x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:36:45 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)

02:36:45 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:36:45 executing program 6:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040011)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x86)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r6, &(0x7f0000001c40)='syz1\x00', 0x200002, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x7c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa6}]}, 0x7c}}, 0x0)

02:36:45 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040011)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x86)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r6, &(0x7f0000001c40)='syz1\x00', 0x200002, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x7c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa6}]}, 0x7c}}, 0x0)

02:36:45 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:36:57 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "fda0f8c64bd8f2964126b74712"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xb9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "dae0de6ee0d22efeef7c4d74755f37e2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048044)
syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, 0x0, 0x600, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x14000000, 0xb}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24000004}, 0x40094)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f00000009c0)={@lba=0x1000, 0x2, 0x31, &(0x7f0000000980)=""/49})

02:36:57 executing program 2:
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000))
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x7fff, 0x212040)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000740)={0x0, 0xfffffffffffffffe, 0xf8, 0x3, @scatter={0x6, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/236, 0xec}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/227, 0xe3}]}, &(0x7f0000000540)="998dda519832dabd2456123f64921821a43912e0fdec043270858a5ba9ee9882f009522ce3f63a2f650a5b2f1dcce76b59ea3ee1b227f29e798a865d66f9590b685627140e620d220a0c4c25f45176309bf40e674330cb172d65fd357c94bcad45a1df11ffeb021f16349f4013864b739dceced9ce2d87cd0ba9323a1989edd21b1ce05f49e033e439d09f4b80ca467ee6809e8d0e8c17f97f97b9dff3fd9ed2e437deb43a3641e80a0e8e71a90b18636f0f21d7284f20975301ff9ebd6465f9bc1e1fa93c81ec9bb4c527a7efc3ca08dc21cdc3a4916e7ae02428e3788533dfff3448d6d94b2e14debeff06426d6f2603cb2809e0459c7c", &(0x7f0000000640)=""/180, 0x401, 0x2, 0x0, &(0x7f0000000700)})
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000007c0))
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000800))
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000840))
ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000880)={0x1, 0x1, 0x6, 0x800, 0x8, 0x100})
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000008c0)={0x3, 0xffffffff, 0xf9d, 0x7318, 0x55b, 0x5})
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000900)=0x37)
r1 = syz_open_dev$hiddev(&(0x7f0000000940), 0x6, 0x18000)
ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000980)=""/154)
r2 = syz_open_dev$sg(&(0x7f0000000a40), 0x7, 0x8002)
ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000a80))
ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000ac0)=0x1)
r3 = syz_open_dev$sg(&(0x7f0000000b00), 0xfffffffffffffff7, 0x101000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000b40)={0xc1, 0x4, 0x10001, "ae29297ea21415f4a2d6df649a0752660147b2de550e92280a2ca8e23aadfd15239e4a35058b7904ad15ed2e6aa48145b0a6b46ec5b41a9340f2bce486076e18308c112be6a9a665b5b4031dd9ad35778d7bb274bda34be8d314d4ff5f7c6679fcc480687e90f3c2a10e602a805955905b1df21cb730840e9c3afe3357d6b47a91b73cd8afc7caa25269c429c030a9952c58007d7490aa2573d329f1193673cca4f568747c4b6445e812083a8e716405aabb84eb19910c1edb311b611766413332"})
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000c40)={0x49, ""/73})
r4 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x100000000, 0x400840)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000d00)={0x4, 0x4, 0x7a, 0x6})

02:36:57 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:36:57 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})

02:36:57 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040011)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x86)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r6, &(0x7f0000001c40)='syz1\x00', 0x200002, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x7c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa6}]}, 0x7c}}, 0x0)

02:36:57 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:36:57 executing program 6:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040011)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x86)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r6, &(0x7f0000001c40)='syz1\x00', 0x200002, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x7c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa6}]}, 0x7c}}, 0x0)

02:36:57 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:36:57 executing program 2:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001cc0))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001d00))
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)

02:36:57 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040011)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x86)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r6, &(0x7f0000001c40)='syz1\x00', 0x200002, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x7c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa6}]}, 0x7c}}, 0x0)

02:36:57 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001cc0))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001d00))
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)

02:36:57 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:10 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880))

02:37:10 executing program 2:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001cc0))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001d00))
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)

02:37:10 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:37:10 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040011)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x86)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r6, &(0x7f0000001c40)='syz1\x00', 0x200002, 0x0)

02:37:10 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:10 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001cc0))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001d00))
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)

02:37:10 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "fda0f8c64bd8f2964126b74712"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xb9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "dae0de6ee0d22efeef7c4d74755f37e2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048044)
syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, 0x0, 0x600, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x14000000, 0xb}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24000004}, 0x40094)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f00000009c0)={@lba=0x1000, 0x2, 0x31, &(0x7f0000000980)=""/49})

02:37:10 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)

02:37:10 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:10 executing program 2:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001cc0))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001d00))
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)

02:37:10 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040011)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x86)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:11 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001cc0))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001d00))
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)

02:37:11 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:11 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:37:24 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:37:24 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "fda0f8c64bd8f2964126b74712"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xb9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "dae0de6ee0d22efeef7c4d74755f37e2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048044)
syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, 0x0, 0x600, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x14000000, 0xb}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24000004}, 0x40094)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)

02:37:24 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})

02:37:24 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:24 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:37:24 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040011)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x86)

02:37:24 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001cc0))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001d00))

02:37:24 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x6c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x6c}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:37:24 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001cc0))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

02:37:24 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:24 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x68, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040011)

02:37:24 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001cc0))

02:37:24 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:24 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880))

02:37:24 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x6c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x6c}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:37:24 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:37:25 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:37:25 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "fda0f8c64bd8f2964126b74712"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xb9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "dae0de6ee0d22efeef7c4d74755f37e2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048044)
syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, 0x0, 0x600, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x14000000, 0xb}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24000004}, 0x40094)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00'})

02:37:25 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3)

02:37:25 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$sg(&(0x7f0000001c80), 0xfb, 0x88000)

02:37:25 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:36 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x6c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x6c}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:37:36 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "fda0f8c64bd8f2964126b74712"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xb9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "dae0de6ee0d22efeef7c4d74755f37e2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048044)
syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, 0x0, 0x600, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x14000000, 0xb}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24000004}, 0x40094)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)

02:37:36 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)

02:37:36 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)

02:37:36 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:37:36 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:36 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:37:36 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)

02:37:36 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "fda0f8c64bd8f2964126b74712"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xb9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "dae0de6ee0d22efeef7c4d74755f37e2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048044)
syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, 0x0, 0x600, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x14000000, 0xb}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24000004}, 0x40094)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)

02:37:36 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})

02:37:36 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8008000)

02:37:37 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:37 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "fda0f8c64bd8f2964126b74712"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xb9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "dae0de6ee0d22efeef7c4d74755f37e2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048044)
syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)

02:37:37 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:37:37 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
socketpair(0x26, 0xa, 0x2, &(0x7f0000000800))

02:37:37 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:49 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)

02:37:49 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "fda0f8c64bd8f2964126b74712"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xb9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "dae0de6ee0d22efeef7c4d74755f37e2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048044)
syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)

02:37:49 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:37:49 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2)

02:37:49 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:37:49 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00'})

02:37:49 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:49 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:37:49 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:37:49 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "fda0f8c64bd8f2964126b74712"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xb9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "dae0de6ee0d22efeef7c4d74755f37e2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048044)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)

02:37:49 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:37:49 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:37:49 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)

02:37:49 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:37:49 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)

02:37:49 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:01 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:01 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffe1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)

02:38:01 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:38:01 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:38:01 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})

02:38:01 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)

02:38:01 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:01 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:01 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:01 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3)

02:38:01 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:01 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:15 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

02:38:15 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:15 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:15 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x70}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:38:15 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:15 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)

02:38:15 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)

02:38:15 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:38:15 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

02:38:15 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:16 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:16 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000006c0)={{0x3, 0xe460a79a4247edca, 0x80000000, 0x8000, 0x7ff, 0x1}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x324, 0x1e, 0x100, 0x196e0b0, 0x7, 0xc32, 0xffffff7f, 0xfff, 0x7, 0x4, 0x2, 0x5, 0x401, 0x7, 0x7, 0x1000, 0x0, 0x0, 0x512, 0x3ff, 0xfce0, 0x3, 0x61, 0x3f, 0xffff, 0x2, 0x0, 0x7, 0x7, 0x20000000, 0x7ff, 0x4, 0xa7, 0x6, 0xdd9e, 0x2, 0x7, 0x2, 0x80000001, 0x80, 0x7, 0xffffffff, 0x40, 0x0, 0x0, 0x1000, 0xc3f, 0x10000, 0x66, 0x80, 0x88b, 0xffffffdb, 0x4, 0x8, 0x2, 0x8, 0x1, 0x3, 0x80000000, 0xfffffc79, 0x37, 0x5, 0x441b, 0xf9f, 0x1, 0x20, 0xde7, 0x6, 0x483939ef, 0x2, 0x8, 0x5, 0x9, 0x200, 0x4, 0x7f, 0x1000, 0x329, 0x6, 0x401, 0x4, 0x4, 0x7e02, 0x1, 0x4, 0x7fffffff, 0x1, 0x20, 0x65, 0x4, 0x0, 0x1, 0x0, 0xfffffffa, 0x0, 0x401, 0x2, 0x38000000, 0xf00, 0x5, 0x9, 0x1, 0x5, 0x0, 0x949, 0x7ff, 0x10, 0x3, 0xfffffffe, 0x5, 0xe7, 0x2, 0x4d, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x5, 0xfffffffc, 0x6, 0xffffffff, 0xffff, 0x9, 0x200, 0x3, 0x0, 0x2, 0x6, 0x3, 0x9, 0x3ff, 0x2, 0x9, 0x4, 0x8001, 0xf6b2, 0x0, 0xffffff10, 0x400, 0xc2, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0xc0000, 0x3, 0x0, 0xe0de, 0x5, 0x9, 0x1f, 0x4d76, 0x7, 0x4, 0x2, 0x800]})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:16 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)

02:38:16 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)

02:38:16 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

02:38:16 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x70}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:38:16 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
syz_open_dev$hiddev(&(0x7f0000000680), 0x101, 0x101080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:16 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'})
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:38:16 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0xef, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:16 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:16 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
r2 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3)

02:38:16 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:16 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)

02:38:16 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9452960920e951d4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:16 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x70}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:38:27 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x68}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:38:27 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)

02:38:27 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:27 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2)

02:38:27 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:38:27 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:27 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)

02:38:27 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:27 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:38:27 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:27 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:27 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:38:27 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2)

02:38:41 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2)

02:38:41 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:38:41 executing program 6:
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:41 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd015}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:41 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x68}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:38:41 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0x0, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:41 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:38:41 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0))

02:38:41 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0x0, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:41 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:38:41 executing program 6:
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:38:41 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1)

02:38:41 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:41 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:38:41 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x3, 0x0, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:41 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:38:41 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x40, 0x3f, 0x9f3}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)

02:38:41 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x47, 0x0, "8dc4a9ecac0d2908ecf8fb2d636dd5194fda70c45239d8f21cb935119ed121a94a71dd64f6c35c0dffab529bae7d7321304141de7293e130d52f612b61eb6fe90616af"}, {0xe7, 0x0, "62a4a50e3899ab094cea4e456a62df797ee447b3d4d073fae1ddf6ff9dffd97e92d90306cb7fb74168af72cf8921fdec24ffd4fde553fe2397f42fb2b68861fdc964c43a97b52d06a82eb12001d453ca7cc59ce1f1bb5998aac82efda636e78c60a0582009b9d35d9274e76ec8c87b1ded160b8ee49f7107a356881cbd9088654ee1941f309154cffc374599cc7113aa011fb3ab4e0435c78519b01c574655b07cdf4bf7c914d53c120f0bc94a4dd8a7141f586bc79ae4720755afcdd0a287039810f47620587e2c18b82981ca83fdc7a4a07756e47fb2304355af4626273f0bfbe66c"}, {0x31, 0x0, "7b084a1f58826259f49e87c4a60fa0723f931dabe17217abbb23a6e78255d7c25d4a53b768e042dbb0b1d6adc8"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:41 executing program 6:
openat$cdrom(0xffffffffffffff9c, 0x0, 0x402400, 0x0)

02:38:54 executing program 6:
openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0)

02:38:54 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)

02:38:54 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:54 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)

02:38:54 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:38:54 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x68}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:38:54 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:38:54 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:54 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'})

02:38:54 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:38:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:38:54 executing program 1:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:38:54 executing program 6:
openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0)

02:38:54 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:38:54 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)

02:39:08 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x6c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x6c}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:39:08 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:39:08 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)

02:39:08 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x0, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:39:08 executing program 6:
openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0)

02:39:08 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:39:08 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)

02:39:08 executing program 1:
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:39:22 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:39:22 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x6c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x6c}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:39:22 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)

02:39:22 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

02:39:22 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:39:22 executing program 1:
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000840)=0x56, 0x4)

02:39:22 executing program 6:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "13064b46d38af5629791aec89d62f9dd"}, @NL80211_ATTR_PMK={0x14, 0xfe, "159691dcbb7dfb19d10c296ba41fe6e5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}}, 0x40040)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)

02:39:22 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x0, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:39:22 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)

02:39:22 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x401, 0x0, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:39:22 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

02:39:22 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x3, 0x0, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:39:22 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:39:22 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:39:22 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

02:39:22 executing program 1:
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)

02:39:22 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x6c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x6c}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:39:22 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65301e72d3e4cb1a5e98dce70d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)

02:39:22 executing program 6:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)

02:39:22 executing program 1:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)

02:39:22 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(0x0, r0)

02:39:22 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:39:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x80)

02:39:35 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:39:35 executing program 6:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:39:35 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)

02:39:35 executing program 1:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CDROMRESET(r0, 0x5312)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x90180)
ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000000c0)={{0x1, 0x100, 0x0, 0x8, 0xfffffffc, 0x9}, 0x31, [0x2, 0x8000, 0x3981, 0x7f, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x1, 0x773, 0x10001, 0x20, 0x1000, 0x5, 0x3, 0xffffff81, 0xffff, 0x2c39963d, 0x9, 0x9, 0x49c4, 0x200, 0x4, 0x6, 0x5c2440be, 0xff, 0x8, 0x81, 0x7, 0x9a, 0x4, 0x10000, 0x1, 0x1, 0x28000, 0x5, 0x1, 0xfffffff7, 0x323c, 0x6, 0x10001, 0x4, 0x4, 0x5, 0x260c, 0x4, 0x0, 0x7fff, 0x1, 0x9, 0x3, 0xff2, 0x2, 0x0, 0xc6d3, 0x400, 0x1000, 0xe8db, 0x7, 0x100, 0x2, 0x2, 0x7ff, 0x437, 0x7fff, 0x7, 0x1, 0x80000000, 0xfffff801, 0x0, 0x3, 0xf17f, 0xa2f0, 0x6, 0x3, 0x1, 0x1, 0xffffffc1, 0x1ff, 0x9, 0x3, 0x9, 0x3, 0x4000000, 0x4, 0xffff6548, 0x2, 0xfffffffd, 0x4033, 0x4, 0x8, 0x3, 0x3, 0x1000, 0x4, 0x6, 0x0, 0x800, 0x2d, 0x1, 0x4b6, 0x1, 0x1, 0x2, 0xff, 0x5, 0xf83e, 0x7, 0x2, 0x401, 0x20, 0x94, 0x7, 0x40, 0x2, 0x8001, 0x401, 0x1, 0x1000, 0x7, 0x40000000, 0x145, 0xfffffffb, 0x4, 0x7, 0x8, 0x101, 0x6, 0x132, 0x0, 0x200, 0x0, 0x1, 0x85b2, 0x1, 0x7ff, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x4, 0xdd, 0x0, 0x7fff, 0x3, 0x4, 0x3f, 0x7f, 0xffffffff, 0x6, 0x2, 0xfffffffe, 0x2, 0x0, 0x1, 0x0, 0x6, 0x7fff, 0x9, 0x7, 0x7089, 0x5, 0x10000, 0x2e74, 0x0, 0x3, 0x1, 0x8, 0x100, 0x9, 0x3, 0x0, 0xfff, 0x7ff, 0xe0, 0x0, 0x51bb, 0x401, 0x6, 0x1ff, 0xffffffff, 0x3f, 0x2, 0x7, 0x92, 0x7, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x90, 0x40, 0x3, 0x8, 0x5d4, 0x1, 0x3, 0xfe20, 0x6, 0x6, 0x2, 0xfffffffa, 0x8000, 0x6, 0x59, 0x20, 0x8, 0x9, 0x7ff, 0x2, 0x100, 0x400, 0x5, 0xd33, 0xda3, 0x0, 0x1ff, 0x3, 0x4, 0x100, 0x3, 0x6, 0x7f, 0x1ff, 0x2c39, 0x400, 0x8a1, 0xbd4e, 0x9, 0x0, 0x1, 0x10001, 0xffffffff, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x7, 0x70000, 0xac, 0xca9, 0x59, 0x940000, 0x9, 0x6, 0x401, 0x1000000, 0x3961, 0x7, 0x9, 0xffff, 0xb24, 0x8, 0x223, 0xf6, 0x1, 0x61fa, 0x8001, 0x2, 0x1, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x8001, 0x400, 0xd66, 0x6, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x28, 0x8, 0x5, 0x800, 0x3, 0x100, 0xffffff81, 0x5, 0x9, 0x6, 0x7f, 0x2f, 0xc9, 0x1, 0x2, 0x4b1c, 0x7ff, 0x7, 0x9492, 0x9, 0x7f, 0x2, 0xffff, 0x31c24929, 0x1, 0x10001, 0x1, 0x4, 0x142, 0x7ff, 0x2, 0x7, 0x4, 0x7f, 0xfffff000, 0x5, 0x6, 0x5, 0x4, 0x10000, 0x0, 0x6, 0x0, 0x10001, 0x4, 0x401, 0x80000001, 0x101, 0xdb, 0x9, 0x80000001, 0x0, 0x6, 0x20, 0x1, 0xffffffea, 0x3, 0x4, 0x401, 0x7f, 0x3ff, 0xa4, 0xee0, 0x80, 0x8, 0xffffffc0, 0x1, 0x2, 0x1, 0x3, 0x9, 0xb8, 0x1, 0x4, 0x0, 0x101, 0x487, 0x8001, 0x0, 0x8, 0x6, 0x0, 0x8, 0xbd, 0x40, 0x6, 0x1f, 0x4, 0x2, 0x8, 0xffff, 0x2e05, 0x81, 0x6, 0x81, 0x800, 0x3, 0x8, 0x5, 0x26, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xb6, 0x400, 0x7, 0x8, 0x4, 0x6, 0x8, 0x401, 0x1, 0x7fffffff, 0xc286, 0x7, 0x1, 0x4, 0x4, 0x4, 0x789f, 0xef2, 0x3, 0x6, 0x3, 0xffffffff, 0xf2f5, 0x80000000, 0xd09, 0x7ff, 0x200, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x200, 0xfffffff9, 0x6, 0x9, 0x75, 0x2de9, 0x2, 0x1, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x100, 0x6, 0x7fffffff, 0xf7, 0x1, 0xc40, 0x20, 0x1, 0x2557, 0x61, 0x20, 0x80, 0x5, 0xb49, 0x661, 0x9, 0x9, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x7ff, 0x81, 0x10000, 0xffffffff, 0x7, 0xee8b, 0x0, 0x8000, 0xfffffffe, 0x3, 0x2, 0x1ff, 0x1, 0x515f, 0x81, 0x0, 0xfffffffd, 0x3, 0x5, 0x3, 0x800, 0xe6e, 0x200, 0x61, 0x0, 0x401, 0x3f, 0xffff, 0x2, 0xfffffff8, 0x3, 0x7, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101, 0x0, 0x5, 0x5, 0x7b1, 0x2c1, 0xb6, 0xff, 0x5, 0xfffffffa, 0x4, 0x5, 0x4, 0x1f, 0x723d, 0x1, 0x1, 0x3, 0x3, 0x5, 0x7, 0x9, 0x0, 0x1, 0x1f, 0x6, 0xffff, 0xfffffffc, 0xd1e, 0x4, 0x1, 0x7, 0x9, 0x1, 0x0, 0x6b8f808a, 0x8, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x4, 0x18501bed, 0x1, 0x4, 0xa5, 0x20, 0x1, 0x1, 0x3, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x0, 0xfffff001, 0x80000001, 0x2, 0xdbcf, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x20, 0x4, 0x9, 0x9, 0x0, 0x7, 0x9, 0x136e, 0x7, 0x1ff, 0x7, 0x8000, 0x5, 0x3, 0x20, 0x10001, 0x5, 0x1, 0x6, 0x6, 0x5, 0x9, 0x2, 0x5, 0x2ac63b52, 0x7ff, 0x89, 0x9, 0x3f, 0x20, 0xbe, 0x7, 0x141, 0x8ec, 0x9, 0x1, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0x772c, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x2, 0x0, 0x7, 0x1f, 0x200, 0x8001, 0xad, 0x9, 0x1, 0x1, 0x2, 0x5, 0x4, 0xb520, 0x40, 0x9, 0x81, 0xaba, 0x4, 0xff, 0x10000, 0x4, 0xd, 0x8, 0xe619, 0x1, 0x7fff, 0x6e14, 0x8, 0xf6b, 0xfa, 0xfffffff7, 0x9, 0x3, 0x5, 0x9, 0x8, 0x2, 0x9, 0x9, 0x8, 0x7ff, 0xfff, 0x4, 0xd91, 0xffffff2a, 0x7ff, 0x0, 0x40, 0x40, 0x2, 0xffff73b0, 0xfffffbff, 0xb96a, 0x10000, 0x3, 0x357d, 0x9, 0x7, 0x4, 0x4, 0x6e5e, 0x8, 0x9, 0x0, 0x0, 0x8, 0xb521, 0x10000, 0xffffffff, 0x7ff, 0x5, 0x80000001, 0xfffffff7, 0x101, 0xffffffc0, 0x400, 0x100, 0x1ac5, 0x2, 0x101, 0x82e, 0x0, 0x10000, 0x7, 0x8, 0x1, 0xec, 0x7, 0xd05, 0x9, 0x3, 0x200, 0x81, 0xc54, 0x63, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0x1, 0x80, 0x9, 0x2a, 0x0, 0x100, 0x7ff, 0x22, 0x1, 0x80, 0x0, 0x4, 0x5, 0x1000, 0x7fffffff, 0x4, 0x8, 0x3, 0xffffffff, 0x3, 0xb87, 0x5, 0xffffffff, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x3, 0x6, 0x80, 0x4, 0xbc3, 0x4, 0x0, 0x6, 0x6, 0x9, 0x0, 0x800, 0xa64, 0x479d, 0x4, 0x0, 0x1f, 0x81, 0x3f, 0xfff, 0x8, 0x8, 0x12cd, 0x10000, 0x8, 0xffff, 0x7, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x3, 0x3f, 0x9, 0x1, 0x3ff, 0x9, 0xfffffff9, 0x800, 0x0, 0x2, 0x7, 0x6a, 0x6, 0x8, 0x8000, 0xffffffff, 0x1f, 0x5, 0xfffffffe, 0xff, 0x7, 0xfffffffb, 0x0, 0xffffffff, 0xf96, 0x80000000, 0x80, 0x40, 0x1, 0x7, 0x2, 0x1ff, 0x7, 0x7, 0x200, 0x1ff, 0x1, 0x6, 0x3, 0xae, 0x400, 0x9, 0x4, 0x6ba, 0x6, 0xdec1, 0x80000001, 0x7, 0x2, 0x6, 0x0, 0x20, 0x80000000, 0x8, 0x3ff, 0x5, 0x1, 0x31943578, 0x7, 0x1c69, 0x5c1df0f, 0x6, 0x4, 0x3ff, 0x200, 0x9b, 0x75, 0x6, 0x7, 0x9, 0x7, 0x0, 0x4, 0xb3c5, 0x1f, 0x9, 0x7f, 0x6a, 0xffff, 0x4, 0x9, 0x400, 0x75, 0x40c, 0x3, 0x8, 0x9, 0x3, 0x0, 0x9, 0xfffffffc, 0x10000000, 0x1, 0x80, 0x8b, 0x4, 0x1, 0x8001, 0x80, 0xc0, 0x6, 0x10000, 0x7, 0xdd, 0x1, 0x7fff, 0x81, 0x40, 0x2, 0x7, 0x5, 0x6, 0x7fff, 0xfffeffff, 0x7fffffff, 0x80000000, 0x0, 0x55, 0x7, 0x1000, 0x81, 0x74e6, 0x0, 0x8, 0x7, 0x1c, 0xd1, 0x6, 0xfffffffc, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x20, 0xfffffffb, 0x4, 0x8000, 0x4, 0x7, 0xffff7fff, 0x101, 0x6, 0x15a0, 0x5, 0x80000001, 0x7ff, 0x8, 0x1, 0x7ff, 0x7f, 0x788, 0xf7e, 0xfffffffc, 0x2, 0x80, 0x6, 0x5, 0x7, 0x6, 0xa63, 0x6, 0xffffffc0, 0x5, 0x0, 0x9, 0x5, 0x8, 0xffff, 0x38, 0x3, 0x1000, 0x2, 0x2, 0x401, 0x1000, 0x6, 0x26d, 0x0, 0x0, 0x6, 0x800, 0x101, 0x200, 0x2, 0x4, 0x3, 0xfffffff8, 0x80000000, 0x5, 0x1, 0x1, 0x81, 0x0, 0x23d, 0x8, 0x0, 0x11, 0x1, 0x2, 0x100, 0x6, 0xfffffff8, 0x80000001, 0xfff, 0xffff1e40, 0x1f, 0x2, 0x4, 0x10000, 0x9, 0x8, 0x0, 0x100, 0x7, 0x6bd7bf68, 0x81, 0x8001, 0x8001, 0x5, 0x40, 0x1, 0xff, 0xff, 0x1, 0x7ff, 0x1, 0x7f, 0x6, 0x6, 0xfff, 0x8000, 0xffffffff, 0x0, 0x20, 0xfffffffb, 0x1, 0x4, 0x1000, 0x9, 0x7fffffff, 0x0, 0x198, 0x2, 0x8, 0x800, 0x40, 0xffffffff]})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001100))
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000001140))
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001180)={0xb5, 0x9, 0x4, 0x49, 0xfd})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c00), 0x402400, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000001c40)={0x2, 0x0, 0xe, 0x0, @msf={0x20, 0x1f, 0x81}, 0x1})

02:39:35 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x0, 0x0, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:39:35 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(0x0, r0)

02:39:35 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:39:35 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x0, 0x0, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:39:35 executing program 1:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:39:48 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(0x0, r0)

02:39:48 executing program 2:
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:39:48 executing program 1:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:39:48 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x3, 0x0, 0x0, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:39:48 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)

02:39:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x80)

02:39:48 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:39:48 executing program 6:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:39:48 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)

02:39:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x80)

02:39:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:39:48 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:39:48 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

02:39:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47809ab4a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:39:48 executing program 6:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:39:48 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

02:39:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:39:59 executing program 1:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:39:59 executing program 6:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)

02:39:59 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

[ 2372.987246] FAULT_INJECTION: forcing a failure.
[ 2372.987246] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2372.988294] CPU: 1 PID: 14071 Comm: syz-executor.5 Not tainted 6.0.0-rc1-next-20220819 #1
[ 2372.988928] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521
[ 2372.989561] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 14071, name: syz-executor.5
[ 2372.990216] preempt_count: 0, expected: 0
[ 2372.990537] RCU nest depth: 0, expected: 0
[ 2372.990864] 1 lock held by syz-executor.5/14071:
[ 2372.991233]  #0: ffff88801aff9c68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100
[ 2372.991906] irq event stamp: 204
[ 2372.992166] hardirqs last  enabled at (203): [<ffffffff812bd8c8>] __up_console_sem+0x78/0x80
[ 2372.992829] hardirqs last disabled at (204): [<ffffffff8411f196>] dump_stack_lvl+0x2e/0xb3
[ 2372.993474] softirqs last  enabled at (198): [<ffffffff8116ba5b>] __irq_exit_rcu+0x11b/0x180
[ 2372.994136] softirqs last disabled at (189): [<ffffffff8116ba5b>] __irq_exit_rcu+0x11b/0x180
[ 2372.994795] CPU: 1 PID: 14071 Comm: syz-executor.5 Not tainted 6.0.0-rc1-next-20220819 #1
[ 2372.999014] syz-executor.5[14071] cmdline: /syz-executor.5 exec
[ 2372.999732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2373.001307] Call Trace:
[ 2373.001516]  <TASK>
[ 2373.001718]  dump_stack_lvl+0x8b/0xb3
[ 2373.002021]  __might_resched.cold+0x222/0x26b
[ 2373.002378]  down_read_killable+0x75/0x490
[ 2373.002734]  ? down_read_interruptible+0x490/0x490
[ 2373.003139]  __access_remote_vm+0xac/0x6f0
[ 2373.003482]  ? follow_phys+0x2c0/0x2c0
[ 2373.003806]  ? do_raw_spin_lock+0x121/0x260
[ 2373.004144]  ? rwlock_bug.part.0+0x90/0x90
[ 2373.004472]  ? lock_release+0x3b2/0x750
[ 2373.004808]  ? __up_console_sem+0x47/0x80
[ 2373.005137]  get_mm_cmdline.part.0+0x214/0x600
[ 2373.005499]  ? dname_to_vma_addr.isra.0+0x360/0x360
[ 2373.005901]  ? _raw_spin_unlock_irqrestore+0x33/0x60
[ 2373.006305]  get_task_cmdline_kernel+0x1e9/0x230
[ 2373.006689]  dump_stack_print_cmdline.part.0+0x82/0x150
[ 2373.007101]  ? _atomic_dec_and_lock_irqsave+0x150/0x150
[ 2373.007508]  ? __wake_up_klogd.part.0+0xc5/0xf0
[ 2373.007920]  ? dump_stack_print_info+0xc6/0x190
[ 2373.008279]  dump_stack_print_info+0x185/0x190
[ 2373.008660]  dump_stack_lvl+0x7f/0xb3
[ 2373.008961]  should_fail.cold+0x5/0xa
[ 2373.009260]  _copy_to_user+0x2a/0x140
[ 2373.009561]  simple_read_from_buffer+0xcc/0x160
[ 2373.009947]  proc_fail_nth_read+0x198/0x230
[ 2373.010278]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2373.010676]  ? security_file_permission+0xb1/0xe0
[ 2373.011065]  vfs_read+0x253/0x930
[ 2373.011343]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2373.011744]  ? kernel_read+0x1c0/0x1c0
[ 2373.012048]  ? __fget_files+0x270/0x450
[ 2373.012372]  ksys_read+0x127/0x250
[ 2373.012675]  ? __ia32_sys_pwrite64+0x220/0x220
[ 2373.013033]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2373.013447]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2373.013875]  do_syscall_64+0x3b/0x90
[ 2373.014170]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2373.014567] RIP: 0033:0x7fba516c869c
[ 2373.014878] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2373.016243] RSP: 002b:00007fba4ec8b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2373.016831] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fba516c869c
[ 2373.017368] RDX: 000000000000000f RSI: 00007fba4ec8b1e0 RDI: 0000000000000003
[ 2373.017926] RBP: 00007fba4ec8b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2373.018466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2373.019039] R13: 00007ffe388356df R14: 00007fba4ec8b300 R15: 0000000000022000
[ 2373.019593]  </TASK>
02:39:59 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1)

02:39:59 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:40:00 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)

02:40:00 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

[ 2373.029056] syz-executor.5[14071] cmdline: /syz-executor.5 exec
[ 2373.030013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2373.032127] Call Trace:
[ 2373.032508]  <TASK>
[ 2373.032901]  dump_stack_lvl+0x8b/0xb3
[ 2373.033468]  should_fail.cold+0x5/0xa
[ 2373.034055]  _copy_to_user+0x2a/0x140
[ 2373.034637]  simple_read_from_buffer+0xcc/0x160
[ 2373.035325]  proc_fail_nth_read+0x198/0x230
[ 2373.035980]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2373.036718]  ? security_file_permission+0xb1/0xe0
[ 2373.037416]  vfs_read+0x253/0x930
[ 2373.037952]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2373.038682]  ? kernel_read+0x1c0/0x1c0
[ 2373.039262]  ? __fget_files+0x270/0x450
[ 2373.039897]  ksys_read+0x127/0x250
[ 2373.040440]  ? __ia32_sys_pwrite64+0x220/0x220
[ 2373.041156]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2373.041954]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2373.042760]  do_syscall_64+0x3b/0x90
[ 2373.043347]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2373.044142] RIP: 0033:0x7fba516c869c
[ 2373.044722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2373.047478] RSP: 002b:00007fba4ec8b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2373.048652] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fba516c869c
[ 2373.049732] RDX: 000000000000000f RSI: 00007fba4ec8b1e0 RDI: 0000000000000003
[ 2373.050830] RBP: 00007fba4ec8b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2373.051906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2373.052972] R13: 00007ffe388356df R14: 00007fba4ec8b300 R15: 0000000000022000
[ 2373.054085]  </TASK>
02:40:00 executing program 5:
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)

02:40:00 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) (fail_nth: 1)

[ 2373.116161] FAULT_INJECTION: forcing a failure.
[ 2373.116161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2373.117147] CPU: 1 PID: 14088 Comm: syz-executor.3 Tainted: G        W          6.0.0-rc1-next-20220819 #1
[ 2373.119067] syz-executor.3[14088] cmdline: /syz-executor.3 exec
[ 2373.119532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2373.120434] Call Trace:
[ 2373.120663]  <TASK>
[ 2373.120840]  dump_stack_lvl+0x8b/0xb3
[ 2373.121146]  should_fail.cold+0x5/0xa
[ 2373.121444]  _copy_from_user+0x2a/0x170
[ 2373.121790]  move_addr_to_kernel.part.0+0x31/0x110
[ 2373.122180]  __sys_sendto+0x183/0x340
[ 2373.122482]  ? __ia32_sys_getpeername+0xb0/0xb0
[ 2373.122895]  ? bit_wait_io_timeout+0x170/0x170
[ 2373.123264]  ? fput+0x2b/0x190
[ 2373.123531]  __x64_sys_sendto+0xdd/0x1b0
[ 2373.123871]  ? lockdep_hardirqs_on+0x79/0x100
[ 2373.124222]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2373.124647]  do_syscall_64+0x3b/0x90
[ 2373.124944]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2373.125349] RIP: 0033:0x7fb2dde708ac
[ 2373.125655] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2373.127038] RSP: 002b:00007fb2db432020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2373.127625] RAX: ffffffffffffffda RBX: 00007fb2db432110 RCX: 00007fb2dde708ac
[ 2373.128162] RDX: 0000000000000020 RSI: 00007fb2db432160 RDI: 0000000000000004
[ 2373.128713] RBP: 0000000000000000 R08: 00007fb2db432074 R09: 000000000000000c
[ 2373.129251] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fb2db4320c8
[ 2373.129800] R13: 00007fb2db432160 R14: 0000000000000004 R15: 0000000000000000
[ 2373.130348]  </TASK>
02:40:00 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) (fail_nth: 2)

02:40:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

02:40:00 executing program 5:
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '*$:@\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '@(\xb8-^:^\xa0]+\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004884}, 0x24004011)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1d, 0x4, 0x7ff, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf250d0000000c0008007d100000000000001c00078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x800)

[ 2373.268055] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
02:40:00 executing program 6:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00'})

02:40:00 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:40:00 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0xb64, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

02:40:00 executing program 1:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1226b43435"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "4a92550b6af6d489c8db97"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f4cbe955cdb1bb27260778e07"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x20200)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc6}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x2000c045)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44050}, 0x801)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8eb3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24004000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xee}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001100)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b80)={0x504, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff1c, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x350, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa1, 0x0, "05079367565833fb773a8d6fae5744b697d98a66e499fdc0eef881e3bd11f29fb62a517d3bf8f2f5755e86d6b649fdad3d2f93abb0008d137aeb7adba95e11af35c8d70047620d848c9698b9462891b26737ab6fa31d53524534d98a99b5221d468655f48bae29ee55186359676f186f7075d604e7b67ebda3f1af0bb0d126656783710529735c0fe01dcf66daf24edecb2430713edd2dcadeb8caacbd"}, @NL80211_BAND_6GHZ={0x37, 0x3, "2b0df22b7dd28d1370a3292db11ad2240319ea7dab4ee2d0cae03d552f8ba7c604966d8d8eb793d0415f8e3f1c4447295592c3"}, @NL80211_BAND_2GHZ={0xae, 0x0, "1d3e86065ef8db2f2acdf6f29dda931ed020e65bc2372dd208aa1094c99862f416f3ef1af71788cc285df1d75ff7565aba9a35a86a69e806a7340915d2b460da336a6e4343d4751ddb7447fcdcfa4f6eb0030c5934ccb39fa03b1f2a82d1d6b556e61575b1231c98bf0aa25dd6ad60c9e37d5d6ee5f626c4b4e3306d309a9680489c28ff75c7cd03ac943537a989c7ddba39ba276b4b6c62f09e2fe5f1e461589d3085be3986afea9bf3"}, @NL80211_BAND_5GHZ={0xcb, 0x1, "3183d752b922fac39f2787616b49f6ca9ceddd6f8d3eec2ae673aa32b337b94ee5e678969b92381876ac6913d2b9e99c92470ba1190d7aa0b0ad869edeaf7852d52a40ee0d9d23355ad9d75f0c70e4497340c6e33f1081e2d800e2f23237c99eecc955bb4fdde9d4a1fbbf29226912eef51542303c6908aa43be9c6ca537085ec42ef051c051dd1a0c1a53b65b5f327ada37d1c9ecae4aee0f70785e14f7499eac720cb3fda9b420579b82b245a96e3e4a50ea38375b041437336b98444ed36a37ba0ea13cf914"}, @NL80211_BAND_6GHZ={0x7a, 0x3, "1e5a1f02511b6276785d7d1de8dfa7a8bd0945d88c52c0d9002eb19caa5424302b6d84eeacd87152bdc8a85ae293a54478ba18a19addc3edcd3160ea2807dbdad101e12542330c1b90224226acab14f803033df22da045a638ad8f4839c6f0668dc152030704be1cf186c3c69f9bbe2c3512510cabb7"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "2f6b29908ebb2824fc90a8717ea24ca9b6e8b77cdbd6be3cc11f92086f82bfc005cac1abfde38775a2c4f9928309f7c7cc7992b736dab51823c75c02606d2195c069ea4e7601e99b1a5d7cf88756748899a90a492ba092"}, @NL80211_BAND_5GHZ={0x19, 0x1, "04ddb24eadc11e58a267dd33786aacd9d8deee4d8e"}]}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x62, {0x1, 0x6, [@ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @broadcast, 0xe444, "", 0x39}, @not_ext={{}, @device_b, 0x8, "", 0x21}, @not_ext={{}, @device_b, 0x9, "", 0x36}, @ext={{}, @broadcast, 0x559, @device_b, 0x38}, @ext={{}, @device_a, 0x7fff, @broadcast, 0x36}]}}, @dsss={0x3, 0x1, 0xb8}, @random={0xe2, 0xf6, "71707a2d6a7c8cbd2f700a89547661f6848da38d8eaf819269f001c7d9ac55b71ec24ec856ecacfc4e49ca6c4142743118530073a573ac1930acd0f49a68336b387ef8644bc86dee385f8bca9b7fa331e04b4ba1d36dfd23c5e0697c011ecf1b5f489ac7c9d613db086a191cbdb04e5ff8b57a2d7514d3cffc942692f7dcdd9441e0f8e8f68f3133eec84895ad7ad9ad77b0899fc7bc54a161e816780f70cb5ab46d6b390508184e78955796dfd2575ff59fd2ed48534d8b00e534174e8f752a8411a9a5a744afbcface3f486f74a5a896ecd98dbee46f72333d684119959c4f135264498565cb0d584d89fbb9b35d7d4ffcfce45a9e"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8a9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xda63}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008011)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

02:40:00 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) (fail_nth: 3)

02:40:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

[ 2373.353544] FAULT_INJECTION: forcing a failure.
[ 2373.353544] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2373.354461] CPU: 1 PID: 14112 Comm: syz-executor.3 Tainted: G        W          6.0.0-rc1-next-20220819 #1
[ 2373.357457] syz-executor.3[14112] cmdline: /syz-executor.3 exec
[ 2373.357953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 2373.358886] Call Trace:
[ 2373.359089]  <TASK>
[ 2373.359272]  dump_stack_lvl+0x8b/0xb3
[ 2373.359579]  should_fail.cold+0x5/0xa
[ 2373.359910]  _copy_to_user+0x2a/0x140
[ 2373.360215]  simple_read_from_buffer+0xcc/0x160
[ 2373.360586]  proc_fail_nth_read+0x198/0x230
[ 2373.360947]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2373.361330]  ? security_file_permission+0xb1/0xe0
[ 2373.361813]  vfs_read+0x253/0x930
[ 2373.362092]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 2373.362482]  ? kernel_read+0x1c0/0x1c0
[ 2373.362834]  ? __fget_files+0x270/0x450
[ 2373.363155]  ksys_read+0x127/0x250
[ 2373.363440]  ? __ia32_sys_pwrite64+0x220/0x220
[ 2373.363818]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2373.364231]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2373.364659]  do_syscall_64+0x3b/0x90
[ 2373.364959]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2373.365357] RIP: 0033:0x7fb2dde7069c
[ 2373.365674] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2373.367050] RSP: 002b:00007fb2db433170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2373.367641] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb2dde7069c
[ 2373.368178] RDX: 000000000000000f RSI: 00007fb2db4331e0 RDI: 0000000000000005
[ 2373.368739] RBP: 00007fb2db4331d0 R08: 0000000000000000 R09: 00007fb2db431f60
[ 2373.369281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2373.369843] R13: 00007ffffac75b4f R14: 00007fb2db433300 R15: 0000000000022000
[ 2373.370393]  </TASK>
02:40:00 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)

02:40:00 executing program 7:
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x27}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b13e731065726c9045c7a47e14"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x4000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14, 0x70}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x70}}, 0x40040)
socketpair(0xf, 0xa, 0x739, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x4080)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7)
r4 = syz_open_dev$hiddev(&(0x7f0000000740), 0x101, 0x800)
ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000780)={0x3, 0x1, 0x156, 0x86f, 0x3, 0x9})
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000007c0)=0xeb)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000840)=0x56, 0x4)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xded9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000004}, 0x44800)

02:40:00 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe22}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x110d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40091)

02:40:00 executing program 4:
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8001)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0))
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000010)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x0, 0x80000000, 0x8000}, 0x2dc, [0x5db9baa2, 0x1, 0x1000, 0x1, 0x8001, 0xfffffffe, 0x8, 0x6, 0x200, 0xe9f, 0xc547, 0x80000000, 0x401, 0x9, 0x1fa6, 0xb89, 0x1, 0xffffffff, 0x1235, 0x6, 0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x8, 0x2166af85, 0x200, 0x8, 0x20, 0x4, 0x1edc, 0x0, 0x9, 0x9, 0x7, 0x800, 0xc4, 0x944, 0x96e, 0xe3f, 0x40, 0x7, 0x3, 0x3, 0x4, 0x9e8, 0x1ff, 0x0, 0x1f, 0x1, 0x1e7, 0x1c72, 0x0, 0x1, 0x10000, 0x9, 0x1, 0x5, 0xb8, 0x3, 0x51, 0x1, 0x40, 0x2, 0xe4, 0x1, 0x0, 0x0, 0xe00, 0xf4, 0x200, 0x10001, 0x6, 0x8, 0x250c0857, 0x80000000, 0x8001, 0x1, 0x1, 0x78, 0x3, 0x7, 0x100, 0x9, 0x2, 0x40, 0x1, 0x8, 0x2, 0x3, 0x4f4c, 0x0, 0x4, 0x7, 0xfff, 0x4, 0x1, 0x2, 0x5, 0x4, 0x6a3, 0x3, 0xfffffff7, 0xfffffffe, 0x0, 0x33, 0x6, 0x9ec00000, 0x1f, 0x1c0, 0x1, 0xfffffffe, 0xfffffff9, 0x4, 0x7e, 0x8, 0x67, 0x6, 0xd91b, 0x5, 0x48, 0x8, 0x1, 0x400000, 0x1, 0xfffffff7, 0x7, 0x1, 0x100, 0x9, 0xfff, 0x62fde7c, 0x42ad, 0x4, 0x2, 0x8, 0xd5, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x7fffffff, 0x2, 0xe29, 0x401, 0xcf10, 0xffff, 0xffffffff, 0x4, 0x5, 0x7bdf1f8d, 0x6, 0x10001, 0x71, 0x988, 0x10001, 0x6, 0x400, 0x4, 0x0, 0x8000, 0x9, 0x3, 0x8, 0x7fffffff, 0x2, 0x6, 0x100, 0x3, 0x7fffffff, 0x3f, 0x3, 0x200000, 0x3, 0xec, 0x8, 0x1, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x399, 0x3, 0x2, 0x8, 0x3929, 0x6, 0x96c, 0x10000, 0xfffffffd, 0x8, 0xffffffe1, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x7, 0xffff0001, 0xf18b, 0x6, 0x1, 0x8ea2, 0x7, 0x83, 0x1, 0xec, 0x200, 0x1e1, 0x5, 0x4, 0x7f, 0x2, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x401, 0x905a, 0x7fff, 0x401, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x2, 0x0, 0x3d, 0x80, 0x7fff, 0x5, 0x6c, 0x4494, 0x5, 0x2ac5, 0x1, 0x4, 0x3ff, 0x5, 0x6, 0x101, 0x1f, 0x9050, 0x2b, 0x0, 0x1ff, 0x5, 0x50fc, 0x8, 0x2, 0x0, 0xfffffffe, 0x1, 0x75c, 0x8, 0x10001, 0x7, 0x1, 0x9880, 0xc2, 0xc8, 0x9, 0x3, 0x9, 0x10001, 0x4, 0x9, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0xfffffc01, 0x7fff, 0x2, 0xff, 0x0, 0x1ff, 0x1, 0x6, 0x5, 0x8, 0x4, 0x5, 0xfffffffa, 0x83, 0xf37, 0x8000, 0x400, 0xf59, 0x7, 0xfffffffc, 0x800000, 0x3, 0x0, 0x374, 0x4, 0x800, 0x10000, 0x1, 0x5, 0x9, 0x1df, 0x3, 0x953, 0x3fa4, 0x800, 0x7ff, 0x2, 0x101, 0x3, 0xfffff801, 0x4, 0x9, 0xf5f, 0xd1, 0x3, 0xfd4, 0x4, 0x3, 0x0, 0x60b87479, 0xffff, 0x101, 0x122, 0x401, 0x4, 0xffffffff, 0x80, 0xfffeffff, 0x300, 0x3, 0xffffffe0, 0x7fffffff, 0x8, 0x6, 0x6, 0xffff, 0xffffffbb, 0x7f, 0x3, 0xffff, 0x4, 0xf07a, 0x0, 0xffffffff, 0x5, 0x63a8, 0x9, 0x9592, 0x7, 0x81, 0x7, 0x40, 0x7b6, 0xf884, 0xffffffff, 0x3, 0x9, 0x5, 0x20, 0xdf1, 0x1bd, 0x9a67, 0xffffffff, 0xfffffffc, 0x441, 0x7, 0x1, 0x3ff, 0x1df8, 0xffffffff, 0x1, 0xffffffff, 0x5, 0x401, 0x5, 0x3, 0x8, 0x3f, 0x1, 0xf16b, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5bd, 0x6, 0x9, 0x7fff, 0x8, 0x80000000, 0x80000001, 0x9, 0xfffffff9, 0xe2, 0x3, 0xfc, 0x5, 0xf753, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x2, 0x8, 0x10, 0xffffa174, 0xbc, 0x6cbf246f, 0x5, 0x2000, 0x9, 0x45, 0x9, 0x7ff, 0x8, 0x8, 0x2, 0xb0, 0x7, 0x401, 0x2, 0xba1, 0x1, 0x32e18c15, 0x2, 0x5, 0x9, 0x6, 0xc1ce, 0x9, 0x2, 0x1000, 0x1, 0xf667, 0xa80, 0x1, 0x3, 0x7, 0xa6, 0x7, 0xb7d, 0x5, 0xff, 0xeedd, 0x7f, 0x0, 0x20f82777, 0x91, 0xfffffff7, 0x100, 0x6, 0xf6, 0x8f000000, 0xebb7, 0x80, 0x2, 0xfff, 0x4, 0x80000000, 0x412, 0x8, 0x0, 0x1, 0xf4, 0xfffffffa, 0x40c491b7, 0x5, 0x7fffffff, 0xfffffff7, 0x1, 0x2, 0x81, 0x8, 0x0, 0x4, 0x4, 0x8, 0x4, 0x8001, 0x7, 0x8, 0x1, 0x9, 0x7, 0x5, 0x6, 0xfffffff9, 0x8, 0x2, 0x4, 0x401, 0x6, 0x7, 0x7, 0x1, 0x800, 0xffffff0a, 0x1f, 0x9, 0x4, 0xda32, 0x2, 0x3, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x3, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x10000, 0x100, 0x8000, 0x0, 0x7fffffff, 0x7, 0x80000000, 0x800, 0x5, 0x1000, 0x4, 0xfff, 0xffffffe0, 0x2, 0x2, 0x9, 0x3f, 0x5b7, 0x3, 0x7fffffff, 0xffffff80, 0x1, 0x5, 0x8, 0x8000, 0x80, 0x9, 0x100, 0x0, 0x2, 0x6, 0x10001, 0x3, 0x43d2f7cd, 0x45, 0x2584, 0xfffffffa, 0x6, 0x3, 0x8da6, 0x7, 0x2, 0x0, 0x3, 0x7, 0x4, 0x8, 0x3, 0xfff, 0x7, 0x4, 0x7, 0x7, 0x6, 0x80, 0x7, 0x6, 0x2, 0x6, 0x80000001, 0x7, 0x800, 0x81, 0x0, 0x3, 0xeb0, 0x5, 0x8, 0x1, 0x100, 0x0, 0x20, 0x5, 0x47b9, 0x6, 0x0, 0x7ff, 0xfffffff9, 0x3f, 0x5, 0x6, 0x80, 0x7b, 0x1, 0xa20, 0x200, 0x8001, 0x9e0, 0x1, 0xfef0, 0x3f, 0x9, 0x6, 0xfffffe01, 0x7, 0x1, 0x0, 0x520, 0xfffffe01, 0x4, 0x80000001, 0x8, 0x40, 0x9, 0x101, 0x7, 0xfffffff7, 0x10001, 0x200, 0xffffff80, 0x80000000, 0x7ff, 0x7fff, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x980c, 0x200, 0x6, 0x8001, 0x0, 0x2, 0x1ff, 0x80000000, 0x4, 0x5, 0x4, 0xffffff5e, 0x7, 0xfb2e, 0x778, 0x8, 0x101, 0x3e17, 0x8, 0x4, 0x8, 0xffffff01, 0x25, 0x6, 0x3bb1, 0xe26d, 0x3, 0x7fff, 0x8000, 0xdaf, 0x920, 0x20, 0x4, 0x4, 0x1828823a, 0x7, 0xffffffff, 0x1, 0x1, 0xd6, 0x7, 0x5, 0x7, 0x68, 0x3ff, 0x8, 0xfffffffa, 0x40, 0x800, 0x1, 0x6, 0x6, 0x1, 0x7, 0x2, 0x5, 0xffff, 0xe8, 0x9, 0x2, 0x0, 0x6, 0x1f, 0x5, 0x6, 0xffff, 0x200, 0x8, 0x2af, 0x0, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd3, 0x0, 0xb2b, 0x1ff, 0x10001, 0x8, 0xfffff278, 0x7fff, 0xe473, 0xa7, 0x73, 0x8000, 0x7fff, 0x2, 0x1, 0xe452, 0x6, 0x3, 0x0, 0x4, 0x7, 0x101, 0x7, 0x1, 0xa80, 0x8, 0x1, 0x9, 0x3, 0x101, 0x9c9, 0x4, 0x8000, 0x77bb, 0x8, 0x8001, 0x2, 0x0, 0x9, 0xaf, 0x4, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x80, 0xe2c9, 0x215, 0x7, 0x200, 0x0, 0x1, 0xfa, 0xffffffff, 0x3, 0x3, 0x1ff, 0xffff8000, 0x8000, 0x0, 0x73e, 0x0, 0x800, 0x7fffffff, 0xa, 0x4ff, 0x2, 0xbf, 0x5, 0x2, 0x5, 0x4, 0x5, 0xffffffff, 0xffff, 0x9, 0x0, 0x7e9, 0x8, 0xcae, 0xfffffffd, 0xfffffffe, 0x5, 0x8, 0x4089729d, 0x81, 0xffff8405, 0x5, 0x800, 0x8001, 0x4, 0x6, 0x0, 0x80, 0x5, 0x9, 0x3e, 0x9, 0x1, 0x100, 0x1, 0x8, 0x80000000, 0xfffffc00, 0x6, 0x2, 0x4, 0x7fff, 0x7, 0x6138, 0x1, 0x3, 0x40, 0xce6, 0x3, 0x8, 0x7e64, 0x5, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0xfffffffe, 0x6, 0x3, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, 0xfffffff9, 0x0, 0x324, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc79, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0xde7, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xe7, 0x0, 0x0, 0xffffffff, 0x8001, 0x1, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xf6b2, 0x0, 0xffffff10, 0x0, 0x0, 0x8001, 0x1f, 0xbf69, 0x1, 0x1b4, 0x0, 0x0, 0x0, 0xe0de, 0x0, 0x9, 0x0, 0x4d76, 0x0, 0x4]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)


VM DIAGNOSIS:
02:40:00  Registers:
info registers vcpu 0
RAX=00000000100400fb RBX=800000002e777007 RCX=0000000000000000 RDX=800000002e777007
RSI=00007f055d90c000 RDI=ffff88800f31b200 RBP=ffff8880351d0860 RSP=ffff888033ea77d0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff88800f31b200 R13=00007f055d90c000 R14=ffff88800df55a80 R15=0000000000000000
RIP=ffffffff8168e120 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556855400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000000eb84000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f3571e4f7c0 00007f3571e4f7c8
YMM02=0000000000000000 0000000000000000 00007f3571e4f7e0 00007f3571e4f7c0
YMM03=0000000000000000 0000000000000000 00007f3571e4f7c8 00007f3571e4f7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8240add1 RDI=ffffffff8762a6c0 RBP=ffffffff8762a680 RSP=ffff888038637260
R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001
R12=000000000000002d R13=ffffffff8762a680 R14=0000000000000010 R15=ffffffff8240adc0
RIP=ffffffff8240ae29 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fba4ec8b700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000200017c0 CR3=000000000d718000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000