe3ad0b2c7e4cbde4b5f1fadbdee21f431961ce2e82336d4faf837a5b991836cad876b28145c7bab867df8a7788a3770255a8ad30c1c3d51c73976f9a42ddc50fd1c9d191e8bca11f2c44f171d614333bfc495a25f1f5a375e86fe15e2ca1b23378ac43b6b38b311688f438ac607446496dfb7df0a04b9f66eb622e9b43f5640848ccc19efe11d3732bc4431184c70491e77e6196be2a9e632262724239e4d6816d0a71dd1a53aad99cd13d9c57a87c333d0e16c805c9a291363847a97ac9562ea6f1363407ed1e82bd683f0f938112e4684799f8acfd6eec58a4410a101227871c580c1d9f0a4caf62dac0dade1098a0aef0d05f674dc893fbbfa8da026d79c5c17a9162576f66237a2929cd1bbfb139337e1867cf383960764fdc75c18801fe77c6e8b48f65248cabbe19f627e2f3f9cb87d03c46164d8950ab4a5e559636315b3e5b9aa49e4a2cedbf82cb0a3515a71630641ee6fce937f3acf0989a8323262dfe2fa7bf483b930028c16caa5392903014bedbbfa34f823d19a7fd7c8fd160c8f26e8788d586dd5adf358183a17cc4e627da55bbac3f96abd634102dbe6ad34195f76458f53195db2a081e609aadc6e8976d504a9d9f7bc176d7da42b2e7a98bacbd13342142be55fb7a63a1cf396f283422328ddad0559092e5de344e591432525e5536580905d6c33b72bdf3a2ece1d1475504ffa2f9dc34a9fa28f31b5da97869010881d0059145ff32861163badf217c39b49a95066628083f272c628629d984f1305edd04e19b71eb77b7dd5f9016222ab89b6af493a2d8b966dc6e3fa61f2d7e7d7298e680f54718a13436cc10522cbafc2e5534551c1c5498a021f854215ce26aa4e09f29ee88ce7ab9c73c87fb2cb1db2d97eb177b845a84e11d6a06e29603a2795cb662c79130a1f392260976222f4a5df1fa74ca7a775e48b14e8db7b9c3115dcb6cdb9c480a2461fa671c9cbbe959fc6a1904bc8834bf13cd25722b4e20dc7cb4286ffa22374e89fc54a5089d5d5fd4872e208497be5805d7823cead32044614efc1ad4a369a539e0409393e91d80d4bc2c684806755694750ff753ae61a9afd83ecb19d001a3a427596bbf416ecbab12073dd8ee7afcdd3f09ab16568326d31c536fa5379bc03a11cbcdc3d131ee9e4b36a923a682fe9e3ff9b79c34c135044bcdce537db6c9ff7d1c30777f94cc460594a628d04a861bfaf847a2b584296352cf5d7eea37144ad954766d892b1aa40457ee05"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:30:47 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x2}, {0x3f, 0x1}], "750b7a34b32f8e7b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x6}, {0x30, 0x6}, {0x2}, {0x9, 0x5}], "dc31437c6c820a1f"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xc0, 0x7}, {0xf7, 0x4}, {0x3, 0x5}, {0x15, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x81, 0x5}, {0x2}, {0xff, 0x5}], "91a316be169caacc"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x7}, {0x40, 0x1}, {0x1, 0x3}, {}, {0x9}, {0xff, 0x1}, {0x7}], "b2b7b4d5fec86cfb"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe1, 0x3}, {0x9, 0x6}, {0x3, 0x5}, {0x1e, 0x5}, {0x9, 0x6}, {0x3f, 0x6}, {0x1, 0x3}, {0x2b, 0x1}, {0x5}, {0x6e, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0xdb}, {0x4a, 0x6}, {0xbe, 0x5}, {0x29, 0x7}], "536133e55b4c9c6f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x12, 0x6}, {0xfc, 0x6}, {0xe5, 0x4}, {0xe9, 0x7}, {0x8, 0x3}, {0x6, 0x3}, {0xff, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0xcc, 0x2}, {0x81, 0x4}, {0x0, 0x1}, {0x8, 0x2}, {0x9, 0x2}, {0x5, 0x5}, {0x80, 0x6}, {0x1, 0x4}, {0x7, 0x3}], "ae18d27bc549008c"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x66}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7b5, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2195ad}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1dc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x214}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000880)={0x9, 0x7, 0x3, 0xffffff3c}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:30:47 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x2}, {0x3f, 0x1}], "750b7a34b32f8e7b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x6}, {0x30, 0x6}, {0x2}, {0x9, 0x5}], "dc31437c6c820a1f"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xc0, 0x7}, {0xf7, 0x4}, {0x3, 0x5}, {0x15, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x81, 0x5}, {0x2}, {0xff, 0x5}], "91a316be169caacc"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x7}, {0x40, 0x1}, {0x1, 0x3}, {}, {0x9}, {0xff, 0x1}, {0x7}], "b2b7b4d5fec86cfb"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe1, 0x3}, {0x9, 0x6}, {0x3, 0x5}, {0x1e, 0x5}, {0x9, 0x6}, {0x3f, 0x6}, {0x1, 0x3}, {0x2b, 0x1}, {0x5}, {0x6e, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0xdb}, {0x4a, 0x6}, {0xbe, 0x5}, {0x29, 0x7}], "536133e55b4c9c6f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x12, 0x6}, {0xfc, 0x6}, {0xe5, 0x4}, {0xe9, 0x7}, {0x8, 0x3}, {0x6, 0x3}, {0xff, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0xcc, 0x2}, {0x81, 0x4}, {0x0, 0x1}, {0x8, 0x2}, {0x9, 0x2}, {0x5, 0x5}, {0x80, 0x6}, {0x1, 0x4}, {0x7, 0x3}], "ae18d27bc549008c"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x66}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7b5, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2195ad}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1dc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x214}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:30:47 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008010) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x42}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x65}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x64}}, 0x40884) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 13:30:47 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x2}, {0x3f, 0x1}], "750b7a34b32f8e7b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x6}, {0x30, 0x6}, {0x2}, {0x9, 0x5}], "dc31437c6c820a1f"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xc0, 0x7}, {0xf7, 0x4}, {0x3, 0x5}, {0x15, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x81, 0x5}, {0x2}, {0xff, 0x5}], "91a316be169caacc"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x7}, {0x40, 0x1}, {0x1, 0x3}, {}, {0x9}, {0xff, 0x1}, {0x7}], "b2b7b4d5fec86cfb"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe1, 0x3}, {0x9, 0x6}, {0x3, 0x5}, {0x1e, 0x5}, {0x9, 0x6}, {0x3f, 0x6}, {0x1, 0x3}, {0x2b, 0x1}, {0x5}, {0x6e, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0xdb}, {0x4a, 0x6}, {0xbe, 0x5}, {0x29, 0x7}], "536133e55b4c9c6f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x12, 0x6}, {0xfc, 0x6}, {0xe5, 0x4}, {0xe9, 0x7}, {0x8, 0x3}, {0x6, 0x3}, {0xff, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0xcc, 0x2}, {0x81, 0x4}, {0x0, 0x1}, {0x8, 0x2}, {0x9, 0x2}, {0x5, 0x5}, {0x80, 0x6}, {0x1, 0x4}, {0x7, 0x3}], "ae18d27bc549008c"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "ce42df9f96dff7ee5e628ab7e9292f5cd2cd96ebe3ad0b2c7e4cbde4b5f1fadbdee21f431961ce2e82336d4faf837a5b991836cad876b28145c7bab867df8a7788a3770255a8ad30c1c3d51c73976f9a42ddc50fd1c9d191e8bca11f2c44f171d614333bfc495a25f1f5a375e86fe15e2ca1b23378ac43b6b38b311688f438ac607446496dfb7df0a04b9f66eb622e9b43f5640848ccc19efe11d3732bc4431184c70491e77e6196be2a9e632262724239e4d6816d0a71dd1a53aad99cd13d9c57a87c333d0e16c805c9a291363847a97ac9562ea6f1363407ed1e82bd683f0f938112e4684799f8acfd6eec58a4410a101227871c580c1d9f0a4caf62dac0dade1098a0aef0d05f674dc893fbbfa8da026d79c5c17a9162576f66237a2929cd1bbfb139337e1867cf383960764fdc75c18801fe77c6e8b48f65248cabbe19f627e2f3f9cb87d03c46164d8950ab4a5e559636315b3e5b9aa49e4a2cedbf82cb0a3515a71630641ee6fce937f3acf0989a8323262dfe2fa7bf483b930028c16caa5392903014bedbbfa34f823d19a7fd7c8fd160c8f26e8788d586dd5adf358183a17cc4e627da55bbac3f96abd634102dbe6ad34195f76458f53195db2a081e609aadc6e8976d504a9d9f7bc176d7da42b2e7a98bacbd13342142be55fb7a63a1cf396f283422328ddad0559092e5de344e591432525e5536580905d6c33b72bdf3a2ece1d1475504ffa2f9dc34a9fa28f31b5da97869010881d0059145ff32861163badf217c39b49a95066628083f272c628629d984f1305edd04e19b71eb77b7dd5f9016222ab89b6af493a2d8b966dc6e3fa61f2d7e7d7298e680f54718a13436cc10522cbafc2e5534551c1c5498a021f854215ce26aa4e09f29ee88ce7ab9c73c87fb2cb1db2d97eb177b845a84e11d6a06e29603a2795cb662c79130a1f392260976222f4a5df1fa74ca7a775e48b14e8db7b9c3115dcb6cdb9c480a2461fa671c9cbbe959fc6a1904bc8834bf13cd25722b4e20dc7cb4286ffa22374e89fc54a5089d5d5fd4872e208497be5805d7823cead32044614efc1ad4a369a539e0409393e91d80d4bc2c684806755694750ff753ae61a9afd83ecb19d001a3a427596bbf416ecbab12073dd8ee7afcdd3f09ab16568326d31c536fa5379bc03a11cbcdc3d131ee9e4b36a923a682fe9e3ff9b79c34c135044bcdce537db6c9ff7d1c30777f94cc460594a628d04a861bfaf847a2b584296352cf5d7eea37144ad954766d892b1aa40457ee05"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:30:47 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x2}, {0x3f, 0x1}], "750b7a34b32f8e7b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x6}, {0x30, 0x6}, {0x2}, {0x9, 0x5}], "dc31437c6c820a1f"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xc0, 0x7}, {0xf7, 0x4}, {0x3, 0x5}, {0x15, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x81, 0x5}, {0x2}, {0xff, 0x5}], "91a316be169caacc"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x7}, {0x40, 0x1}, {0x1, 0x3}, {}, {0x9}, {0xff, 0x1}, {0x7}], "b2b7b4d5fec86cfb"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe1, 0x3}, {0x9, 0x6}, {0x3, 0x5}, {0x1e, 0x5}, {0x9, 0x6}, {0x3f, 0x6}, {0x1, 0x3}, {0x2b, 0x1}, {0x5}, {0x6e, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0xdb}, {0x4a, 0x6}, {0xbe, 0x5}, {0x29, 0x7}], "536133e55b4c9c6f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x12, 0x6}, {0xfc, 0x6}, {0xe5, 0x4}, {0xe9, 0x7}, {0x8, 0x3}, {0x6, 0x3}, {0xff, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0xcc, 0x2}, {0x81, 0x4}, {0x0, 0x1}, {0x8, 0x2}, {0x9, 0x2}, {0x5, 0x5}, {0x80, 0x6}, {0x1, 0x4}, {0x7, 0x3}], "ae18d27bc549008c"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:30:47 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008010) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x42}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x65}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x64}}, 0x40884) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) [ 112.072361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.073038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.131075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.131731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.189906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.190624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.228191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.228774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.251468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.252162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.343049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.343689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.352536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.353164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.412251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.412849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.981733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.982577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.026779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.027371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:31:03 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x18d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8001}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b2a67682d76f457d9cd76bf438"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "667f460659"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x508, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4d4, 0x33, @mgmt_frame=@beacon={@wo_ht={{}, {0x34}, @broadcast, @device_b, @from_mac=@device_b, {0x5, 0x1}}, 0xfffffffffffffffc, @random=0x6, 0x200, @void, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x81, 0x8, 0x5, 0x6f}}, @void, @val={0x5, 0x42, {0x0, 0xfb, 0x7, "5b7e1101e157454539c010d91345b4f135e93ec356a3afb056d2d598a18b16a5eccfafe60f6d055b5a2acad2e0f89c359877e7e852fda7963339182f7176b6"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x1f, 0xb3, 0x3f}}, @val={0x2d, 0x1a, {0x282d, 0x1, 0x0, 0x0, {0xfffffffffffffffe, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x81, 0x11, 0x1f}}, [{0xdd, 0xcc, "0ea9cd16e77ff2f867c3a292077a10e335894ad830916dd22176b6f1a3738224fdd078c47ba752ba31cce83eee69c0c24325320ba40d681290f77a2098e4c240b032c0d5e0d111dd4991ca396bafe058f31024f7e09a2010ee3d67bcd43dfb51c8402d4fd3a694145cd3c48e09fde5844d78071e15fecc50e387eaae891239079ef1b739f1262d9f29c8ac3db0dc43c82e745b9edc5434cc1dee6183b4fdb24e4440b074ed105bab8c0608d59aa986a30063eb5ddf00ffede16d03ae263f5b21fa4d38cd74595092ec5a2cbb"}, {0xdd, 0xc8, "6e3415ea0cb3eed20cc5161da73aefcfde5c53e781c28833fa056ba6b0ed69bf8b7dab98ea8251637cc4a04bd74632795c49dbd36745999303bec652f943b4c9209dada02fa8a2cade38c14046425fae2b418a8e8369169ee4a9f31b4f1849886a34bd17044b27394e1475b65288c632ffc1ab2868af41b3bd3deb768c22793c0885e9f3d1aff416c6cf7f7b08fdc1538f0849e3f98f812636b5db0d17a3e4aa00ad226af821b39e3049f44bab775bfb8d1b80b1204e8675836be63df1dc959c5d8b7196e40102b3"}, {0xdd, 0x1a, "b45b2151f9fbb3adcb3762d6c4cdce597c97259ed76f177bd818"}, {0xdd, 0xc3, "ecaf74a42acf31e3391f97c1de28b029663d32bdc4caf6a27899d900279ed0d86508221b8a443d85a3b2a2358bbcf8ac66a3e063f890d167cf694011eacefb6fb1af29f5b17a6df256de5bc232ac29f4ccbb738d88bbde5272e9e880fae9c75524a7124bd04edbacacb3a3d8ce7715db0a5eece2d4c7df151b4cf6b04591b41e3a4bf0940e6c91f86d124ea545c3805fc972c1f918d0d050fa69f861e72537b823a65388052341624ab152ffdb51a1ec7e89711283830ea489195322138bfc5447ad6c"}, {0xdd, 0x6c, "2609a7d125e7e5a0746dd0fd32333915371d3eb24e8c562db698067ae607d5d69fd54c904c4776b513e0fd107b3f1f0b01a9ed0bd7a4abd283e7b20b361651d420f09faf44caabbe7be268bf7403ae28b4b530b127b5d6ddf5000ced28e147d703fd41695112f14ecc70012e"}, {0xdd, 0x4e, "678805b3180e4112e0f0c5ca55046318f6421fac1019b5fefa2aa6fbb8b7fe905a0011f3b9c9b9a133ab17d639bf21b3c817ff4dbf21b5f5533a5a417ed3cda5181a49e0c29eaf8bbc4a22a1207b"}, {0xdd, 0xe6, "96be726e347872cec4ae24a6f1a082782c1c7618ab38289626fd2469bd99404b4a2c9ad53d5fa681b93a76e9f84ccbbaed62fff85282a87e1b802540cab754e33139e614a7d78b2929e1fd3bc9bbe4fb13903d65e82a320cd9c28246b384bc004837dfeadab63b97e173d6f2f072294e13a75b36831ef66bccd9af7c8c833de05e91b237efd1342df8ba9d8d184eb9367f219dc1193dec5e5dac2b5d0b207a0a2441d0b16347045d53786cf32b19bddc736189b3ff3514f4014a2107e20f811d6183b960e346a3e9a4be9423d29c89b7cdb13628e8329ccc061656705de2cdc13e39308a7ba8"}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1d400000, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8fb8704d904bf5a7}, 0x49800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2fc, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xa3, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0xd, 0x138}}, @random="f118ae6ed6cb730b0b82776feb58405286d7526a007cea3e5bf0a7acf8ea39b19720362dcd16c366c59ae851d60bc40a0a5c4a3307cae59c6a660dd87641687e1a7114392e154c2cfd1b005d3dc48a7c119169602d78b9aa0e6b1eeb7b37384b8b83c8185cb656d9e1b5f1475cb4535cde44dffb4659a5406315f26bbcbb5537bb2def6c0a1e8e"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_FRAME={0x1fc, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ff8}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0x9}}, {0x7, 0x1, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @random="513160f81f4e", @initial, {0x7, 0xfe0}}, {0x2, 0x1, 0x0, 0x1, 0x4}}}, @random="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"}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc040}, 0xe6a27aa3d6aa227c) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3cd}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) socketpair(0x5, 0x4, 0x9, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x6b}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8008000}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x74, r7, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x74}, 0x1, 0x0, 0x0, 0x44010}, 0x43) 13:31:03 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abbcaf210ccc78fd83261ef786"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "3b687d3e774ebccb"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5000000, 0x50, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000008c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000880)='./file0\x00', 0x47, 0x220100, 0x23456}, 0x1800000) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) 13:31:03 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008010) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x42}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x65}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x64}}, 0x40884) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 13:31:03 executing program 4: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x45) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x806, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0xfffffffc, 0x7d}}}}, ["", "", ""]}, 0x28}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) socket$unix(0x1, 0x1, 0x0) socketpair(0x21, 0x6, 0x3, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x676}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x354}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000005) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000a80)={'vxcan0\x00'}) 13:31:03 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x2}, {0x3f, 0x1}], "750b7a34b32f8e7b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f, 0x6}, {0x30, 0x6}, {0x2}, {0x9, 0x5}], "dc31437c6c820a1f"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xc0, 0x7}, {0xf7, 0x4}, {0x3, 0x5}, {0x15, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x81, 0x5}, {0x2}, {0xff, 0x5}], "91a316be169caacc"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x7}, {0x40, 0x1}, {0x1, 0x3}, {}, {0x9}, {0xff, 0x1}, {0x7}], "b2b7b4d5fec86cfb"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe1, 0x3}, {0x9, 0x6}, {0x3, 0x5}, {0x1e, 0x5}, {0x9, 0x6}, {0x3f, 0x6}, {0x1, 0x3}, {0x2b, 0x1}, {0x5}, {0x6e, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0xdb}, {0x4a, 0x6}, {0xbe, 0x5}, {0x29, 0x7}], "536133e55b4c9c6f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x12, 0x6}, {0xfc, 0x6}, {0xe5, 0x4}, {0xe9, 0x7}, {0x8, 0x3}, {0x6, 0x3}, {0xff, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0xcc, 0x2}, {0x81, 0x4}, {0x0, 0x1}, {0x8, 0x2}, {0x9, 0x2}, {0x5, 0x5}, {0x80, 0x6}, {0x1, 0x4}, {0x7, 0x3}], "ae18d27bc549008c"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "f74d6860343323a207468a17eb4ecf2eb01170fee6ffb000e2874e6417ef3add1081c4c9866bdcb39023ef6a6ae7884a0fb9882d29ffdf1d5ee641e7bb92f995b07c718311519a6262023b794f80a5daeb227100fe66c3f9ea3e07d7f4c9ea6671ddb539f3b960bf5d13d711fdca2429a188cfe34d22bc96472b2485d5527ef2c6fe2a489549d662846254b2056730d08cd022ae673d5c33aca99c7fa4675d0a0544f9d7322ba845bb909b705614c5c9399a55f7bd53328ecf36e14c15e881481716cc3d4315edecb8e4262c2675c0e541b4f514121c975c0b3c3366273bb0507b6b4daa4c32f6d4950b6e5703975532dd210d72aca3fd760634daf2417cd1d486e4adf5b1c69a406513c3a208f4766a7e45772be62d920daf0ce4bfeab854e7800e5227219f4ed958232fa414ba043073e6b515a98fa526c9dc44f7b31994fc51d3719f21d1a7372aa00e68e6aa9a333a712b7fbf9b53a3ffa1ff7dd5af577b41745b063a5fba78f06720dda1acd21db11823100a4892be3fb94cf7975d944de3d20a09f956240fdb427f0f3ed197572394a722f3dbfd1c4fa6ca643e66797776aaec652bd535ef697a76b3f1fb96b13186f66bfaf1ab2ca9e24fa2d6c2c27479a71cf4c4c80f06edd18a7c47af462c9953249fa253d62095a5ae60a76605a9919c7599d9679bc92e320e7dbfd1ee93ae44f21acde2d5b4f43f1882908729ebc9b9567265bac24608a77bf66212c35879a87bcdfabb5af47737ccd4a8a13a5d295ed2dc58e9bd08de397ad284b0fa533e4c6a79a0fc05e45ca9c28051efebbbc4d9b3ad42240fc09c9fafac273eca7ef846bb6c7318f465d05d54453f0a799180a3d260b2e33d5be989b9ebcba5de078db1724105eb609cff3ecb38cddb8ae39f75e2aa7ce7fb22e22f23b7de1fa8a4066bff3409d97483f61c2a3aa2386747d39417b9748d3d5f1e8a2019e4e3406599e8abebcbefce202d70516b7cdc61088fe6c0e9255bb0094081f44c6cfaec64fc498b6a16815e5631125660cec5a10d2ac39bb9e978b65b82ea58b3c8d836917ab44bddd6369b4873cab2b3e41ddcf4d7a81b2545762791448faf6e96565162861eb113c59848927ce9f391dfe45adb6e45e5bee3e8a712d99e64f24a68867b111e73e5f8f046c94511a0a10d350175be8cf7b6ab96d09af0cb01c518a621c9dcd14b60513f9a15f57691f128f9135063a63b6c320e585a7994005d3ab575f7d6f8cfb98d44f0ed68ce49a3a3208d5e16e0d894e053c5b8c02fe3dff3d20bfdc9558b8b3a220dc4fe2626d7d0731cf977780a2105b0109f23058510e43c6ba2b8fe13d654c8313d001d08f6c93b5f82d9f5efe64a8567be874e4ef2174ff91320b3f7ca31b71af0c28d798baa0147cf36075285c13b913998b1219532661cc4a1d2e68f94e69505024d4e961a414fad3c661976b20c2504c2e97da4ae7bcf0d7acd141616f1a2d1739332863159cacb0aa21376dbd59e366307663a402510f42e93e58712ba083db788ff0b594f12181787b74c4c94b974fb538f5f73fcc8afb9b0a7c599814bc4da094d924d4192eb833244b11a1486a3bc706df403ec518df9de7335288c02d0924569a9fe74139e55a9d528a34b4dcf27e2a0ce549e74cbab815a7991e638226282b035cedf8dd0d67d03cdb049e2a963aed24e159bf115"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:03 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r6, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c1}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004011) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) socketpair(0x29, 0xe, 0x2, &(0x7f0000000980)={0xffffffffffffffff}) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004011}, 0x841) 13:31:03 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) socketpair(0x2c, 0xa, 0xcc, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x0) r3 = getegid() r4 = getgid() getgroups(0x3, &(0x7f00000002c0)=[r3, r4, 0x0]) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x5, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) getgid() r8 = getgid() r9 = getegid() getgroups(0x5, &(0x7f0000000480)=[r3, r8, r5, r9, r6]) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000004c0)=0x7fff, &(0x7f0000000500)=0x2) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000540)=0xfb, 0x4) r10 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r10) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000580)={0x5, [0x3, 0x9], 0x1}, 0x10) write$hidraw(r7, &(0x7f00000005c0)="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", 0xfc) 13:31:03 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24002084}, 0x4) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000800)) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000840)={0x1, 0x151, "6b3586", 0x7, 0x6}) write$hidraw(r6, &(0x7f0000000880)="c89670b6cd480ab3f2f162cb40178819bc28fafe326c99efec2b2337dd5c08d1b213aa85f99dc8ae1c63cb68bacb3ddbe8277362bca9bd3ae8e820b24276bfcdd7ac3c81273dd48443790682da015cd55d0e9a567032623b669b820b0f6e792c35ac1ec7ff4eaed9036adb26fa1d20c6feba6ce6161947ac735820b207a3893e1aa6a7ec27caf44d0547fc4d975f1d344a73f900c8249bd2da59b0d001f361b5fe3f889b8e11169dbf9bb73e3e8bcb01d73442be8e7a133400460ac513083a449ec7f5d00c", 0xc5) 13:31:03 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:03 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24002084}, 0x4) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000800)) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000840)={0x1, 0x151, "6b3586", 0x7, 0x6}) write$hidraw(r6, &(0x7f0000000880)="c89670b6cd480ab3f2f162cb40178819bc28fafe326c99efec2b2337dd5c08d1b213aa85f99dc8ae1c63cb68bacb3ddbe8277362bca9bd3ae8e820b24276bfcdd7ac3c81273dd48443790682da015cd55d0e9a567032623b669b820b0f6e792c35ac1ec7ff4eaed9036adb26fa1d20c6feba6ce6161947ac735820b207a3893e1aa6a7ec27caf44d0547fc4d975f1d344a73f900c8249bd2da59b0d001f361b5fe3f889b8e11169dbf9bb73e3e8bcb01d73442be8e7a133400460ac513083a449ec7f5d00c", 0xc5) 13:31:03 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abbcaf210ccc78fd83261ef786"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "3b687d3e774ebccb"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5000000, 0x50, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000008c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000880)='./file0\x00', 0x47, 0x220100, 0x23456}, 0x1800000) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) 13:31:03 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r6, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c1}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004011) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) socketpair(0x29, 0xe, 0x2, &(0x7f0000000980)={0xffffffffffffffff}) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004011}, 0x841) 13:31:03 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008010) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x42}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x65}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x64}}, 0x40884) [ 127.251573] kmemleak: Found object by alias at 0x607f1a639ad4 [ 127.251616] CPU: 0 UID: 0 PID: 3985 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 127.251650] Tainted: [W]=WARN [ 127.251657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.251669] Call Trace: [ 127.251676] [ 127.251684] dump_stack_lvl+0xca/0x120 [ 127.251717] __lookup_object+0x94/0xb0 [ 127.251740] delete_object_full+0x27/0x70 [ 127.251763] free_percpu+0x30/0x1160 [ 127.251786] ? arch_uprobe_clear_state+0x16/0x140 [ 127.251815] futex_hash_free+0x38/0xc0 [ 127.251834] mmput+0x2d3/0x390 [ 127.251861] do_exit+0x79d/0x2970 [ 127.251880] ? signal_wake_up_state+0x85/0x120 [ 127.251903] ? zap_other_threads+0x2b9/0x3a0 [ 127.251925] ? __pfx_do_exit+0x10/0x10 [ 127.251944] ? do_group_exit+0x1c3/0x2a0 [ 127.251963] ? lock_release+0xc8/0x290 [ 127.251993] do_group_exit+0xd3/0x2a0 [ 127.252014] __x64_sys_exit_group+0x3e/0x50 [ 127.252034] x64_sys_call+0x18c5/0x18d0 [ 127.252056] do_syscall_64+0xbf/0x360 [ 127.252073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.252089] RIP: 0033:0x7fe424572b19 [ 127.252101] Code: Unable to access opcode bytes at 0x7fe424572aef. [ 127.252109] RSP: 002b:00007ffd372908f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 127.252124] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe424572b19 [ 127.252135] RDX: 00007fe42452572b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 127.252145] RBP: 0000000000000000 R08: 0000001b2d829b74 R09: 0000000000000000 [ 127.252155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.252164] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd372909e0 [ 127.252187] [ 127.252192] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 127.252202] kmemleak: comm "systemd-udevd", pid 109, jiffies 4294793865 [ 127.252211] kmemleak: min_count = 1 [ 127.252217] kmemleak: count = 0 [ 127.252222] kmemleak: flags = 0x21 [ 127.252227] kmemleak: checksum = 0 [ 127.252232] kmemleak: backtrace: [ 127.252237] pcpu_alloc_noprof+0x87a/0x1170 [ 127.252259] mm_init+0x99b/0x1170 [ 127.252270] copy_process+0x3ab7/0x73c0 [ 127.252285] kernel_clone+0xea/0x7f0 [ 127.252299] __do_sys_clone+0xce/0x120 [ 127.252313] do_syscall_64+0xbf/0x360 [ 127.252325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.266395] kmemleak: Found object by alias at 0x607f1a639adc [ 127.266421] CPU: 1 UID: 0 PID: 3962 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 127.266458] Tainted: [W]=WARN [ 127.266466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.266479] Call Trace: [ 127.266486] [ 127.266495] dump_stack_lvl+0xca/0x120 [ 127.266534] __lookup_object+0x94/0xb0 [ 127.266565] delete_object_full+0x27/0x70 [ 127.266598] free_percpu+0x30/0x1160 [ 127.266629] ? arch_uprobe_clear_state+0x16/0x140 [ 127.266669] futex_hash_free+0x38/0xc0 [ 127.266696] mmput+0x2d3/0x390 [ 127.266733] do_exit+0x79d/0x2970 [ 127.266770] ? __pfx_do_exit+0x10/0x10 [ 127.266798] ? trace_irq_enable.constprop.0+0x26/0x100 [ 127.266824] ? _raw_spin_unlock_irq+0x23/0x40 [ 127.266860] do_group_exit+0xd3/0x2a0 [ 127.266892] __x64_sys_exit_group+0x3e/0x50 [ 127.266921] x64_sys_call+0x18c5/0x18d0 [ 127.266951] do_syscall_64+0xbf/0x360 [ 127.266975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.267007] RIP: 0033:0x7efef96a6b19 [ 127.267025] Code: Unable to access opcode bytes at 0x7efef96a6aef. [ 127.267036] RSP: 002b:00007ffc3c34ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 127.267059] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007efef96a6b19 [ 127.267074] RDX: 00007efef965972b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 127.267090] RBP: 0000000000000000 R08: 0000001b2d62d500 R09: 0000000000000000 [ 127.267104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.267118] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc3c34ad60 [ 127.267151] [ 127.267158] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 127.267173] kmemleak: comm "systemd-udevd", pid 109, jiffies 4294793865 [ 127.267187] kmemleak: min_count = 1 [ 127.267195] kmemleak: count = 0 [ 127.267203] kmemleak: flags = 0x21 [ 127.267211] kmemleak: checksum = 0 [ 127.267219] kmemleak: backtrace: [ 127.267225] pcpu_alloc_noprof+0x87a/0x1170 [ 127.267256] mm_init+0x99b/0x1170 [ 127.267274] copy_process+0x3ab7/0x73c0 [ 127.267295] kernel_clone+0xea/0x7f0 [ 127.267315] __do_sys_clone+0xce/0x120 [ 127.267337] do_syscall_64+0xbf/0x360 [ 127.267355] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:31:03 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:11 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r6, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c1}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004011) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) socketpair(0x29, 0xe, 0x2, &(0x7f0000000980)={0xffffffffffffffff}) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004011}, 0x841) 13:31:11 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008010) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x42}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x65}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x64}}, 0x40884) 13:31:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x18d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8001}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b2a67682d76f457d9cd76bf438"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "667f460659"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x508, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4d4, 0x33, @mgmt_frame=@beacon={@wo_ht={{}, {0x34}, @broadcast, @device_b, @from_mac=@device_b, {0x5, 0x1}}, 0xfffffffffffffffc, @random=0x6, 0x200, @void, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x81, 0x8, 0x5, 0x6f}}, @void, @val={0x5, 0x42, {0x0, 0xfb, 0x7, "5b7e1101e157454539c010d91345b4f135e93ec356a3afb056d2d598a18b16a5eccfafe60f6d055b5a2acad2e0f89c359877e7e852fda7963339182f7176b6"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x1f, 0xb3, 0x3f}}, @val={0x2d, 0x1a, {0x282d, 0x1, 0x0, 0x0, {0xfffffffffffffffe, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x81, 0x11, 0x1f}}, [{0xdd, 0xcc, "0ea9cd16e77ff2f867c3a292077a10e335894ad830916dd22176b6f1a3738224fdd078c47ba752ba31cce83eee69c0c24325320ba40d681290f77a2098e4c240b032c0d5e0d111dd4991ca396bafe058f31024f7e09a2010ee3d67bcd43dfb51c8402d4fd3a694145cd3c48e09fde5844d78071e15fecc50e387eaae891239079ef1b739f1262d9f29c8ac3db0dc43c82e745b9edc5434cc1dee6183b4fdb24e4440b074ed105bab8c0608d59aa986a30063eb5ddf00ffede16d03ae263f5b21fa4d38cd74595092ec5a2cbb"}, {0xdd, 0xc8, "6e3415ea0cb3eed20cc5161da73aefcfde5c53e781c28833fa056ba6b0ed69bf8b7dab98ea8251637cc4a04bd74632795c49dbd36745999303bec652f943b4c9209dada02fa8a2cade38c14046425fae2b418a8e8369169ee4a9f31b4f1849886a34bd17044b27394e1475b65288c632ffc1ab2868af41b3bd3deb768c22793c0885e9f3d1aff416c6cf7f7b08fdc1538f0849e3f98f812636b5db0d17a3e4aa00ad226af821b39e3049f44bab775bfb8d1b80b1204e8675836be63df1dc959c5d8b7196e40102b3"}, {0xdd, 0x1a, "b45b2151f9fbb3adcb3762d6c4cdce597c97259ed76f177bd818"}, {0xdd, 0xc3, "ecaf74a42acf31e3391f97c1de28b029663d32bdc4caf6a27899d900279ed0d86508221b8a443d85a3b2a2358bbcf8ac66a3e063f890d167cf694011eacefb6fb1af29f5b17a6df256de5bc232ac29f4ccbb738d88bbde5272e9e880fae9c75524a7124bd04edbacacb3a3d8ce7715db0a5eece2d4c7df151b4cf6b04591b41e3a4bf0940e6c91f86d124ea545c3805fc972c1f918d0d050fa69f861e72537b823a65388052341624ab152ffdb51a1ec7e89711283830ea489195322138bfc5447ad6c"}, {0xdd, 0x6c, "2609a7d125e7e5a0746dd0fd32333915371d3eb24e8c562db698067ae607d5d69fd54c904c4776b513e0fd107b3f1f0b01a9ed0bd7a4abd283e7b20b361651d420f09faf44caabbe7be268bf7403ae28b4b530b127b5d6ddf5000ced28e147d703fd41695112f14ecc70012e"}, {0xdd, 0x4e, "678805b3180e4112e0f0c5ca55046318f6421fac1019b5fefa2aa6fbb8b7fe905a0011f3b9c9b9a133ab17d639bf21b3c817ff4dbf21b5f5533a5a417ed3cda5181a49e0c29eaf8bbc4a22a1207b"}, {0xdd, 0xe6, "96be726e347872cec4ae24a6f1a082782c1c7618ab38289626fd2469bd99404b4a2c9ad53d5fa681b93a76e9f84ccbbaed62fff85282a87e1b802540cab754e33139e614a7d78b2929e1fd3bc9bbe4fb13903d65e82a320cd9c28246b384bc004837dfeadab63b97e173d6f2f072294e13a75b36831ef66bccd9af7c8c833de05e91b237efd1342df8ba9d8d184eb9367f219dc1193dec5e5dac2b5d0b207a0a2441d0b16347045d53786cf32b19bddc736189b3ff3514f4014a2107e20f811d6183b960e346a3e9a4be9423d29c89b7cdb13628e8329ccc061656705de2cdc13e39308a7ba8"}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1d400000, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8fb8704d904bf5a7}, 0x49800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2fc, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xa3, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0xd, 0x138}}, @random="f118ae6ed6cb730b0b82776feb58405286d7526a007cea3e5bf0a7acf8ea39b19720362dcd16c366c59ae851d60bc40a0a5c4a3307cae59c6a660dd87641687e1a7114392e154c2cfd1b005d3dc48a7c119169602d78b9aa0e6b1eeb7b37384b8b83c8185cb656d9e1b5f1475cb4535cde44dffb4659a5406315f26bbcbb5537bb2def6c0a1e8e"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_FRAME={0x1fc, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ff8}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0x9}}, {0x7, 0x1, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @random="513160f81f4e", @initial, {0x7, 0xfe0}}, {0x2, 0x1, 0x0, 0x1, 0x4}}}, @random="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"}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc040}, 0xe6a27aa3d6aa227c) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3cd}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) socketpair(0x5, 0x4, 0x9, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x6b}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8008000}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x74, r7, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x74}, 0x1, 0x0, 0x0, 0x44010}, 0x43) 13:31:11 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "ce42df9f96dff7ee5e628ab7e9292f5cd2cd96ebe3ad0b2c7e4cbde4b5f1fadbdee21f431961ce2e82336d4faf837a5b991836cad876b28145c7bab867df8a7788a3770255a8ad30c1c3d51c73976f9a42ddc50fd1c9d191e8bca11f2c44f171d614333bfc495a25f1f5a375e86fe15e2ca1b23378ac43b6b38b311688f438ac607446496dfb7df0a04b9f66eb622e9b43f5640848ccc19efe11d3732bc4431184c70491e77e6196be2a9e632262724239e4d6816d0a71dd1a53aad99cd13d9c57a87c333d0e16c805c9a291363847a97ac9562ea6f1363407ed1e82bd683f0f938112e4684799f8acfd6eec58a4410a101227871c580c1d9f0a4caf62dac0dade1098a0aef0d05f674dc893fbbfa8da026d79c5c17a9162576f66237a2929cd1bbfb139337e1867cf383960764fdc75c18801fe77c6e8b48f65248cabbe19f627e2f3f9cb87d03c46164d8950ab4a5e559636315b3e5b9aa49e4a2cedbf82cb0a3515a71630641ee6fce937f3acf0989a8323262dfe2fa7bf483b930028c16caa5392903014bedbbfa34f823d19a7fd7c8fd160c8f26e8788d586dd5adf358183a17cc4e627da55bbac3f96abd634102dbe6ad34195f76458f53195db2a081e609aadc6e8976d504a9d9f7bc176d7da42b2e7a98bacbd13342142be55fb7a63a1cf396f283422328ddad0559092e5de344e591432525e5536580905d6c33b72bdf3a2ece1d1475504ffa2f9dc34a9fa28f31b5da97869010881d0059145ff32861163badf217c39b49a95066628083f272c628629d984f1305edd04e19b71eb77b7dd5f9016222ab89b6af493a2d8b966dc6e3fa61f2d7e7d7298e680f54718a13436cc10522cbafc2e5534551c1c5498a021f854215ce26aa4e09f29ee88ce7ab9c73c87fb2cb1db2d97eb177b845a84e11d6a06e29603a2795cb662c79130a1f392260976222f4a5df1fa74ca7a775e48b14e8db7b9c3115dcb6cdb9c480a2461fa671c9cbbe959fc6a1904bc8834bf13cd25722b4e20dc7cb4286ffa22374e89fc54a5089d5d5fd4872e208497be5805d7823cead32044614efc1ad4a369a539e0409393e91d80d4bc2c684806755694750ff753ae61a9afd83ecb19d001a3a427596bbf416ecbab12073dd8ee7afcdd3f09ab16568326d31c536fa5379bc03a11cbcdc3d131ee9e4b36a923a682fe9e3ff9b79c34c135044bcdce537db6c9ff7d1c30777f94cc460594a628d04a861bfaf847a2b584296352cf5d7eea37144ad954766d892b1aa40457ee05"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:11 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abbcaf210ccc78fd83261ef786"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "3b687d3e774ebccb"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5000000, 0x50, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000008c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000880)='./file0\x00', 0x47, 0x220100, 0x23456}, 0x1800000) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) 13:31:11 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) socketpair(0x2c, 0xa, 0xcc, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x0) r3 = getegid() r4 = getgid() getgroups(0x3, &(0x7f00000002c0)=[r3, r4, 0x0]) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x5, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) getgid() r8 = getgid() r9 = getegid() getgroups(0x5, &(0x7f0000000480)=[r3, r8, r5, r9, r6]) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000004c0)=0x7fff, &(0x7f0000000500)=0x2) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000540)=0xfb, 0x4) r10 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r10) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000580)={0x5, [0x3, 0x9], 0x1}, 0x10) write$hidraw(r7, &(0x7f00000005c0)="713ce47dd60e40ed072789898a165ab919bbdff38810b6f6e9ccb4b62fcee124cae42f96f5c9ec4b67b0843ec0f86c581b140bc6cc9ddfb085e0a3d9998059eed6dade073ccf9876763ec31ba5d5bd86e7a69b7bed3a3d69f96062237e8e718a28ed315ec4c8a74bd581b11a9a8da5a162936f2aeca8d3d0716c8526f39520463d9af9710325856969f4665828e948dbbb75909ca16e7eb863d45da6a22644c7cca80b79317dc740ac40ff308ab00204ba733cbdb3541e204a423df19acd95545945f088841b5e58b9cc715ce49de76a8709bc4992906ff0407e2517bfd2936bb1a135f55887440e0c086d7b46f7fd6474012e992f69c6216a31060e", 0xfc) 13:31:11 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24002084}, 0x4) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000800)) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000840)={0x1, 0x151, "6b3586", 0x7, 0x6}) write$hidraw(r6, &(0x7f0000000880)="c89670b6cd480ab3f2f162cb40178819bc28fafe326c99efec2b2337dd5c08d1b213aa85f99dc8ae1c63cb68bacb3ddbe8277362bca9bd3ae8e820b24276bfcdd7ac3c81273dd48443790682da015cd55d0e9a567032623b669b820b0f6e792c35ac1ec7ff4eaed9036adb26fa1d20c6feba6ce6161947ac735820b207a3893e1aa6a7ec27caf44d0547fc4d975f1d344a73f900c8249bd2da59b0d001f361b5fe3f889b8e11169dbf9bb73e3e8bcb01d73442be8e7a133400460ac513083a449ec7f5d00c", 0xc5) 13:31:11 executing program 4: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x45) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x806, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0xfffffffc, 0x7d}}}}, ["", "", ""]}, 0x28}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) socket$unix(0x1, 0x1, 0x0) socketpair(0x21, 0x6, 0x3, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x676}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x354}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000005) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000a80)={'vxcan0\x00'}) 13:31:11 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c1}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004011) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)) socketpair(0x29, 0xe, 0x2, &(0x7f0000000980)) openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) 13:31:11 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:11 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abbcaf210ccc78fd83261ef786"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "3b687d3e774ebccb"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5000000, 0x50, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000008c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000880)='./file0\x00', 0x47, 0x220100, 0x23456}, 0x1800000) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) [ 135.092589] kmemleak: Found object by alias at 0x607f1a639ad4 [ 135.092609] CPU: 1 UID: 0 PID: 4026 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 135.092627] Tainted: [W]=WARN [ 135.092631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 135.092638] Call Trace: [ 135.092642] [ 135.092647] dump_stack_lvl+0xca/0x120 [ 135.092671] __lookup_object+0x94/0xb0 [ 135.092688] delete_object_full+0x27/0x70 [ 135.092704] free_percpu+0x30/0x1160 [ 135.092719] ? arch_uprobe_clear_state+0x16/0x140 [ 135.092739] futex_hash_free+0x38/0xc0 [ 135.092753] mmput+0x2d3/0x390 [ 135.092771] do_exit+0x79d/0x2970 [ 135.092785] ? lock_release+0xc8/0x290 [ 135.092802] ? __pfx_do_exit+0x10/0x10 [ 135.092815] ? find_held_lock+0x2b/0x80 [ 135.092832] ? get_signal+0x835/0x2340 [ 135.092852] do_group_exit+0xd3/0x2a0 [ 135.092866] get_signal+0x2315/0x2340 [ 135.092888] ? __pfx_get_signal+0x10/0x10 [ 135.092904] ? do_futex+0x135/0x370 [ 135.092918] ? __pfx_do_futex+0x10/0x10 [ 135.092932] arch_do_signal_or_restart+0x80/0x790 [ 135.092950] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 135.092965] ? __x64_sys_futex+0x1c9/0x4d0 [ 135.092977] ? __x64_sys_futex+0x1d2/0x4d0 [ 135.092994] ? fdget_pos+0x2c0/0x380 [ 135.093007] ? __pfx___x64_sys_futex+0x10/0x10 [ 135.093019] ? ksys_write+0x1a3/0x240 [ 135.093031] ? __pfx_ksys_write+0x10/0x10 [ 135.093046] exit_to_user_mode_loop+0x8b/0x110 [ 135.093059] do_syscall_64+0x2f7/0x360 [ 135.093071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.093082] RIP: 0033:0x7fe424572b19 [ 135.093091] Code: Unable to access opcode bytes at 0x7fe424572aef. [ 135.093096] RSP: 002b:00007fe421ae8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.093107] RAX: fffffffffffffe00 RBX: 00007fe424685f68 RCX: 00007fe424572b19 [ 135.093114] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe424685f68 [ 135.093121] RBP: 00007fe424685f60 R08: 0000000000000000 R09: 0000000000000000 [ 135.093128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe424685f6c [ 135.093135] R13: 00007ffd372906cf R14: 00007fe421ae8300 R15: 0000000000022000 [ 135.093150] [ 135.093154] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 135.093160] kmemleak: comm "syz-executor.0", pid 287, jiffies 4294801701 [ 135.093167] kmemleak: min_count = 1 [ 135.093171] kmemleak: count = 0 [ 135.093175] kmemleak: flags = 0x21 [ 135.093178] kmemleak: checksum = 0 [ 135.093182] kmemleak: backtrace: [ 135.093185] pcpu_alloc_noprof+0x87a/0x1170 [ 135.093200] mm_init+0x99b/0x1170 [ 135.093208] copy_process+0x3ab7/0x73c0 [ 135.093218] kernel_clone+0xea/0x7f0 [ 135.093227] __do_sys_clone+0xce/0x120 [ 135.093237] do_syscall_64+0xbf/0x360 [ 135.093245] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:31:11 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) socketpair(0x2c, 0xa, 0xcc, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x0) r3 = getegid() r4 = getgid() getgroups(0x3, &(0x7f00000002c0)=[r3, r4, 0x0]) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x5, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) getgid() r8 = getgid() r9 = getegid() getgroups(0x5, &(0x7f0000000480)=[r3, r8, r5, r9, r6]) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000004c0)=0x7fff, &(0x7f0000000500)=0x2) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000540)=0xfb, 0x4) r10 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r10) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000580)={0x5, [0x3, 0x9], 0x1}, 0x10) write$hidraw(r7, &(0x7f00000005c0)="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", 0xfc) [ 135.138556] kmemleak: Found object by alias at 0x607f1a639ad8 [ 135.138571] CPU: 1 UID: 0 PID: 4033 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 135.138588] Tainted: [W]=WARN [ 135.138592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 135.138599] Call Trace: [ 135.138603] [ 135.138607] dump_stack_lvl+0xca/0x120 [ 135.138632] __lookup_object+0x94/0xb0 [ 135.138648] delete_object_full+0x27/0x70 [ 135.138663] free_percpu+0x30/0x1160 [ 135.138678] ? arch_uprobe_clear_state+0x16/0x140 [ 135.138698] futex_hash_free+0x38/0xc0 [ 135.138711] mmput+0x2d3/0x390 [ 135.138729] do_exit+0x79d/0x2970 [ 135.138743] ? lock_release+0xc8/0x290 [ 135.138759] ? __pfx_do_exit+0x10/0x10 [ 135.138772] ? find_held_lock+0x2b/0x80 [ 135.138789] ? get_signal+0x835/0x2340 [ 135.138808] do_group_exit+0xd3/0x2a0 [ 135.138822] get_signal+0x2315/0x2340 [ 135.138840] ? __fget_files+0x203/0x3b0 [ 135.138854] ? __pfx_get_signal+0x10/0x10 [ 135.138870] ? do_futex+0x135/0x370 [ 135.138884] ? __pfx_do_futex+0x10/0x10 [ 135.138898] arch_do_signal_or_restart+0x80/0x790 [ 135.138915] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 135.138931] ? __x64_sys_futex+0x1c9/0x4d0 [ 135.138943] ? __x64_sys_futex+0x1d2/0x4d0 [ 135.138956] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 135.138969] ? __pfx___x64_sys_futex+0x10/0x10 [ 135.138986] ? xfd_validate_state+0x55/0x180 [ 135.139003] ? kcov_ioctl+0x386/0x6c0 [ 135.139020] exit_to_user_mode_loop+0x8b/0x110 [ 135.139033] do_syscall_64+0x2f7/0x360 [ 135.139045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.139057] RIP: 0033:0x7f7ef8436b19 [ 135.139065] Code: Unable to access opcode bytes at 0x7f7ef8436aef. [ 135.139070] RSP: 002b:00007f7ef598b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.139081] RAX: fffffffffffffe00 RBX: 00007f7ef854a028 RCX: 00007f7ef8436b19 [ 135.139088] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ef854a028 [ 135.139095] RBP: 00007f7ef854a020 R08: 0000000000000000 R09: 0000000000000000 [ 135.139102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ef854a02c [ 135.139109] R13: 00007ffcb4d498ef R14: 00007f7ef598b300 R15: 0000000000022000 [ 135.139125] [ 135.139129] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 135.139135] kmemleak: comm "syz-executor.0", pid 287, jiffies 4294801701 [ 135.139142] kmemleak: min_count = 1 [ 135.139146] kmemleak: count = 0 [ 135.139149] kmemleak: flags = 0x21 [ 135.139153] kmemleak: checksum = 0 [ 135.139157] kmemleak: backtrace: [ 135.139160] pcpu_alloc_noprof+0x87a/0x1170 [ 135.139174] mm_init+0x99b/0x1170 [ 135.139182] copy_process+0x3ab7/0x73c0 [ 135.139192] kernel_clone+0xea/0x7f0 [ 135.139202] __do_sys_clone+0xce/0x120 [ 135.139211] do_syscall_64+0xbf/0x360 [ 135.139220] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:31:11 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24002084}, 0x4) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000800)) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000840)={0x1, 0x151, "6b3586", 0x7, 0x6}) 13:31:11 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abbcaf210ccc78fd83261ef786"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "3b687d3e774ebccb"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5000000, 0x50, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000008c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000880)='./file0\x00', 0x47, 0x220100, 0x23456}, 0x1800000) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) [ 135.303659] kmemleak: Found object by alias at 0x607f1a639adc [ 135.303701] CPU: 0 UID: 0 PID: 4011 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 135.303746] Tainted: [W]=WARN [ 135.303756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 135.303772] Call Trace: [ 135.303782] [ 135.303793] dump_stack_lvl+0xca/0x120 [ 135.303834] __lookup_object+0x94/0xb0 [ 135.303865] delete_object_full+0x27/0x70 [ 135.303896] free_percpu+0x30/0x1160 [ 135.303926] ? arch_uprobe_clear_state+0x16/0x140 [ 135.303964] futex_hash_free+0x38/0xc0 [ 135.303998] mmput+0x2d3/0x390 [ 135.304033] do_exit+0x79d/0x2970 [ 135.304059] ? signal_wake_up_state+0x85/0x120 [ 135.304089] ? zap_other_threads+0x2b9/0x3a0 [ 135.304120] ? __pfx_do_exit+0x10/0x10 [ 135.304144] ? do_group_exit+0x1c3/0x2a0 [ 135.304171] ? lock_release+0xc8/0x290 [ 135.304203] do_group_exit+0xd3/0x2a0 [ 135.304231] __x64_sys_exit_group+0x3e/0x50 [ 135.304258] x64_sys_call+0x18c5/0x18d0 [ 135.304287] do_syscall_64+0xbf/0x360 [ 135.304309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.304331] RIP: 0033:0x7efef96a6b19 [ 135.304348] Code: Unable to access opcode bytes at 0x7efef96a6aef. [ 135.304357] RSP: 002b:00007ffc3c34ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 135.304379] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007efef96a6b19 [ 135.304393] RDX: 00007efef965972b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 135.304407] RBP: 0000000000000000 R08: 0000001b2d62e4e0 R09: 0000000000000000 [ 135.304420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.304433] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc3c34ad60 [ 135.304464] [ 135.304471] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 135.304485] kmemleak: comm "kworker/u9:0", pid 4052, jiffies 4294801908 [ 135.304498] kmemleak: min_count = 1 [ 135.304505] kmemleak: count = 0 [ 135.304512] kmemleak: flags = 0x21 [ 135.304519] kmemleak: checksum = 0 [ 135.304526] kmemleak: backtrace: [ 135.304532] pcpu_alloc_noprof+0x87a/0x1170 [ 135.304561] mm_init+0x99b/0x1170 [ 135.304577] mm_alloc+0xa0/0xd0 [ 135.304593] alloc_bprm+0x2e3/0x6e0 [ 135.304624] kernel_execve+0xb0/0x3d0 [ 135.304641] call_usermodehelper_exec_async+0x25f/0x4e0 [ 135.304671] ret_from_fork+0x34b/0x430 [ 135.304702] ret_from_fork_asm+0x1a/0x30 13:31:19 executing program 4: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x45) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x806, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0xfffffffc, 0x7d}}}}, ["", "", ""]}, 0x28}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) socket$unix(0x1, 0x1, 0x0) socketpair(0x21, 0x6, 0x3, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x676}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x354}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000005) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000a80)={'vxcan0\x00'}) 13:31:19 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24002084}, 0x4) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000800)) 13:31:19 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r4, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008010) 13:31:19 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c1}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004011) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)) openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) 13:31:19 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abbcaf210ccc78fd83261ef786"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "3b687d3e774ebccb"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5000000, 0x50, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000008c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000880)='./file0\x00', 0x47, 0x220100, 0x23456}, 0x1800000) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) 13:31:19 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "f74d6860343323a207468a17eb4ecf2eb01170fee6ffb000e2874e6417ef3add1081c4c9866bdcb39023ef6a6ae7884a0fb9882d29ffdf1d5ee641e7bb92f995b07c718311519a6262023b794f80a5daeb227100fe66c3f9ea3e07d7f4c9ea6671ddb539f3b960bf5d13d711fdca2429a188cfe34d22bc96472b2485d5527ef2c6fe2a489549d662846254b2056730d08cd022ae673d5c33aca99c7fa4675d0a0544f9d7322ba845bb909b705614c5c9399a55f7bd53328ecf36e14c15e881481716cc3d4315edecb8e4262c2675c0e541b4f514121c975c0b3c3366273bb0507b6b4daa4c32f6d4950b6e5703975532dd210d72aca3fd760634daf2417cd1d486e4adf5b1c69a406513c3a208f4766a7e45772be62d920daf0ce4bfeab854e7800e5227219f4ed958232fa414ba043073e6b515a98fa526c9dc44f7b31994fc51d3719f21d1a7372aa00e68e6aa9a333a712b7fbf9b53a3ffa1ff7dd5af577b41745b063a5fba78f06720dda1acd21db11823100a4892be3fb94cf7975d944de3d20a09f956240fdb427f0f3ed197572394a722f3dbfd1c4fa6ca643e66797776aaec652bd535ef697a76b3f1fb96b13186f66bfaf1ab2ca9e24fa2d6c2c27479a71cf4c4c80f06edd18a7c47af462c9953249fa253d62095a5ae60a76605a9919c7599d9679bc92e320e7dbfd1ee93ae44f21acde2d5b4f43f1882908729ebc9b9567265bac24608a77bf66212c35879a87bcdfabb5af47737ccd4a8a13a5d295ed2dc58e9bd08de397ad284b0fa533e4c6a79a0fc05e45ca9c28051efebbbc4d9b3ad42240fc09c9fafac273eca7ef846bb6c7318f465d05d54453f0a799180a3d260b2e33d5be989b9ebcba5de078db1724105eb609cff3ecb38cddb8ae39f75e2aa7ce7fb22e22f23b7de1fa8a4066bff3409d97483f61c2a3aa2386747d39417b9748d3d5f1e8a2019e4e3406599e8abebcbefce202d70516b7cdc61088fe6c0e9255bb0094081f44c6cfaec64fc498b6a16815e5631125660cec5a10d2ac39bb9e978b65b82ea58b3c8d836917ab44bddd6369b4873cab2b3e41ddcf4d7a81b2545762791448faf6e96565162861eb113c59848927ce9f391dfe45adb6e45e5bee3e8a712d99e64f24a68867b111e73e5f8f046c94511a0a10d350175be8cf7b6ab96d09af0cb01c518a621c9dcd14b60513f9a15f57691f128f9135063a63b6c320e585a7994005d3ab575f7d6f8cfb98d44f0ed68ce49a3a3208d5e16e0d894e053c5b8c02fe3dff3d20bfdc9558b8b3a220dc4fe2626d7d0731cf977780a2105b0109f23058510e43c6ba2b8fe13d654c8313d001d08f6c93b5f82d9f5efe64a8567be874e4ef2174ff91320b3f7ca31b71af0c28d798baa0147cf36075285c13b913998b1219532661cc4a1d2e68f94e69505024d4e961a414fad3c661976b20c2504c2e97da4ae7bcf0d7acd141616f1a2d1739332863159cacb0aa21376dbd59e366307663a402510f42e93e58712ba083db788ff0b594f12181787b74c4c94b974fb538f5f73fcc8afb9b0a7c599814bc4da094d924d4192eb833244b11a1486a3bc706df403ec518df9de7335288c02d0924569a9fe74139e55a9d528a34b4dcf27e2a0ce549e74cbab815a7991e638226282b035cedf8dd0d67d03cdb049e2a963aed24e159bf115"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:19 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) socketpair(0x2c, 0xa, 0xcc, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x0) r3 = getegid() r4 = getgid() getgroups(0x3, &(0x7f00000002c0)=[r3, r4, 0x0]) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x5, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) getgid() r8 = getgid() r9 = getegid() getgroups(0x5, &(0x7f0000000480)=[r3, r8, r5, r9, r6]) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000004c0)=0x7fff, &(0x7f0000000500)=0x2) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000540)=0xfb, 0x4) r10 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r10) write$hidraw(r7, &(0x7f00000005c0)="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", 0xfc) 13:31:19 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x18d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8001}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b2a67682d76f457d9cd76bf438"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "667f460659"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x508, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4d4, 0x33, @mgmt_frame=@beacon={@wo_ht={{}, {0x34}, @broadcast, @device_b, @from_mac=@device_b, {0x5, 0x1}}, 0xfffffffffffffffc, @random=0x6, 0x200, @void, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x81, 0x8, 0x5, 0x6f}}, @void, @val={0x5, 0x42, {0x0, 0xfb, 0x7, "5b7e1101e157454539c010d91345b4f135e93ec356a3afb056d2d598a18b16a5eccfafe60f6d055b5a2acad2e0f89c359877e7e852fda7963339182f7176b6"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x1f, 0xb3, 0x3f}}, @val={0x2d, 0x1a, {0x282d, 0x1, 0x0, 0x0, {0xfffffffffffffffe, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x81, 0x11, 0x1f}}, [{0xdd, 0xcc, "0ea9cd16e77ff2f867c3a292077a10e335894ad830916dd22176b6f1a3738224fdd078c47ba752ba31cce83eee69c0c24325320ba40d681290f77a2098e4c240b032c0d5e0d111dd4991ca396bafe058f31024f7e09a2010ee3d67bcd43dfb51c8402d4fd3a694145cd3c48e09fde5844d78071e15fecc50e387eaae891239079ef1b739f1262d9f29c8ac3db0dc43c82e745b9edc5434cc1dee6183b4fdb24e4440b074ed105bab8c0608d59aa986a30063eb5ddf00ffede16d03ae263f5b21fa4d38cd74595092ec5a2cbb"}, {0xdd, 0xc8, "6e3415ea0cb3eed20cc5161da73aefcfde5c53e781c28833fa056ba6b0ed69bf8b7dab98ea8251637cc4a04bd74632795c49dbd36745999303bec652f943b4c9209dada02fa8a2cade38c14046425fae2b418a8e8369169ee4a9f31b4f1849886a34bd17044b27394e1475b65288c632ffc1ab2868af41b3bd3deb768c22793c0885e9f3d1aff416c6cf7f7b08fdc1538f0849e3f98f812636b5db0d17a3e4aa00ad226af821b39e3049f44bab775bfb8d1b80b1204e8675836be63df1dc959c5d8b7196e40102b3"}, {0xdd, 0x1a, "b45b2151f9fbb3adcb3762d6c4cdce597c97259ed76f177bd818"}, {0xdd, 0xc3, "ecaf74a42acf31e3391f97c1de28b029663d32bdc4caf6a27899d900279ed0d86508221b8a443d85a3b2a2358bbcf8ac66a3e063f890d167cf694011eacefb6fb1af29f5b17a6df256de5bc232ac29f4ccbb738d88bbde5272e9e880fae9c75524a7124bd04edbacacb3a3d8ce7715db0a5eece2d4c7df151b4cf6b04591b41e3a4bf0940e6c91f86d124ea545c3805fc972c1f918d0d050fa69f861e72537b823a65388052341624ab152ffdb51a1ec7e89711283830ea489195322138bfc5447ad6c"}, {0xdd, 0x6c, "2609a7d125e7e5a0746dd0fd32333915371d3eb24e8c562db698067ae607d5d69fd54c904c4776b513e0fd107b3f1f0b01a9ed0bd7a4abd283e7b20b361651d420f09faf44caabbe7be268bf7403ae28b4b530b127b5d6ddf5000ced28e147d703fd41695112f14ecc70012e"}, {0xdd, 0x4e, "678805b3180e4112e0f0c5ca55046318f6421fac1019b5fefa2aa6fbb8b7fe905a0011f3b9c9b9a133ab17d639bf21b3c817ff4dbf21b5f5533a5a417ed3cda5181a49e0c29eaf8bbc4a22a1207b"}, {0xdd, 0xe6, "96be726e347872cec4ae24a6f1a082782c1c7618ab38289626fd2469bd99404b4a2c9ad53d5fa681b93a76e9f84ccbbaed62fff85282a87e1b802540cab754e33139e614a7d78b2929e1fd3bc9bbe4fb13903d65e82a320cd9c28246b384bc004837dfeadab63b97e173d6f2f072294e13a75b36831ef66bccd9af7c8c833de05e91b237efd1342df8ba9d8d184eb9367f219dc1193dec5e5dac2b5d0b207a0a2441d0b16347045d53786cf32b19bddc736189b3ff3514f4014a2107e20f811d6183b960e346a3e9a4be9423d29c89b7cdb13628e8329ccc061656705de2cdc13e39308a7ba8"}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1d400000, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8fb8704d904bf5a7}, 0x49800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2fc, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xa3, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0xd, 0x138}}, @random="f118ae6ed6cb730b0b82776feb58405286d7526a007cea3e5bf0a7acf8ea39b19720362dcd16c366c59ae851d60bc40a0a5c4a3307cae59c6a660dd87641687e1a7114392e154c2cfd1b005d3dc48a7c119169602d78b9aa0e6b1eeb7b37384b8b83c8185cb656d9e1b5f1475cb4535cde44dffb4659a5406315f26bbcbb5537bb2def6c0a1e8e"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_FRAME={0x1fc, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ff8}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0x9}}, {0x7, 0x1, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @random="513160f81f4e", @initial, {0x7, 0xfe0}}, {0x2, 0x1, 0x0, 0x1, 0x4}}}, @random="1aee3c5531e8b86c6cce6fa3bd6a24fca55478fab7123b818c11b6232a7bf61467bc7f73eeca54dfbfe147f5a57dcacdc92e8f7b1a1e3cda9ca5f9a34db9a6c1aa41bad88c3a752caa854e086928023831a0b65bcf6e6f1680611a73905022db10ed171de45427cc2a9c37b1f68fadcc5818eb860b47c23f462574ea3e6e4b07edb4b86e13099709dc8e785a5894b42a37da97c18bdf9891b1eca25a49f6c6da5c8f00625dbc2dd46488390164a50bf628cf6762bf80de81bf6b3f5049783facf3d49a17bd09d879963fc07d6e385d2722a03d92b7675f0814ffa6334311582b8704cd8e42075a6e0a767998c5f47cb240c84b74ac33b8486a8fc507e5ab91fed818fba579c0f3f3641dfa8f5e351c98039c65ab4089280af24420d9a33a54625795fc25f3a14ced19ad48e4f1413f5dda02a5d149f98e5fea1b2b7bfc70626638303b68f15b87bbf40db932d26206d3bfc542181650c5f13e3befaf35e2e2ad469dbea2d707a7bba1032932cf46a6fcbdc5de5f7999a784ab6e7c33f75034ed2f6e0b5743c79df9fb7314e0f55cfc9d574246210861cecbccf13e08664a713542d69482db6a168bd5479a69485c6b0c8be05db2b908ec0cb2efa0b78c927fefe96154d2"}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc040}, 0xe6a27aa3d6aa227c) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3cd}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) socketpair(0x5, 0x4, 0x9, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x6b}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8008000}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x74, r7, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x74}, 0x1, 0x0, 0x0, 0x44010}, 0x43) [ 143.493527] kmemleak: Found object by alias at 0x607f1a639ad4 [ 143.493546] CPU: 1 UID: 0 PID: 4076 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 143.493564] Tainted: [W]=WARN [ 143.493568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 143.493575] Call Trace: [ 143.493579] [ 143.493584] dump_stack_lvl+0xca/0x120 [ 143.493608] __lookup_object+0x94/0xb0 [ 143.493624] delete_object_full+0x27/0x70 [ 143.493639] free_percpu+0x30/0x1160 [ 143.493655] ? arch_uprobe_clear_state+0x16/0x140 [ 143.493675] futex_hash_free+0x38/0xc0 [ 143.493689] mmput+0x2d3/0x390 [ 143.493707] do_exit+0x79d/0x2970 [ 143.493721] ? signal_wake_up_state+0x85/0x120 [ 143.493736] ? zap_other_threads+0x2b9/0x3a0 [ 143.493751] ? __pfx_do_exit+0x10/0x10 [ 143.493764] ? do_group_exit+0x1c3/0x2a0 [ 143.493777] ? lock_release+0xc8/0x290 [ 143.493794] do_group_exit+0xd3/0x2a0 [ 143.493808] __x64_sys_exit_group+0x3e/0x50 [ 143.493822] x64_sys_call+0x18c5/0x18d0 [ 143.493837] do_syscall_64+0xbf/0x360 [ 143.493849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.493860] RIP: 0033:0x7fe424572b19 [ 143.493868] Code: Unable to access opcode bytes at 0x7fe424572aef. [ 143.493874] RSP: 002b:00007ffd372908f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 143.493885] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe424572b19 [ 143.493892] RDX: 00007fe42452572b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 143.493899] RBP: 0000000000000000 R08: 0000001b2d8233c8 R09: 0000000000000000 [ 143.493906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.493913] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd372909e0 [ 143.493928] [ 143.493932] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 143.493938] kmemleak: comm "syz-executor.6", pid 291, jiffies 4294809928 [ 143.493945] kmemleak: min_count = 1 [ 143.493949] kmemleak: count = 0 [ 143.493953] kmemleak: flags = 0x21 [ 143.493956] kmemleak: checksum = 0 [ 143.493960] kmemleak: backtrace: [ 143.493964] pcpu_alloc_noprof+0x87a/0x1170 [ 143.493978] mm_init+0x99b/0x1170 [ 143.493990] copy_process+0x3ab7/0x73c0 [ 143.494000] kernel_clone+0xea/0x7f0 [ 143.494010] __do_sys_clone+0xce/0x120 [ 143.494020] do_syscall_64+0xbf/0x360 [ 143.494028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.557870] kmemleak: Found object by alias at 0x607f1a639ad8 [ 143.557896] CPU: 0 UID: 0 PID: 4086 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 143.557930] Tainted: [W]=WARN [ 143.557938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 143.557951] Call Trace: [ 143.557958] [ 143.557966] dump_stack_lvl+0xca/0x120 [ 143.558014] __lookup_object+0x94/0xb0 [ 143.558044] delete_object_full+0x27/0x70 [ 143.558074] free_percpu+0x30/0x1160 [ 143.558104] ? arch_uprobe_clear_state+0x16/0x140 [ 143.558141] futex_hash_free+0x38/0xc0 [ 143.558166] mmput+0x2d3/0x390 [ 143.558201] do_exit+0x79d/0x2970 [ 143.558234] ? __pfx_do_exit+0x10/0x10 [ 143.558261] ? find_held_lock+0x2b/0x80 [ 143.558294] ? get_signal+0x835/0x2340 [ 143.558331] do_group_exit+0xd3/0x2a0 [ 143.558360] get_signal+0x2315/0x2340 [ 143.558394] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 143.558425] ? __pfx_get_signal+0x10/0x10 [ 143.558456] ? do_futex+0x135/0x370 [ 143.558482] ? __pfx_do_futex+0x10/0x10 [ 143.558511] arch_do_signal_or_restart+0x80/0x790 [ 143.558544] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 143.558575] ? __x64_sys_futex+0x1c9/0x4d0 [ 143.558599] ? __x64_sys_futex+0x1d2/0x4d0 [ 143.558625] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 143.558648] ? __pfx___x64_sys_futex+0x10/0x10 [ 143.558673] ? xfd_validate_state+0x55/0x180 [ 143.558713] exit_to_user_mode_loop+0x8b/0x110 [ 143.558738] do_syscall_64+0x2f7/0x360 [ 143.558760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.558783] RIP: 0033:0x7f7ef8436b19 [ 143.558799] Code: Unable to access opcode bytes at 0x7f7ef8436aef. [ 143.558809] RSP: 002b:00007f7ef598b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.558830] RAX: fffffffffffffe00 RBX: 00007f7ef854a028 RCX: 00007f7ef8436b19 [ 143.558845] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ef854a028 [ 143.558858] RBP: 00007f7ef854a020 R08: 0000000000000000 R09: 0000000000000000 [ 143.558872] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ef854a02c [ 143.558885] R13: 00007ffcb4d498ef R14: 00007f7ef598b300 R15: 0000000000022000 [ 143.558916] [ 143.558923] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 143.558936] kmemleak: comm "kworker/u9:4", pid 4093, jiffies 4294810171 [ 143.558949] kmemleak: min_count = 1 [ 143.558956] kmemleak: count = 0 [ 143.558963] kmemleak: flags = 0x21 [ 143.558970] kmemleak: checksum = 0 [ 143.558977] kmemleak: backtrace: [ 143.558983] pcpu_alloc_noprof+0x87a/0x1170 [ 143.559012] mm_init+0x99b/0x1170 [ 143.559028] mm_alloc+0xa0/0xd0 [ 143.559044] alloc_bprm+0x2e3/0x6e0 [ 143.559075] kernel_execve+0xb0/0x3d0 [ 143.559092] call_usermodehelper_exec_async+0x25f/0x4e0 [ 143.559121] ret_from_fork+0x34b/0x430 [ 143.559151] ret_from_fork_asm+0x1a/0x30 13:31:30 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abbcaf210ccc78fd83261ef786"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "3b687d3e774ebccb"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5000000, 0x50, r0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) 13:31:30 executing program 4: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x45) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x806, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0xfffffffc, 0x7d}}}}, ["", "", ""]}, 0x28}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) socket$unix(0x1, 0x1, 0x0) socketpair(0x21, 0x6, 0x3, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x676}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x354}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000005) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vxcan0\x00'}) 13:31:30 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c1}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004011) openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) 13:31:30 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) socketpair(0x2c, 0xa, 0xcc, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x0) r3 = getegid() r4 = getgid() getgroups(0x3, &(0x7f00000002c0)=[r3, r4, 0x0]) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x5, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) getgid() r8 = getgid() r9 = getegid() getgroups(0x5, &(0x7f0000000480)=[r3, r8, r5, r9, r6]) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000004c0)=0x7fff, &(0x7f0000000500)=0x2) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000540)=0xfb, 0x4) pkey_alloc(0x0, 0x2) write$hidraw(r7, &(0x7f00000005c0)="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", 0xfc) 13:31:30 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r3, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24002084}, 0x4) 13:31:30 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "ce42df9f96dff7ee5e628ab7e9292f5cd2cd96ebe3ad0b2c7e4cbde4b5f1fadbdee21f431961ce2e82336d4faf837a5b991836cad876b28145c7bab867df8a7788a3770255a8ad30c1c3d51c73976f9a42ddc50fd1c9d191e8bca11f2c44f171d614333bfc495a25f1f5a375e86fe15e2ca1b23378ac43b6b38b311688f438ac607446496dfb7df0a04b9f66eb622e9b43f5640848ccc19efe11d3732bc4431184c70491e77e6196be2a9e632262724239e4d6816d0a71dd1a53aad99cd13d9c57a87c333d0e16c805c9a291363847a97ac9562ea6f1363407ed1e82bd683f0f938112e4684799f8acfd6eec58a4410a101227871c580c1d9f0a4caf62dac0dade1098a0aef0d05f674dc893fbbfa8da026d79c5c17a9162576f66237a2929cd1bbfb139337e1867cf383960764fdc75c18801fe77c6e8b48f65248cabbe19f627e2f3f9cb87d03c46164d8950ab4a5e559636315b3e5b9aa49e4a2cedbf82cb0a3515a71630641ee6fce937f3acf0989a8323262dfe2fa7bf483b930028c16caa5392903014bedbbfa34f823d19a7fd7c8fd160c8f26e8788d586dd5adf358183a17cc4e627da55bbac3f96abd634102dbe6ad34195f76458f53195db2a081e609aadc6e8976d504a9d9f7bc176d7da42b2e7a98bacbd13342142be55fb7a63a1cf396f283422328ddad0559092e5de344e591432525e5536580905d6c33b72bdf3a2ece1d1475504ffa2f9dc34a9fa28f31b5da97869010881d0059145ff32861163badf217c39b49a95066628083f272c628629d984f1305edd04e19b71eb77b7dd5f9016222ab89b6af493a2d8b966dc6e3fa61f2d7e7d7298e680f54718a13436cc10522cbafc2e5534551c1c5498a021f854215ce26aa4e09f29ee88ce7ab9c73c87fb2cb1db2d97eb177b845a84e11d6a06e29603a2795cb662c79130a1f392260976222f4a5df1fa74ca7a775e48b14e8db7b9c3115dcb6cdb9c480a2461fa671c9cbbe959fc6a1904bc8834bf13cd25722b4e20dc7cb4286ffa22374e89fc54a5089d5d5fd4872e208497be5805d7823cead32044614efc1ad4a369a539e0409393e91d80d4bc2c684806755694750ff753ae61a9afd83ecb19d001a3a427596bbf416ecbab12073dd8ee7afcdd3f09ab16568326d31c536fa5379bc03a11cbcdc3d131ee9e4b36a923a682fe9e3ff9b79c34c135044bcdce537db6c9ff7d1c30777f94cc460594a628d04a861bfaf847a2b584296352cf5d7eea37144ad954766d892b1aa40457ee05"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:30 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x18d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8001}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b2a67682d76f457d9cd76bf438"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "667f460659"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x508, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4d4, 0x33, @mgmt_frame=@beacon={@wo_ht={{}, {0x34}, @broadcast, @device_b, @from_mac=@device_b, {0x5, 0x1}}, 0xfffffffffffffffc, @random=0x6, 0x200, @void, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x81, 0x8, 0x5, 0x6f}}, @void, @val={0x5, 0x42, {0x0, 0xfb, 0x7, "5b7e1101e157454539c010d91345b4f135e93ec356a3afb056d2d598a18b16a5eccfafe60f6d055b5a2acad2e0f89c359877e7e852fda7963339182f7176b6"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x1f, 0xb3, 0x3f}}, @val={0x2d, 0x1a, {0x282d, 0x1, 0x0, 0x0, {0xfffffffffffffffe, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x81, 0x11, 0x1f}}, [{0xdd, 0xcc, "0ea9cd16e77ff2f867c3a292077a10e335894ad830916dd22176b6f1a3738224fdd078c47ba752ba31cce83eee69c0c24325320ba40d681290f77a2098e4c240b032c0d5e0d111dd4991ca396bafe058f31024f7e09a2010ee3d67bcd43dfb51c8402d4fd3a694145cd3c48e09fde5844d78071e15fecc50e387eaae891239079ef1b739f1262d9f29c8ac3db0dc43c82e745b9edc5434cc1dee6183b4fdb24e4440b074ed105bab8c0608d59aa986a30063eb5ddf00ffede16d03ae263f5b21fa4d38cd74595092ec5a2cbb"}, {0xdd, 0xc8, "6e3415ea0cb3eed20cc5161da73aefcfde5c53e781c28833fa056ba6b0ed69bf8b7dab98ea8251637cc4a04bd74632795c49dbd36745999303bec652f943b4c9209dada02fa8a2cade38c14046425fae2b418a8e8369169ee4a9f31b4f1849886a34bd17044b27394e1475b65288c632ffc1ab2868af41b3bd3deb768c22793c0885e9f3d1aff416c6cf7f7b08fdc1538f0849e3f98f812636b5db0d17a3e4aa00ad226af821b39e3049f44bab775bfb8d1b80b1204e8675836be63df1dc959c5d8b7196e40102b3"}, {0xdd, 0x1a, "b45b2151f9fbb3adcb3762d6c4cdce597c97259ed76f177bd818"}, {0xdd, 0xc3, "ecaf74a42acf31e3391f97c1de28b029663d32bdc4caf6a27899d900279ed0d86508221b8a443d85a3b2a2358bbcf8ac66a3e063f890d167cf694011eacefb6fb1af29f5b17a6df256de5bc232ac29f4ccbb738d88bbde5272e9e880fae9c75524a7124bd04edbacacb3a3d8ce7715db0a5eece2d4c7df151b4cf6b04591b41e3a4bf0940e6c91f86d124ea545c3805fc972c1f918d0d050fa69f861e72537b823a65388052341624ab152ffdb51a1ec7e89711283830ea489195322138bfc5447ad6c"}, {0xdd, 0x6c, "2609a7d125e7e5a0746dd0fd32333915371d3eb24e8c562db698067ae607d5d69fd54c904c4776b513e0fd107b3f1f0b01a9ed0bd7a4abd283e7b20b361651d420f09faf44caabbe7be268bf7403ae28b4b530b127b5d6ddf5000ced28e147d703fd41695112f14ecc70012e"}, {0xdd, 0x4e, "678805b3180e4112e0f0c5ca55046318f6421fac1019b5fefa2aa6fbb8b7fe905a0011f3b9c9b9a133ab17d639bf21b3c817ff4dbf21b5f5533a5a417ed3cda5181a49e0c29eaf8bbc4a22a1207b"}, {0xdd, 0xe6, "96be726e347872cec4ae24a6f1a082782c1c7618ab38289626fd2469bd99404b4a2c9ad53d5fa681b93a76e9f84ccbbaed62fff85282a87e1b802540cab754e33139e614a7d78b2929e1fd3bc9bbe4fb13903d65e82a320cd9c28246b384bc004837dfeadab63b97e173d6f2f072294e13a75b36831ef66bccd9af7c8c833de05e91b237efd1342df8ba9d8d184eb9367f219dc1193dec5e5dac2b5d0b207a0a2441d0b16347045d53786cf32b19bddc736189b3ff3514f4014a2107e20f811d6183b960e346a3e9a4be9423d29c89b7cdb13628e8329ccc061656705de2cdc13e39308a7ba8"}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1d400000, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8fb8704d904bf5a7}, 0x49800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2fc, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xa3, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0xd, 0x138}}, @random="f118ae6ed6cb730b0b82776feb58405286d7526a007cea3e5bf0a7acf8ea39b19720362dcd16c366c59ae851d60bc40a0a5c4a3307cae59c6a660dd87641687e1a7114392e154c2cfd1b005d3dc48a7c119169602d78b9aa0e6b1eeb7b37384b8b83c8185cb656d9e1b5f1475cb4535cde44dffb4659a5406315f26bbcbb5537bb2def6c0a1e8e"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_FRAME={0x1fc, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ff8}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0x9}}, {0x7, 0x1, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @random="513160f81f4e", @initial, {0x7, 0xfe0}}, {0x2, 0x1, 0x0, 0x1, 0x4}}}, @random="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"}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc040}, 0xe6a27aa3d6aa227c) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3cd}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) socketpair(0x5, 0x4, 0x9, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x6b}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8008000}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) 13:31:30 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r4, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008010) 13:31:30 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abbcaf210ccc78fd83261ef786"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "3b687d3e774ebccb"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) [ 154.239542] kmemleak: Found object by alias at 0x607f1a639ad4 [ 154.239572] CPU: 0 UID: 0 PID: 4108 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 154.239604] Tainted: [W]=WARN [ 154.239611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 154.239624] Call Trace: [ 154.239631] [ 154.239639] dump_stack_lvl+0xca/0x120 [ 154.239681] __lookup_object+0x94/0xb0 [ 154.239710] delete_object_full+0x27/0x70 [ 154.239739] free_percpu+0x30/0x1160 [ 154.239768] ? arch_uprobe_clear_state+0x16/0x140 [ 154.239803] futex_hash_free+0x38/0xc0 [ 154.239827] mmput+0x2d3/0x390 [ 154.239861] do_exit+0x79d/0x2970 [ 154.239885] ? lock_release+0xc8/0x290 [ 154.239927] ? __pfx_do_exit+0x10/0x10 [ 154.239952] ? find_held_lock+0x2b/0x80 [ 154.239989] ? get_signal+0x835/0x2340 [ 154.240024] do_group_exit+0xd3/0x2a0 [ 154.240051] get_signal+0x2315/0x2340 [ 154.240083] ? __fget_files+0x203/0x3b0 [ 154.240110] ? __pfx_get_signal+0x10/0x10 [ 154.240140] ? do_futex+0x135/0x370 [ 154.240164] ? __pfx_do_futex+0x10/0x10 [ 154.240192] arch_do_signal_or_restart+0x80/0x790 [ 154.240223] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 154.240252] ? __x64_sys_futex+0x1c9/0x4d0 [ 154.240274] ? __x64_sys_futex+0x1d2/0x4d0 [ 154.240299] ? __x64_sys_openat+0x142/0x200 [ 154.240329] ? __pfx___x64_sys_futex+0x10/0x10 [ 154.240352] ? __pfx_fput_close_sync+0x10/0x10 [ 154.240380] ? xfd_validate_state+0x55/0x180 [ 154.240418] exit_to_user_mode_loop+0x8b/0x110 [ 154.240441] do_syscall_64+0x2f7/0x360 [ 154.240462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.240483] RIP: 0033:0x7fe424572b19 [ 154.240499] Code: Unable to access opcode bytes at 0x7fe424572aef. [ 154.240508] RSP: 002b:00007fe421ae8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 154.240529] RAX: fffffffffffffe00 RBX: 00007fe424685f68 RCX: 00007fe424572b19 [ 154.240543] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe424685f68 [ 154.240555] RBP: 00007fe424685f60 R08: 0000000000000000 R09: 0000000000000000 [ 154.240568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe424685f6c [ 154.240581] R13: 00007ffd372906cf R14: 00007fe421ae8300 R15: 0000000000022000 [ 154.240610] [ 154.240617] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 154.240629] kmemleak: comm "syz-executor.2", pid 290, jiffies 4294820671 [ 154.240642] kmemleak: min_count = 1 [ 154.240648] kmemleak: count = 0 [ 154.240655] kmemleak: flags = 0x21 [ 154.240662] kmemleak: checksum = 0 [ 154.240668] kmemleak: backtrace: [ 154.240674] pcpu_alloc_noprof+0x87a/0x1170 [ 154.240701] mm_init+0x99b/0x1170 [ 154.240716] copy_process+0x3ab7/0x73c0 [ 154.240734] kernel_clone+0xea/0x7f0 [ 154.240752] __do_sys_clone+0xce/0x120 [ 154.240770] do_syscall_64+0xbf/0x360 [ 154.240786] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:31:30 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r3, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) 13:31:31 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:31 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) socketpair(0x2c, 0xa, 0xcc, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x0) r3 = getegid() r4 = getgid() getgroups(0x3, &(0x7f00000002c0)=[r3, r4, 0x0]) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x5, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) getgid() r8 = getgid() r9 = getegid() getgroups(0x5, &(0x7f0000000480)=[r3, r8, r5, r9, r6]) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000004c0)=0x7fff, &(0x7f0000000500)=0x2) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000540)=0xfb, 0x4) write$hidraw(r7, &(0x7f00000005c0)="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", 0xfc) 13:31:31 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c1}, 0x20000000) openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) 13:31:31 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)) [ 154.503741] kmemleak: Found object by alias at 0x607f1a639adc [ 154.503774] CPU: 1 UID: 0 PID: 4122 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 154.503807] Tainted: [W]=WARN [ 154.503814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 154.503827] Call Trace: [ 154.503834] [ 154.503841] dump_stack_lvl+0xca/0x120 [ 154.503882] __lookup_object+0x94/0xb0 [ 154.503927] delete_object_full+0x27/0x70 [ 154.503955] free_percpu+0x30/0x1160 [ 154.503989] ? arch_uprobe_clear_state+0x16/0x140 [ 154.504024] futex_hash_free+0x38/0xc0 [ 154.504049] mmput+0x2d3/0x390 [ 154.504082] do_exit+0x79d/0x2970 [ 154.504105] ? lock_release+0xc8/0x290 [ 154.504135] ? __pfx_do_exit+0x10/0x10 [ 154.504160] ? find_held_lock+0x2b/0x80 [ 154.504190] ? get_signal+0x835/0x2340 [ 154.504226] do_group_exit+0xd3/0x2a0 [ 154.504252] get_signal+0x2315/0x2340 [ 154.504288] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 154.504317] ? __pfx_get_signal+0x10/0x10 [ 154.504346] ? do_futex+0x135/0x370 [ 154.504371] ? __pfx_do_futex+0x10/0x10 [ 154.504398] arch_do_signal_or_restart+0x80/0x790 [ 154.504428] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 154.504457] ? __x64_sys_futex+0x1c9/0x4d0 [ 154.504479] ? __x64_sys_futex+0x1d2/0x4d0 [ 154.504504] ? fput_close_sync+0x114/0x240 [ 154.504532] ? __pfx___x64_sys_futex+0x10/0x10 [ 154.504555] ? __pfx_fput_close_sync+0x10/0x10 [ 154.504581] ? dnotify_flush+0x79/0x4c0 [ 154.504610] exit_to_user_mode_loop+0x8b/0x110 [ 154.504631] do_syscall_64+0x2f7/0x360 [ 154.504653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.504674] RIP: 0033:0x7efef96a6b19 [ 154.504689] Code: Unable to access opcode bytes at 0x7efef96a6aef. [ 154.504698] RSP: 002b:00007efef6bfb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 154.504719] RAX: fffffffffffffe00 RBX: 00007efef97ba028 RCX: 00007efef96a6b19 [ 154.504733] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efef97ba028 [ 154.504745] RBP: 00007efef97ba020 R08: 0000000000000000 R09: 0000000000000000 [ 154.504757] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef97ba02c [ 154.504770] R13: 00007ffc3c34aa4f R14: 00007efef6bfb300 R15: 0000000000022000 [ 154.504799] [ 154.504805] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 154.504817] kmemleak: comm "syz-executor.1", pid 281, jiffies 4294821095 [ 154.504830] kmemleak: min_count = 1 [ 154.504837] kmemleak: count = 0 [ 154.504843] kmemleak: flags = 0x21 [ 154.504850] kmemleak: checksum = 0 [ 154.504857] kmemleak: backtrace: [ 154.504862] pcpu_alloc_noprof+0x87a/0x1170 [ 154.504889] mm_init+0x99b/0x1170 [ 154.504904] copy_process+0x3ab7/0x73c0 [ 154.504922] kernel_clone+0xea/0x7f0 [ 154.504939] __do_sys_clone+0xce/0x120 [ 154.504957] do_syscall_64+0xbf/0x360 [ 154.504973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.608077] kmemleak: Found object by alias at 0x607f1a639ad4 [ 154.608105] CPU: 0 UID: 0 PID: 4130 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 154.608139] Tainted: [W]=WARN [ 154.608153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 154.608166] Call Trace: [ 154.608173] [ 154.608181] dump_stack_lvl+0xca/0x120 [ 154.608223] __lookup_object+0x94/0xb0 [ 154.608253] delete_object_full+0x27/0x70 [ 154.608284] free_percpu+0x30/0x1160 [ 154.608314] ? arch_uprobe_clear_state+0x16/0x140 [ 154.608351] futex_hash_free+0x38/0xc0 [ 154.608377] mmput+0x2d3/0x390 [ 154.608412] do_exit+0x79d/0x2970 [ 154.608446] ? __pfx_do_exit+0x10/0x10 [ 154.608473] ? find_held_lock+0x2b/0x80 [ 154.608506] ? get_signal+0x835/0x2340 [ 154.608544] do_group_exit+0xd3/0x2a0 [ 154.608573] get_signal+0x2315/0x2340 [ 154.608606] ? put_task_stack+0xd2/0x240 [ 154.608634] ? __pfx_get_signal+0x10/0x10 [ 154.608666] ? __schedule+0xe91/0x3590 [ 154.608703] arch_do_signal_or_restart+0x80/0x790 [ 154.608736] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 154.608767] ? __x64_sys_futex+0x1c9/0x4d0 [ 154.608791] ? __x64_sys_futex+0x1d2/0x4d0 [ 154.608817] ? __x64_sys_openat+0x142/0x200 [ 154.608851] ? __pfx___x64_sys_futex+0x10/0x10 [ 154.608878] ? __pfx_fput_close_sync+0x10/0x10 [ 154.608918] exit_to_user_mode_loop+0x8b/0x110 [ 154.608942] do_syscall_64+0x2f7/0x360 [ 154.608965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.608988] RIP: 0033:0x7fe424572b19 [ 154.609004] Code: Unable to access opcode bytes at 0x7fe424572aef. [ 154.609014] RSP: 002b:00007fe421ae8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 154.609035] RAX: 0000000000000001 RBX: 00007fe424685f68 RCX: 00007fe424572b19 [ 154.609050] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe424685f6c [ 154.609063] RBP: 00007fe424685f60 R08: 0000000000000016 R09: 0000000000000000 [ 154.609076] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fe424685f6c [ 154.609090] R13: 00007ffd372906cf R14: 00007fe421ae8300 R15: 0000000000022000 [ 154.609121] [ 154.609128] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 154.609141] kmemleak: comm "syz-executor.1", pid 281, jiffies 4294821095 [ 154.609155] kmemleak: min_count = 1 [ 154.609162] kmemleak: count = 0 [ 154.609169] kmemleak: flags = 0x21 [ 154.609176] kmemleak: checksum = 0 [ 154.609183] kmemleak: backtrace: [ 154.609190] pcpu_alloc_noprof+0x87a/0x1170 [ 154.609218] mm_init+0x99b/0x1170 [ 154.609234] copy_process+0x3ab7/0x73c0 [ 154.609253] kernel_clone+0xea/0x7f0 [ 154.609272] __do_sys_clone+0xce/0x120 [ 154.609291] do_syscall_64+0xbf/0x360 [ 154.609308] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:31:31 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x18d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8001}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b2a67682d76f457d9cd76bf438"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "667f460659"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x508, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4d4, 0x33, @mgmt_frame=@beacon={@wo_ht={{}, {0x34}, @broadcast, @device_b, @from_mac=@device_b, {0x5, 0x1}}, 0xfffffffffffffffc, @random=0x6, 0x200, @void, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x81, 0x8, 0x5, 0x6f}}, @void, @val={0x5, 0x42, {0x0, 0xfb, 0x7, "5b7e1101e157454539c010d91345b4f135e93ec356a3afb056d2d598a18b16a5eccfafe60f6d055b5a2acad2e0f89c359877e7e852fda7963339182f7176b6"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x1f, 0xb3, 0x3f}}, @val={0x2d, 0x1a, {0x282d, 0x1, 0x0, 0x0, {0xfffffffffffffffe, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x81, 0x11, 0x1f}}, [{0xdd, 0xcc, "0ea9cd16e77ff2f867c3a292077a10e335894ad830916dd22176b6f1a3738224fdd078c47ba752ba31cce83eee69c0c24325320ba40d681290f77a2098e4c240b032c0d5e0d111dd4991ca396bafe058f31024f7e09a2010ee3d67bcd43dfb51c8402d4fd3a694145cd3c48e09fde5844d78071e15fecc50e387eaae891239079ef1b739f1262d9f29c8ac3db0dc43c82e745b9edc5434cc1dee6183b4fdb24e4440b074ed105bab8c0608d59aa986a30063eb5ddf00ffede16d03ae263f5b21fa4d38cd74595092ec5a2cbb"}, {0xdd, 0xc8, "6e3415ea0cb3eed20cc5161da73aefcfde5c53e781c28833fa056ba6b0ed69bf8b7dab98ea8251637cc4a04bd74632795c49dbd36745999303bec652f943b4c9209dada02fa8a2cade38c14046425fae2b418a8e8369169ee4a9f31b4f1849886a34bd17044b27394e1475b65288c632ffc1ab2868af41b3bd3deb768c22793c0885e9f3d1aff416c6cf7f7b08fdc1538f0849e3f98f812636b5db0d17a3e4aa00ad226af821b39e3049f44bab775bfb8d1b80b1204e8675836be63df1dc959c5d8b7196e40102b3"}, {0xdd, 0x1a, "b45b2151f9fbb3adcb3762d6c4cdce597c97259ed76f177bd818"}, {0xdd, 0xc3, "ecaf74a42acf31e3391f97c1de28b029663d32bdc4caf6a27899d900279ed0d86508221b8a443d85a3b2a2358bbcf8ac66a3e063f890d167cf694011eacefb6fb1af29f5b17a6df256de5bc232ac29f4ccbb738d88bbde5272e9e880fae9c75524a7124bd04edbacacb3a3d8ce7715db0a5eece2d4c7df151b4cf6b04591b41e3a4bf0940e6c91f86d124ea545c3805fc972c1f918d0d050fa69f861e72537b823a65388052341624ab152ffdb51a1ec7e89711283830ea489195322138bfc5447ad6c"}, {0xdd, 0x6c, "2609a7d125e7e5a0746dd0fd32333915371d3eb24e8c562db698067ae607d5d69fd54c904c4776b513e0fd107b3f1f0b01a9ed0bd7a4abd283e7b20b361651d420f09faf44caabbe7be268bf7403ae28b4b530b127b5d6ddf5000ced28e147d703fd41695112f14ecc70012e"}, {0xdd, 0x4e, "678805b3180e4112e0f0c5ca55046318f6421fac1019b5fefa2aa6fbb8b7fe905a0011f3b9c9b9a133ab17d639bf21b3c817ff4dbf21b5f5533a5a417ed3cda5181a49e0c29eaf8bbc4a22a1207b"}, {0xdd, 0xe6, "96be726e347872cec4ae24a6f1a082782c1c7618ab38289626fd2469bd99404b4a2c9ad53d5fa681b93a76e9f84ccbbaed62fff85282a87e1b802540cab754e33139e614a7d78b2929e1fd3bc9bbe4fb13903d65e82a320cd9c28246b384bc004837dfeadab63b97e173d6f2f072294e13a75b36831ef66bccd9af7c8c833de05e91b237efd1342df8ba9d8d184eb9367f219dc1193dec5e5dac2b5d0b207a0a2441d0b16347045d53786cf32b19bddc736189b3ff3514f4014a2107e20f811d6183b960e346a3e9a4be9423d29c89b7cdb13628e8329ccc061656705de2cdc13e39308a7ba8"}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1d400000, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8fb8704d904bf5a7}, 0x49800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2fc, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xa3, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0xd, 0x138}}, @random="f118ae6ed6cb730b0b82776feb58405286d7526a007cea3e5bf0a7acf8ea39b19720362dcd16c366c59ae851d60bc40a0a5c4a3307cae59c6a660dd87641687e1a7114392e154c2cfd1b005d3dc48a7c119169602d78b9aa0e6b1eeb7b37384b8b83c8185cb656d9e1b5f1475cb4535cde44dffb4659a5406315f26bbcbb5537bb2def6c0a1e8e"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_FRAME={0x1fc, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ff8}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0x9}}, {0x7, 0x1, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @random="513160f81f4e", @initial, {0x7, 0xfe0}}, {0x2, 0x1, 0x0, 0x1, 0x4}}}, @random="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"}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc040}, 0xe6a27aa3d6aa227c) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3cd}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) socketpair(0x5, 0x4, 0x9, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) 13:31:31 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "ce42df9f96dff7ee5e628ab7e9292f5cd2cd96ebe3ad0b2c7e4cbde4b5f1fadbdee21f431961ce2e82336d4faf837a5b991836cad876b28145c7bab867df8a7788a3770255a8ad30c1c3d51c73976f9a42ddc50fd1c9d191e8bca11f2c44f171d614333bfc495a25f1f5a375e86fe15e2ca1b23378ac43b6b38b311688f438ac607446496dfb7df0a04b9f66eb622e9b43f5640848ccc19efe11d3732bc4431184c70491e77e6196be2a9e632262724239e4d6816d0a71dd1a53aad99cd13d9c57a87c333d0e16c805c9a291363847a97ac9562ea6f1363407ed1e82bd683f0f938112e4684799f8acfd6eec58a4410a101227871c580c1d9f0a4caf62dac0dade1098a0aef0d05f674dc893fbbfa8da026d79c5c17a9162576f66237a2929cd1bbfb139337e1867cf383960764fdc75c18801fe77c6e8b48f65248cabbe19f627e2f3f9cb87d03c46164d8950ab4a5e559636315b3e5b9aa49e4a2cedbf82cb0a3515a71630641ee6fce937f3acf0989a8323262dfe2fa7bf483b930028c16caa5392903014bedbbfa34f823d19a7fd7c8fd160c8f26e8788d586dd5adf358183a17cc4e627da55bbac3f96abd634102dbe6ad34195f76458f53195db2a081e609aadc6e8976d504a9d9f7bc176d7da42b2e7a98bacbd13342142be55fb7a63a1cf396f283422328ddad0559092e5de344e591432525e5536580905d6c33b72bdf3a2ece1d1475504ffa2f9dc34a9fa28f31b5da97869010881d0059145ff32861163badf217c39b49a95066628083f272c628629d984f1305edd04e19b71eb77b7dd5f9016222ab89b6af493a2d8b966dc6e3fa61f2d7e7d7298e680f54718a13436cc10522cbafc2e5534551c1c5498a021f854215ce26aa4e09f29ee88ce7ab9c73c87fb2cb1db2d97eb177b845a84e11d6a06e29603a2795cb662c79130a1f392260976222f4a5df1fa74ca7a775e48b14e8db7b9c3115dcb6cdb9c480a2461fa671c9cbbe959fc6a1904bc8834bf13cd25722b4e20dc7cb4286ffa22374e89fc54a5089d5d5fd4872e208497be5805d7823cead32044614efc1ad4a369a539e0409393e91d80d4bc2c684806755694750ff753ae61a9afd83ecb19d001a3a427596bbf416ecbab12073dd8ee7afcdd3f09ab16568326d31c536fa5379bc03a11cbcdc3d131ee9e4b36a923a682fe9e3ff9b79c34c135044bcdce537db6c9ff7d1c30777f94cc460594a628d04a861bfaf847a2b584296352cf5d7eea37144ad954766d892b1aa40457ee05"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:31 executing program 4: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x45) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x806, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0xfffffffc, 0x7d}}}}, ["", "", ""]}, 0x28}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) socket$unix(0x1, 0x1, 0x0) socketpair(0x21, 0x6, 0x3, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x676}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x354}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000005) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vxcan0\x00'}) 13:31:31 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000006c0)={{0x99}, {0x1f}, 0x800, 0x7, 0xe0}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) 13:31:31 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r3, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) [ 154.837916] kmemleak: Found object by alias at 0x607f1a639ad8 [ 154.837946] CPU: 1 UID: 0 PID: 4135 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 154.837976] Tainted: [W]=WARN [ 154.837990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 154.838002] Call Trace: [ 154.838009] [ 154.838016] dump_stack_lvl+0xca/0x120 [ 154.838053] __lookup_object+0x94/0xb0 [ 154.838080] delete_object_full+0x27/0x70 [ 154.838107] free_percpu+0x30/0x1160 [ 154.838134] ? arch_uprobe_clear_state+0x16/0x140 [ 154.838167] futex_hash_free+0x38/0xc0 [ 154.838190] mmput+0x2d3/0x390 [ 154.838221] do_exit+0x79d/0x2970 [ 154.838244] ? lock_release+0xc8/0x290 [ 154.838271] ? __pfx_do_exit+0x10/0x10 [ 154.838295] ? find_held_lock+0x2b/0x80 [ 154.838324] ? get_signal+0x835/0x2340 [ 154.838358] do_group_exit+0xd3/0x2a0 [ 154.838383] get_signal+0x2315/0x2340 [ 154.838422] ? __pfx_get_signal+0x10/0x10 [ 154.838450] ? do_futex+0x135/0x370 [ 154.838473] ? __pfx_do_futex+0x10/0x10 [ 154.838498] arch_do_signal_or_restart+0x80/0x790 [ 154.838527] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 154.838555] ? __x64_sys_futex+0x1c9/0x4d0 [ 154.838576] ? __x64_sys_futex+0x1d2/0x4d0 [ 154.838599] ? fput_close_sync+0x114/0x240 [ 154.838626] ? __pfx___x64_sys_futex+0x10/0x10 [ 154.838647] ? __pfx_fput_close_sync+0x10/0x10 [ 154.838673] ? dnotify_flush+0x79/0x4c0 [ 154.838690] ? xfd_validate_state+0x55/0x180 [ 154.838725] exit_to_user_mode_loop+0x8b/0x110 [ 154.838746] do_syscall_64+0x2f7/0x360 [ 154.838766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.838785] RIP: 0033:0x7f7ef8436b19 [ 154.838800] Code: Unable to access opcode bytes at 0x7f7ef8436aef. [ 154.838809] RSP: 002b:00007f7ef59ac218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 154.838828] RAX: fffffffffffffe00 RBX: 00007f7ef8549f68 RCX: 00007f7ef8436b19 [ 154.838841] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ef8549f68 [ 154.838853] RBP: 00007f7ef8549f60 R08: 0000000000000000 R09: 0000000000000000 [ 154.838864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ef8549f6c [ 154.838876] R13: 00007ffcb4d498ef R14: 00007f7ef59ac300 R15: 0000000000022000 [ 154.838903] [ 154.838909] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 154.838921] kmemleak: comm "systemd-udevd", pid 109, jiffies 4294821308 [ 154.838933] kmemleak: min_count = 1 [ 154.838939] kmemleak: count = 0 [ 154.838945] kmemleak: flags = 0x21 [ 154.838952] kmemleak: checksum = 0 [ 154.838958] kmemleak: backtrace: [ 154.838964] pcpu_alloc_noprof+0x87a/0x1170 [ 154.838989] mm_init+0x99b/0x1170 [ 154.839003] copy_process+0x3ab7/0x73c0 [ 154.839020] kernel_clone+0xea/0x7f0 [ 154.839037] __do_sys_clone+0xce/0x120 [ 154.839054] do_syscall_64+0xbf/0x360 [ 154.839068] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:31:40 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000600)={0x8, 0x7, 0x1, 'queue1\x00', 0xfffff000}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) 13:31:40 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) socketpair(0x2c, 0xa, 0xcc, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x0) r3 = getegid() r4 = getgid() getgroups(0x3, &(0x7f00000002c0)=[r3, r4, 0x0]) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x5, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) getgid() r8 = getgid() r9 = getegid() getgroups(0x5, &(0x7f0000000480)=[r3, r8, r5, r9, r6]) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000004c0)=0x7fff, &(0x7f0000000500)=0x2) write$hidraw(r7, &(0x7f00000005c0)="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", 0xfc) 13:31:40 executing program 4: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x45) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x806, 0x40, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0xfffffffc, 0x7d}}}}, ["", "", ""]}, 0x28}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) socket$unix(0x1, 0x1, 0x0) socketpair(0x21, 0x6, 0x3, &(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x676}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x354}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x20000005) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vxcan0\x00'}) 13:31:40 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r3, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0880, 0x0) 13:31:40 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x12400, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x20, 0x100) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000000) socketpair(0x2b, 0x2, 0xf56, &(0x7f0000000580)) 13:31:40 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) 13:31:40 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x18d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8001}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b2a67682d76f457d9cd76bf438"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "667f460659"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x508, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4d4, 0x33, @mgmt_frame=@beacon={@wo_ht={{}, {0x34}, @broadcast, @device_b, @from_mac=@device_b, {0x5, 0x1}}, 0xfffffffffffffffc, @random=0x6, 0x200, @void, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x81, 0x8, 0x5, 0x6f}}, @void, @val={0x5, 0x42, {0x0, 0xfb, 0x7, "5b7e1101e157454539c010d91345b4f135e93ec356a3afb056d2d598a18b16a5eccfafe60f6d055b5a2acad2e0f89c359877e7e852fda7963339182f7176b6"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x1f, 0xb3, 0x3f}}, @val={0x2d, 0x1a, {0x282d, 0x1, 0x0, 0x0, {0xfffffffffffffffe, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x81, 0x11, 0x1f}}, [{0xdd, 0xcc, "0ea9cd16e77ff2f867c3a292077a10e335894ad830916dd22176b6f1a3738224fdd078c47ba752ba31cce83eee69c0c24325320ba40d681290f77a2098e4c240b032c0d5e0d111dd4991ca396bafe058f31024f7e09a2010ee3d67bcd43dfb51c8402d4fd3a694145cd3c48e09fde5844d78071e15fecc50e387eaae891239079ef1b739f1262d9f29c8ac3db0dc43c82e745b9edc5434cc1dee6183b4fdb24e4440b074ed105bab8c0608d59aa986a30063eb5ddf00ffede16d03ae263f5b21fa4d38cd74595092ec5a2cbb"}, {0xdd, 0xc8, "6e3415ea0cb3eed20cc5161da73aefcfde5c53e781c28833fa056ba6b0ed69bf8b7dab98ea8251637cc4a04bd74632795c49dbd36745999303bec652f943b4c9209dada02fa8a2cade38c14046425fae2b418a8e8369169ee4a9f31b4f1849886a34bd17044b27394e1475b65288c632ffc1ab2868af41b3bd3deb768c22793c0885e9f3d1aff416c6cf7f7b08fdc1538f0849e3f98f812636b5db0d17a3e4aa00ad226af821b39e3049f44bab775bfb8d1b80b1204e8675836be63df1dc959c5d8b7196e40102b3"}, {0xdd, 0x1a, "b45b2151f9fbb3adcb3762d6c4cdce597c97259ed76f177bd818"}, {0xdd, 0xc3, "ecaf74a42acf31e3391f97c1de28b029663d32bdc4caf6a27899d900279ed0d86508221b8a443d85a3b2a2358bbcf8ac66a3e063f890d167cf694011eacefb6fb1af29f5b17a6df256de5bc232ac29f4ccbb738d88bbde5272e9e880fae9c75524a7124bd04edbacacb3a3d8ce7715db0a5eece2d4c7df151b4cf6b04591b41e3a4bf0940e6c91f86d124ea545c3805fc972c1f918d0d050fa69f861e72537b823a65388052341624ab152ffdb51a1ec7e89711283830ea489195322138bfc5447ad6c"}, {0xdd, 0x6c, "2609a7d125e7e5a0746dd0fd32333915371d3eb24e8c562db698067ae607d5d69fd54c904c4776b513e0fd107b3f1f0b01a9ed0bd7a4abd283e7b20b361651d420f09faf44caabbe7be268bf7403ae28b4b530b127b5d6ddf5000ced28e147d703fd41695112f14ecc70012e"}, {0xdd, 0x4e, "678805b3180e4112e0f0c5ca55046318f6421fac1019b5fefa2aa6fbb8b7fe905a0011f3b9c9b9a133ab17d639bf21b3c817ff4dbf21b5f5533a5a417ed3cda5181a49e0c29eaf8bbc4a22a1207b"}, {0xdd, 0xe6, "96be726e347872cec4ae24a6f1a082782c1c7618ab38289626fd2469bd99404b4a2c9ad53d5fa681b93a76e9f84ccbbaed62fff85282a87e1b802540cab754e33139e614a7d78b2929e1fd3bc9bbe4fb13903d65e82a320cd9c28246b384bc004837dfeadab63b97e173d6f2f072294e13a75b36831ef66bccd9af7c8c833de05e91b237efd1342df8ba9d8d184eb9367f219dc1193dec5e5dac2b5d0b207a0a2441d0b16347045d53786cf32b19bddc736189b3ff3514f4014a2107e20f811d6183b960e346a3e9a4be9423d29c89b7cdb13628e8329ccc061656705de2cdc13e39308a7ba8"}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1d400000, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8fb8704d904bf5a7}, 0x49800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2fc, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xa3, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0xd, 0x138}}, @random="f118ae6ed6cb730b0b82776feb58405286d7526a007cea3e5bf0a7acf8ea39b19720362dcd16c366c59ae851d60bc40a0a5c4a3307cae59c6a660dd87641687e1a7114392e154c2cfd1b005d3dc48a7c119169602d78b9aa0e6b1eeb7b37384b8b83c8185cb656d9e1b5f1475cb4535cde44dffb4659a5406315f26bbcbb5537bb2def6c0a1e8e"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_FRAME={0x1fc, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ff8}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0x9}}, {0x7, 0x1, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @random="513160f81f4e", @initial, {0x7, 0xfe0}}, {0x2, 0x1, 0x0, 0x1, 0x4}}}, @random="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"}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc040}, 0xe6a27aa3d6aa227c) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3cd}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) socketpair(0x5, 0x4, 0x9, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) 13:31:40 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:40 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x2) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) [ 163.805262] kmemleak: Found object by alias at 0x607f1a639adc [ 163.805285] CPU: 0 UID: 0 PID: 4187 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 163.805304] Tainted: [W]=WARN [ 163.805307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 163.805315] Call Trace: [ 163.805319] [ 163.805324] dump_stack_lvl+0xca/0x120 [ 163.805350] __lookup_object+0x94/0xb0 [ 163.805367] delete_object_full+0x27/0x70 [ 163.805383] free_percpu+0x30/0x1160 [ 163.805400] ? arch_uprobe_clear_state+0x16/0x140 [ 163.805420] futex_hash_free+0x38/0xc0 [ 163.805434] mmput+0x2d3/0x390 [ 163.805454] do_exit+0x79d/0x2970 [ 163.805471] ? __pfx_do_exit+0x10/0x10 [ 163.805485] ? find_held_lock+0x2b/0x80 [ 163.805503] ? get_signal+0x835/0x2340 [ 163.805523] do_group_exit+0xd3/0x2a0 [ 163.805537] get_signal+0x2315/0x2340 [ 163.805554] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 163.805571] ? __pfx_get_signal+0x10/0x10 [ 163.805587] ? do_futex+0x135/0x370 [ 163.805600] ? __pfx_do_futex+0x10/0x10 [ 163.805615] arch_do_signal_or_restart+0x80/0x790 [ 163.805633] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 163.805649] ? __x64_sys_futex+0x1c9/0x4d0 [ 163.805660] ? __x64_sys_futex+0x1d2/0x4d0 [ 163.805678] ? fput_close_sync+0x114/0x240 [ 163.805694] ? __pfx___x64_sys_futex+0x10/0x10 [ 163.805707] ? __pfx_fput_close_sync+0x10/0x10 [ 163.805721] ? dnotify_flush+0x79/0x4c0 [ 163.805732] ? xfd_validate_state+0x55/0x180 [ 163.805753] exit_to_user_mode_loop+0x8b/0x110 [ 163.805767] do_syscall_64+0x2f7/0x360 [ 163.805779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.805790] RIP: 0033:0x7efef96a6b19 [ 163.805799] Code: Unable to access opcode bytes at 0x7efef96a6aef. [ 163.805804] RSP: 002b:00007efef6bfb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 163.805816] RAX: fffffffffffffe00 RBX: 00007efef97ba028 RCX: 00007efef96a6b19 [ 163.805824] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efef97ba028 [ 163.805831] RBP: 00007efef97ba020 R08: 0000000000000000 R09: 0000000000000000 [ 163.805838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efef97ba02c [ 163.805845] R13: 00007ffc3c34aa4f R14: 00007efef6bfb300 R15: 0000000000022000 [ 163.805861] [ 163.805865] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 163.805872] kmemleak: comm "syz-executor.7", pid 292, jiffies 4294830288 [ 163.805879] kmemleak: min_count = 1 [ 163.805883] kmemleak: count = 0 [ 163.805887] kmemleak: flags = 0x21 [ 163.805890] kmemleak: checksum = 0 [ 163.805894] kmemleak: backtrace: [ 163.805898] pcpu_alloc_noprof+0x87a/0x1170 [ 163.805913] mm_init+0x99b/0x1170 [ 163.805921] copy_process+0x3ab7/0x73c0 [ 163.805931] kernel_clone+0xea/0x7f0 [ 163.805940] __do_sys_clone+0xce/0x120 [ 163.805950] do_syscall_64+0xbf/0x360 [ 163.805958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.837493] kmemleak: Found object by alias at 0x607f1a639ad4 [ 163.837505] CPU: 0 UID: 0 PID: 4181 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 163.837522] Tainted: [W]=WARN [ 163.837526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 163.837532] Call Trace: [ 163.837536] [ 163.837540] dump_stack_lvl+0xca/0x120 [ 163.837559] __lookup_object+0x94/0xb0 [ 163.837573] delete_object_full+0x27/0x70 [ 163.837589] free_percpu+0x30/0x1160 [ 163.837603] ? arch_uprobe_clear_state+0x16/0x140 [ 163.837621] futex_hash_free+0x38/0xc0 [ 163.837634] mmput+0x2d3/0x390 [ 163.837651] do_exit+0x79d/0x2970 [ 163.837664] ? lock_release+0xc8/0x290 [ 163.837679] ? __pfx_do_exit+0x10/0x10 [ 163.837693] ? find_held_lock+0x2b/0x80 [ 163.837709] ? get_signal+0x835/0x2340 [ 163.837728] do_group_exit+0xd3/0x2a0 [ 163.837742] get_signal+0x2315/0x2340 [ 163.837760] ? __fget_files+0x203/0x3b0 [ 163.837775] ? __pfx_get_signal+0x10/0x10 [ 163.837791] ? do_futex+0x135/0x370 [ 163.837805] ? __pfx_do_futex+0x10/0x10 [ 163.837820] arch_do_signal_or_restart+0x80/0x790 [ 163.837836] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 163.837851] ? __x64_sys_futex+0x1c9/0x4d0 [ 163.837864] ? __x64_sys_futex+0x1d2/0x4d0 [ 163.837877] ? __x64_sys_openat+0x142/0x200 [ 163.837894] ? __pfx___x64_sys_futex+0x10/0x10 [ 163.837906] ? __pfx_fput_close_sync+0x10/0x10 [ 163.837926] exit_to_user_mode_loop+0x8b/0x110 [ 163.837938] do_syscall_64+0x2f7/0x360 [ 163.837949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.837960] RIP: 0033:0x7fe424572b19 [ 163.837969] Code: Unable to access opcode bytes at 0x7fe424572aef. [ 163.837974] RSP: 002b:00007fe421ae8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 163.837989] RAX: fffffffffffffe00 RBX: 00007fe424685f68 RCX: 00007fe424572b19 [ 163.837997] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe424685f68 [ 163.838003] RBP: 00007fe424685f60 R08: 0000000000000000 R09: 0000000000000000 [ 163.838010] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe424685f6c [ 163.838017] R13: 00007ffd372906cf R14: 00007fe421ae8300 R15: 0000000000022000 [ 163.838032] [ 163.838036] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 163.838043] kmemleak: comm "syz-executor.7", pid 292, jiffies 4294830288 [ 163.838049] kmemleak: min_count = 1 [ 163.838053] kmemleak: count = 0 [ 163.838057] kmemleak: flags = 0x21 [ 163.838060] kmemleak: checksum = 0 [ 163.838064] kmemleak: backtrace: [ 163.838067] pcpu_alloc_noprof+0x87a/0x1170 [ 163.838081] mm_init+0x99b/0x1170 [ 163.838089] copy_process+0x3ab7/0x73c0 [ 163.838099] kernel_clone+0xea/0x7f0 [ 163.838109] __do_sys_clone+0xce/0x120 [ 163.838119] do_syscall_64+0xbf/0x360 [ 163.838127] entry_SYSCALL_64_after_hwframe+0x77/0x7f 13:31:40 executing program 1: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1, 0x1, 0xee, 0x9}) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="5f540d09714d4945330db1786fd8bdefaf0bb1ee8088af9ac79d343d7a54323ef50a1d685b04e57fd6a4963060a662589645c2d096d7e90e0e9b2f761b697845a53addccecca5ecbf9cbfa24c0dcbd09f08163804e51f6e0e7034e671043006e923c4d0b341952316c") ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0x200}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0x18) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000001c0)) openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4c480, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000014c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000940)={0xb3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_PROBE_RESP={0x4b4, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x255, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x88}, @device_a, @device_a, @from_mac=@broadcast, {0x5, 0x4}}, 0xc8e, @default, 0xa0, @val={0x0, 0x14, @random="be8756c3ecc3ce99adf058b88b5a1cd246b39022"}, @val={0x1, 0x7, [{0x3, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {}, {0x1b, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0x3f, 0x9b, 0xc0, 0x2}}, @val={0x6, 0x2, 0x3f}, @val={0x5, 0xcf, {0xa3, 0x85, 0xff, "b31285ef25bdc88ecd18e91492e1c784ae0355133258a3370510618129ed6348c8dcf0a869a222dd540d4b5fd720f59ffb4829ec54bb7ba0178c93548f75fdd5857a9055a4e41544ec0bab808ce9105dacf428065acd0ce018489763e297e1327aeeda9ffbef148e9796bff2d92346bd14cbc74c1dc74558410c6ed5e18cdbd3d0ff393b66ef6c8fe0224e0f46d19818306fd9dd80de85ce9c6ace3eb4a1c3076c4a7a23a411eb05e8f18cb7bd6fccf38b9fc8edf4ce671bce658974c4816a50999b1da6d30c9e59e1b595cf"}}, @val={0x25, 0x3, {0x1, 0xe1, 0x4}}, @void, @val={0x3c, 0x4, {0x0, 0xc2, 0xad, 0x56}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x10000, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x8, 0xc264, 0x3f}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x41}}, @val={0x76, 0x6, {0x1, 0x1f, 0x5, 0x6}}, [{0xdd, 0x97, "c610cc157aa0488d353b0728e0d50f7c13ada76e60b715cb88d7a3b4249edd4517282a0ac379042310ca876d2e1e33490dff8c98f876b4fb495f3b3faa20b1b01dd40546cc3f96c8fc60b46bb7d3c573aa52a624a55db3d9c0e5ef042591c7fb7a7f44c848a35c0ab8e3c47129eb23a4240ac1a087677a27b135679f36e622e4b26b69100499c23fff9dbeede4a3479b6b5ca3b9eca392"}, {0xdd, 0x5b, "e5aa1fde34ad86e661e3f01e5c0f967ccb49dac301af5989c4d186cf97436ad3dd0d92b958e8b2ec74dc8756d14ceb5c6ff338e1065e9b4c55132d95d380aba729ad0ff2f102e54c995646ef8b40518a4c26f0ddfc9c119808f0c3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1c, 0xf, [@cf={0x4, 0x6, {0x0, 0x81, 0x100, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x4c, 0x3, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x2, 0x5a45, @broadcast, 0x0, "", 0xfffffffc, 0x1f, 0x4, [{{0x1}, @device_b, 0x7}, {{}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @device_b, 0xd393}, {{}, @device_a, 0x101}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x392, 0x91, "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"}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x91}, 0x200400c0) 13:31:40 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x67}, 'port1\x00', 0x42, 0x0, 0xff, 0x8654, 0x3, 0x1000, 0x4, 0x0, 0x7, 0xf3}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x689, 0x121000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x3f, 0x2, {0x0, 0x0, 0x2, 0x3, 0x3}, 0x9d0}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x3, 0x8}, {0x9, 0x3}, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x9, 0x8001, 0x1, 'queue0\x00', 0x20}) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x3, 0x9, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000004c0)={0x1, 0x7, 0x3ff, 0x5, 0x1, 0x80000000}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000540)=0x8) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000940)=0xfffb, 0x2) 13:31:40 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7d}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffa}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xab}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xbbb0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffff7576, 0x2d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "bdf24196ec8896f682925bbea9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)={0x1981, 0xe99}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000300)) socketpair(0x11, 0x80000, 0x4, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb2e7690a, 0x71}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000480)=0xfffffffffffffff9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe27, 0x18}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000640), 0x2) socketpair(0x0, 0x6, 0x9, &(0x7f0000000680)) openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x400400, 0x0) [ 163.937143] kmemleak: Found object by alias at 0x607f1a639ad8 [ 163.937168] CPU: 0 UID: 0 PID: 4183 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 163.937187] Tainted: [W]=WARN [ 163.937192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 163.937200] Call Trace: [ 163.937204] [ 163.937209] dump_stack_lvl+0xca/0x120 [ 163.937235] __lookup_object+0x94/0xb0 [ 163.937253] delete_object_full+0x27/0x70 [ 163.937269] free_percpu+0x30/0x1160 [ 163.937286] ? arch_uprobe_clear_state+0x16/0x140 [ 163.937306] futex_hash_free+0x38/0xc0 [ 163.937321] mmput+0x2d3/0x390 [ 163.937340] do_exit+0x79d/0x2970 [ 163.937354] ? lock_release+0xc8/0x290 [ 163.937371] ? __pfx_do_exit+0x10/0x10 [ 163.937385] ? find_held_lock+0x2b/0x80 [ 163.937402] ? get_signal+0x835/0x2340 [ 163.937424] do_group_exit+0xd3/0x2a0 [ 163.937441] get_signal+0x2315/0x2340 [ 163.937464] ? __pfx_get_signal+0x10/0x10 [ 163.937480] ? do_futex+0x135/0x370 [ 163.937493] ? __pfx_do_futex+0x10/0x10 [ 163.937508] arch_do_signal_or_restart+0x80/0x790 [ 163.937526] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 163.937542] ? __x64_sys_futex+0x1c9/0x4d0 [ 163.937554] ? __x64_sys_futex+0x1d2/0x4d0 [ 163.937567] ? fput_close_sync+0x114/0x240 [ 163.937584] ? __pfx___x64_sys_futex+0x10/0x10 [ 163.937596] ? __pfx_fput_close_sync+0x10/0x10 [ 163.937610] ? dnotify_flush+0x79/0x4c0 [ 163.937621] ? xfd_validate_state+0x55/0x180 [ 163.937642] exit_to_user_mode_loop+0x8b/0x110 [ 163.937655] do_syscall_64+0x2f7/0x360 [ 163.937667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.937680] RIP: 0033:0x7f7ef8436b19 [ 163.937689] Code: Unable to access opcode bytes at 0x7f7ef8436aef. [ 163.937694] RSP: 002b:00007f7ef59ac218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 163.937705] RAX: fffffffffffffe00 RBX: 00007f7ef8549f68 RCX: 00007f7ef8436b19 [ 163.937713] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ef8549f68 [ 163.937720] RBP: 00007f7ef8549f60 R08: 0000000000000000 R09: 0000000000000000 [ 163.937727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ef8549f6c [ 163.937734] R13: 00007ffcb4d498ef R14: 00007f7ef59ac300 R15: 0000000000022000 [ 163.937749] [ 163.937753] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 163.937760] kmemleak: comm "kworker/u10:2", pid 4198, jiffies 4294830550 [ 163.937767] kmemleak: min_count = 1 [ 163.937770] kmemleak: count = 0 [ 163.937774] kmemleak: flags = 0x21 [ 163.937778] kmemleak: checksum = 0 [ 163.937782] kmemleak: backtrace: [ 163.937785] pcpu_alloc_noprof+0x87a/0x1170 [ 163.937800] mm_init+0x99b/0x1170 [ 163.937808] mm_alloc+0xa0/0xd0 [ 163.937816] alloc_bprm+0x2e3/0x6e0 [ 163.937832] kernel_execve+0xb0/0x3d0 [ 163.937841] call_usermodehelper_exec_async+0x25f/0x4e0 [ 163.937857] ret_from_fork+0x34b/0x430 [ 163.937873] ret_from_fork_asm+0x1a/0x30 13:31:40 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffff830, 0x180) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_open_dev$hidraw(&(0x7f0000000140), 0x8, 0x220000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x63, 0x2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x49}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x84) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r3, 0xfe846fc008dc16d5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) 13:31:40 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x18d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8001}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b2a67682d76f457d9cd76bf438"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "667f460659"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x4004000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x508, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4d4, 0x33, @mgmt_frame=@beacon={@wo_ht={{}, {0x34}, @broadcast, @device_b, @from_mac=@device_b, {0x5, 0x1}}, 0xfffffffffffffffc, @random=0x6, 0x200, @void, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x81, 0x8, 0x5, 0x6f}}, @void, @val={0x5, 0x42, {0x0, 0xfb, 0x7, "5b7e1101e157454539c010d91345b4f135e93ec356a3afb056d2d598a18b16a5eccfafe60f6d055b5a2acad2e0f89c359877e7e852fda7963339182f7176b6"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x1f, 0xb3, 0x3f}}, @val={0x2d, 0x1a, {0x282d, 0x1, 0x0, 0x0, {0xfffffffffffffffe, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x1}}, @val={0x76, 0x6, {0x4, 0x81, 0x11, 0x1f}}, [{0xdd, 0xcc, "0ea9cd16e77ff2f867c3a292077a10e335894ad830916dd22176b6f1a3738224fdd078c47ba752ba31cce83eee69c0c24325320ba40d681290f77a2098e4c240b032c0d5e0d111dd4991ca396bafe058f31024f7e09a2010ee3d67bcd43dfb51c8402d4fd3a694145cd3c48e09fde5844d78071e15fecc50e387eaae891239079ef1b739f1262d9f29c8ac3db0dc43c82e745b9edc5434cc1dee6183b4fdb24e4440b074ed105bab8c0608d59aa986a30063eb5ddf00ffede16d03ae263f5b21fa4d38cd74595092ec5a2cbb"}, {0xdd, 0xc8, "6e3415ea0cb3eed20cc5161da73aefcfde5c53e781c28833fa056ba6b0ed69bf8b7dab98ea8251637cc4a04bd74632795c49dbd36745999303bec652f943b4c9209dada02fa8a2cade38c14046425fae2b418a8e8369169ee4a9f31b4f1849886a34bd17044b27394e1475b65288c632ffc1ab2868af41b3bd3deb768c22793c0885e9f3d1aff416c6cf7f7b08fdc1538f0849e3f98f812636b5db0d17a3e4aa00ad226af821b39e3049f44bab775bfb8d1b80b1204e8675836be63df1dc959c5d8b7196e40102b3"}, {0xdd, 0x1a, "b45b2151f9fbb3adcb3762d6c4cdce597c97259ed76f177bd818"}, {0xdd, 0xc3, "ecaf74a42acf31e3391f97c1de28b029663d32bdc4caf6a27899d900279ed0d86508221b8a443d85a3b2a2358bbcf8ac66a3e063f890d167cf694011eacefb6fb1af29f5b17a6df256de5bc232ac29f4ccbb738d88bbde5272e9e880fae9c75524a7124bd04edbacacb3a3d8ce7715db0a5eece2d4c7df151b4cf6b04591b41e3a4bf0940e6c91f86d124ea545c3805fc972c1f918d0d050fa69f861e72537b823a65388052341624ab152ffdb51a1ec7e89711283830ea489195322138bfc5447ad6c"}, {0xdd, 0x6c, "2609a7d125e7e5a0746dd0fd32333915371d3eb24e8c562db698067ae607d5d69fd54c904c4776b513e0fd107b3f1f0b01a9ed0bd7a4abd283e7b20b361651d420f09faf44caabbe7be268bf7403ae28b4b530b127b5d6ddf5000ced28e147d703fd41695112f14ecc70012e"}, {0xdd, 0x4e, "678805b3180e4112e0f0c5ca55046318f6421fac1019b5fefa2aa6fbb8b7fe905a0011f3b9c9b9a133ab17d639bf21b3c817ff4dbf21b5f5533a5a417ed3cda5181a49e0c29eaf8bbc4a22a1207b"}, {0xdd, 0xe6, "96be726e347872cec4ae24a6f1a082782c1c7618ab38289626fd2469bd99404b4a2c9ad53d5fa681b93a76e9f84ccbbaed62fff85282a87e1b802540cab754e33139e614a7d78b2929e1fd3bc9bbe4fb13903d65e82a320cd9c28246b384bc004837dfeadab63b97e173d6f2f072294e13a75b36831ef66bccd9af7c8c833de05e91b237efd1342df8ba9d8d184eb9367f219dc1193dec5e5dac2b5d0b207a0a2441d0b16347045d53786cf32b19bddc736189b3ff3514f4014a2107e20f811d6183b960e346a3e9a4be9423d29c89b7cdb13628e8329ccc061656705de2cdc13e39308a7ba8"}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1d400000, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8fb8704d904bf5a7}, 0x49800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2fc, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xa3, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0xd, 0x138}}, @random="f118ae6ed6cb730b0b82776feb58405286d7526a007cea3e5bf0a7acf8ea39b19720362dcd16c366c59ae851d60bc40a0a5c4a3307cae59c6a660dd87641687e1a7114392e154c2cfd1b005d3dc48a7c119169602d78b9aa0e6b1eeb7b37384b8b83c8185cb656d9e1b5f1475cb4535cde44dffb4659a5406315f26bbcbb5537bb2def6c0a1e8e"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_FRAME={0x1fc, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ff8}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0x9}}, {0x7, 0x1, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @random="513160f81f4e", @initial, {0x7, 0xfe0}}, {0x2, 0x1, 0x0, 0x1, 0x4}}}, @random="1aee3c5531e8b86c6cce6fa3bd6a24fca55478fab7123b818c11b6232a7bf61467bc7f73eeca54dfbfe147f5a57dcacdc92e8f7b1a1e3cda9ca5f9a34db9a6c1aa41bad88c3a752caa854e086928023831a0b65bcf6e6f1680611a73905022db10ed171de45427cc2a9c37b1f68fadcc5818eb860b47c23f462574ea3e6e4b07edb4b86e13099709dc8e785a5894b42a37da97c18bdf9891b1eca25a49f6c6da5c8f00625dbc2dd46488390164a50bf628cf6762bf80de81bf6b3f5049783facf3d49a17bd09d879963fc07d6e385d2722a03d92b7675f0814ffa6334311582b8704cd8e42075a6e0a767998c5f47cb240c84b74ac33b8486a8fc507e5ab91fed818fba579c0f3f3641dfa8f5e351c98039c65ab4089280af24420d9a33a54625795fc25f3a14ced19ad48e4f1413f5dda02a5d149f98e5fea1b2b7bfc70626638303b68f15b87bbf40db932d26206d3bfc542181650c5f13e3befaf35e2e2ad469dbea2d707a7bba1032932cf46a6fcbdc5de5f7999a784ab6e7c33f75034ed2f6e0b5743c79df9fb7314e0f55cfc9d574246210861cecbccf13e08664a713542d69482db6a168bd5479a69485c6b0c8be05db2b908ec0cb2efa0b78c927fefe96154d2"}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc040}, 0xe6a27aa3d6aa227c) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3cd}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) socketpair(0x5, 0x4, 0x9, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x60}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) [ 164.044424] kmemleak: Found object by alias at 0x607f1a639ad4 [ 164.044448] CPU: 0 UID: 0 PID: 4206 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 164.044467] Tainted: [W]=WARN [ 164.044471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 164.044479] Call Trace: [ 164.044483] [ 164.044488] dump_stack_lvl+0xca/0x120 [ 164.044518] __lookup_object+0x94/0xb0 [ 164.044536] delete_object_full+0x27/0x70 [ 164.044552] free_percpu+0x30/0x1160 [ 164.044570] ? arch_uprobe_clear_state+0x16/0x140 [ 164.044590] futex_hash_free+0x38/0xc0 [ 164.044605] mmput+0x2d3/0x390 [ 164.044624] do_exit+0x79d/0x2970 [ 164.044642] ? __pfx_do_exit+0x10/0x10 [ 164.044655] ? find_held_lock+0x2b/0x80 [ 164.044674] ? get_signal+0x835/0x2340 [ 164.044694] do_group_exit+0xd3/0x2a0 [ 164.044708] get_signal+0x2315/0x2340 [ 164.044725] ? put_task_stack+0xd2/0x240 [ 164.044740] ? __pfx_get_signal+0x10/0x10 [ 164.044756] ? __schedule+0xe91/0x3590 [ 164.044780] arch_do_signal_or_restart+0x80/0x790 [ 164.044798] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 164.044814] ? __x64_sys_futex+0x1c9/0x4d0 [ 164.044826] ? __x64_sys_futex+0x1d2/0x4d0 [ 164.044840] ? fput_close_sync+0x114/0x240 [ 164.044856] ? __pfx___x64_sys_futex+0x10/0x10 [ 164.044868] ? __pfx_fput_close_sync+0x10/0x10 [ 164.044882] ? dnotify_flush+0x79/0x4c0 [ 164.044893] ? xfd_validate_state+0x55/0x180 [ 164.044914] exit_to_user_mode_loop+0x8b/0x110 [ 164.044928] do_syscall_64+0x2f7/0x360 [ 164.044940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.044953] RIP: 0033:0x7fe424572b19 [ 164.044962] Code: Unable to access opcode bytes at 0x7fe424572aef. [ 164.044967] RSP: 002b:00007fe421ae8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 164.044979] RAX: 0000000000000001 RBX: 00007fe424685f68 RCX: 00007fe424572b19 [ 164.044986] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe424685f6c [ 164.044994] RBP: 00007fe424685f60 R08: 0000000000000009 R09: 0000000000000000 [ 164.045001] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fe424685f6c [ 164.045008] R13: 00007ffd372906cf R14: 00007fe421ae8300 R15: 0000000000022000 [ 164.045024] [ 164.045028] kmemleak: Object (percpu) 0x607f1a639ad0 (size 16): [ 164.045035] kmemleak: comm "syz-executor.3", pid 289, jiffies 4294830613 [ 164.045043] kmemleak: min_count = 1 [ 164.045046] kmemleak: count = 0 [ 164.045050] kmemleak: flags = 0x21 [ 164.045054] kmemleak: checksum = 0 [ 164.045057] kmemleak: backtrace: [ 164.045061] pcpu_alloc_noprof+0x87a/0x1170 [ 164.045076] mm_init+0x99b/0x1170 [ 164.045084] copy_process+0x3ab7/0x73c0 [ 164.045094] kernel_clone+0xea/0x7f0 [ 164.045104] __do_sys_clone+0xce/0x120 [ 164.045114] do_syscall_64+0xbf/0x360 [ 164.045122] entry_SYSCALL_64_after_hwframe+0x77/0x7f VM DIAGNOSIS: 13:36:45 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000002 RCX=dffffc0000000000 RDX=0000000000000002 RSI=0000000000000004 RDI=ffff88801b0b15c4 RBP=ffffed10036162bb RSP=ffff888016c776f0 R8 =0000000000000000 R9 =ffffed10036162b8 R10=ffff88801b0b15c7 R11=ffff88800f4d2038 R12=ffff88801b0b1ed0 R13=ffff88801b0b1500 R14=ffffed10036163da R15=ffff88801b0b15c4 RIP=ffffffff81467503 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd9f8f318c0 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f21d7027000 CR3=000000000d226000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=6f6f6c2f6b636f6c622f6c6175747269 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005652c6528d8000005652c6528d60 XMM06=000000000000000000000004ffffffff XMM07=00000000000000000000000000000000 XMM08=6e753c007325732575253a5d73255b00 XMM09=00000000000000000000000000000000 XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000002 RBX=0000000000000002 RCX=dffffc0000000000 RDX=0000000000000002 RSI=0000000000000008 RDI=ffff88801b0b1ed0 RBP=ffffed10036162bb RSP=ffff88800afcf980 R8 =0000000000000001 R9 =ffffed10036163da R10=ffff88801b0b1ed7 R11=ffff88800af7a038 R12=ffff88801b0b1ed0 R13=ffff88801b0b1500 R14=ffffed10036163da R15=ffff88801b0b15c4 RIP=ffffffff81467503 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f88933256f4 CR3=000000000d226000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004160609500000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000