Warning: Permanently added '[localhost]:17472' (ECDSA) to the list of known hosts. 2022/10/02 18:37:21 fuzzer started 2022/10/02 18:37:21 dialing manager at localhost:35095 syzkaller login: [ 44.299595] cgroup: Unknown subsys name 'net' [ 44.520434] cgroup: Unknown subsys name 'rlimit' 2022/10/02 18:37:35 syscalls: 206 2022/10/02 18:37:35 code coverage: enabled 2022/10/02 18:37:35 comparison tracing: enabled 2022/10/02 18:37:35 extra coverage: enabled 2022/10/02 18:37:35 setuid sandbox: enabled 2022/10/02 18:37:35 namespace sandbox: enabled 2022/10/02 18:37:35 Android sandbox: enabled 2022/10/02 18:37:35 fault injection: enabled 2022/10/02 18:37:35 leak checking: enabled 2022/10/02 18:37:35 net packet injection: enabled 2022/10/02 18:37:35 net device setup: enabled 2022/10/02 18:37:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 18:37:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 18:37:35 USB emulation: enabled 2022/10/02 18:37:35 hci packet injection: enabled 2022/10/02 18:37:35 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 18:37:35 802.15.4 emulation: enabled 2022/10/02 18:37:35 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 18:37:37 starting 8 fuzzer processes 18:37:37 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000780)={'binder1\x00'}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r6, 0x4b35, 0x5) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000008c0)) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000900)={0x8000, 0x5, 0x3}) 18:37:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1fd) r1 = socket$inet6(0xa, 0x800, 0x5) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000000}, 0x400c0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) getpeername(r1, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001b80)=0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x4, 0x400, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004884}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002000)='/sys/block/sda', 0x8080, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000002040)=0x8, 0x4) socket$inet6(0xa, 0x6, 0x5) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x39) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xa8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ac3f3952686f6b0a43e8fe"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67568dc94a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "aaea217f18"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2fc4df68cf5002911d1024b220"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf0e910cff7025e56d3d02fd09"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000002200)="e220f5488c4b81") recvmmsg$unix(r3, &(0x7f0000005ac0)=[{{&(0x7f0000002240), 0x6e, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/213, 0xd5}, {&(0x7f00000023c0)=""/160, 0xa0}, {&(0x7f0000002480)=""/139, 0x8b}], 0x3, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/64, 0x40}], 0x2, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/19, 0x13}, {&(0x7f00000028c0)=""/143, 0x8f}, {&(0x7f0000002980)=""/2, 0x2}, {&(0x7f00000029c0)=""/220, 0xdc}], 0x4, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/174, 0xae}], 0x1}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/231, 0xe7}, {&(0x7f0000002ec0)=""/48, 0x30}, {&(0x7f0000002f00)=""/214, 0xd6}, {&(0x7f0000003000)=""/122, 0x7a}, {&(0x7f0000003080)=""/39, 0x27}, {&(0x7f00000030c0)=""/173, 0xad}], 0x6}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000005800)=[{&(0x7f0000003280)=""/215, 0xd7}, {&(0x7f0000003380)=""/13, 0xd}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/111, 0x6f}, {&(0x7f0000005440)=""/247, 0xf7}, {&(0x7f0000005540)=""/110, 0x6e}, {&(0x7f00000055c0)=""/176, 0xb0}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/71, 0x47}], 0xa, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005a00)=""/110, 0x6e}, {0xfffffffffffffffd}], 0x2}}], 0x7, 0x40010060, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000005d00)={'ip6tnl0\x00', &(0x7f0000005c80)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xe9, 0x100, 0x19, @private2, @local, 0x87, 0x1, 0xa2dd, 0x6}}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000005e40)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005e00)={&(0x7f0000005d80)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x18}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_bt_hci(r8, 0x400448e3, &(0x7f0000005e80)="85129c5bade1d9de495117090b25f8f64f31b4b23f7302d7a2a83d461c433d6e67e86d9607549fb76dad904dab34e3b2c8b4b4763a610c7380b58db37824e79e37596b584c302980b90b60d3160e94f05dfc514d2e2bc4d1c337ff4b31d8d26605261b7bf87ff6494fe4f397fc3e5c69b88f434d8edc39e6ced5ff7174d8b71e416c6fc69aa4068b5519fa") sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) process_mrelease(0xffffffffffffffff, 0x0) 18:37:37 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), r10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000040c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000041c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x80, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff, 0x25}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb427}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe28}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xeb6b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb83f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ea}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x28, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x64}, 0x44001) 18:37:37 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) socket$unix(0x1, 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000780)='bond0\x00', 0x10) r5 = syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000800)) 18:37:37 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="4670230289291346", 0x8}, {&(0x7f0000000040)}], 0x2, 0xf, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80) r0 = syz_open_pts(0xffffffffffffffff, 0x22200) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x40080) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x281, 0x0) process_mrelease(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0xc010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xc3d) socketpair(0x2a, 0x1, 0x9, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x100, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040845}, 0xba1913b14002bc7a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000012, 0x80010, 0xffffffffffffffff, 0x0) [ 59.664020] audit: type=1400 audit(1664735857.322:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:37:37 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x5e, 0x1, 0x1, 0x5, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7}}) r9 = syz_open_dev$hidraw(&(0x7f0000001000), 0x200, 0x400000) ioctl$HIDIOCGRAWNAME(r9, 0x80404804, &(0x7f0000001040)) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:37:37 executing program 6: r0 = socket(0x22, 0x6, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x6}, 0x1000}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2c}}, 0x4000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x8, 0x7800, 0xda8e, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d993efa6ae9c68cc085ee2e53760c10"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/suspend', 0x210042, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair(0x29, 0x3, 0x6, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'syztnl2\x00', r4, 0x40, 0x10, 0x1c, 0x3ff, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x66, 0x0, 0x9, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x3, "d1"}, @rr={0x7, 0x1b, 0x70, [@multicast1, @multicast1, @broadcast, @remote, @private=0xa010101, @multicast2]}, @lsrr={0x83, 0xf, 0x5c, [@multicast2, @empty, @remote]}, @rr={0x7, 0x7, 0x9f, [@private=0xa010100]}, @ssrr={0x89, 0x1b, 0xcf, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @local]}]}}}}}) syz_open_pts(0xffffffffffffffff, 0x10000) 18:37:37 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000005b40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x101, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getpeername$packet(r6, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005ec0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000005f40)={'ip_vti0\x00', &(0x7f0000005f00)={'ip_vti0\x00', r8, 0x26, 0x1, 0x8, 0x0, {{0x7, 0x4, 0x1, 0x23, 0x1c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x83, 0x7, "6c5a47e7ee"}]}}}}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) [ 61.004597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.007122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.008491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.017038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.019578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.021577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.027866] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.082588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.085218] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.086570] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.088122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.089242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.090464] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.091460] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.094594] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.095558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.097312] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.098397] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.099586] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.100553] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.114009] Bluetooth: hci5: HCI_REQ-0x0c1a [ 61.114750] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.122570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.124014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.126031] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.128024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.129245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.129764] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.133019] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.134487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.134584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.137395] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.137484] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.140026] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.141360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.142382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.146213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.149945] Bluetooth: hci2: HCI_REQ-0x0c1a [ 61.150671] Bluetooth: hci3: HCI_REQ-0x0c1a [ 61.165247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.166250] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.168589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.172163] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.173402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.175039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.176428] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.177714] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.182239] Bluetooth: hci6: HCI_REQ-0x0c1a [ 61.183111] Bluetooth: hci4: HCI_REQ-0x0c1a [ 63.095128] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 63.095154] Bluetooth: hci0: command 0x0409 tx timeout [ 63.158019] Bluetooth: hci5: command 0x0409 tx timeout [ 63.158938] Bluetooth: hci3: command 0x0409 tx timeout [ 63.159054] Bluetooth: hci7: command 0x0409 tx timeout [ 63.221870] Bluetooth: hci2: command 0x0409 tx timeout [ 63.221933] Bluetooth: hci4: command 0x0409 tx timeout [ 63.222543] Bluetooth: hci6: command 0x0409 tx timeout [ 65.141859] Bluetooth: hci0: command 0x041b tx timeout [ 65.205859] Bluetooth: hci3: command 0x041b tx timeout [ 65.206971] Bluetooth: hci7: command 0x041b tx timeout [ 65.207368] Bluetooth: hci5: command 0x041b tx timeout [ 65.269882] Bluetooth: hci4: command 0x041b tx timeout [ 65.270288] Bluetooth: hci2: command 0x041b tx timeout [ 65.270945] Bluetooth: hci6: command 0x041b tx timeout [ 65.978249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.979631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.980586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.982370] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.983509] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.984350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.986911] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.190886] Bluetooth: hci0: command 0x040f tx timeout [ 67.253862] Bluetooth: hci5: command 0x040f tx timeout [ 67.254322] Bluetooth: hci7: command 0x040f tx timeout [ 67.254717] Bluetooth: hci3: command 0x040f tx timeout [ 67.317910] Bluetooth: hci6: command 0x040f tx timeout [ 67.318379] Bluetooth: hci2: command 0x040f tx timeout [ 67.318761] Bluetooth: hci4: command 0x040f tx timeout [ 68.022911] Bluetooth: hci1: command 0x0409 tx timeout [ 69.237835] Bluetooth: hci0: command 0x0419 tx timeout [ 69.302847] Bluetooth: hci3: command 0x0419 tx timeout [ 69.303319] Bluetooth: hci7: command 0x0419 tx timeout [ 69.303701] Bluetooth: hci5: command 0x0419 tx timeout [ 69.367470] Bluetooth: hci4: command 0x0419 tx timeout [ 69.367933] Bluetooth: hci2: command 0x0419 tx timeout [ 69.368312] Bluetooth: hci6: command 0x0419 tx timeout [ 70.069867] Bluetooth: hci1: command 0x041b tx timeout [ 72.118296] Bluetooth: hci1: command 0x040f tx timeout [ 74.165883] Bluetooth: hci1: command 0x0419 tx timeout 18:38:32 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), r10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000040c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000041c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x80, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff, 0x25}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb427}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe28}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xeb6b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb83f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ea}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x28, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x64}, 0x44001) 18:38:32 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x5e, 0x1, 0x1, 0x5, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7}}) r9 = syz_open_dev$hidraw(&(0x7f0000001000), 0x200, 0x400000) ioctl$HIDIOCGRAWNAME(r9, 0x80404804, &(0x7f0000001040)) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:38:33 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), r10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000040c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000041c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x80, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff, 0x25}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb427}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe28}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xeb6b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb83f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ea}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x28, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x64}, 0x44001) 18:38:33 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x5e, 0x1, 0x1, 0x5, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7}}) r9 = syz_open_dev$hidraw(&(0x7f0000001000), 0x200, 0x400000) ioctl$HIDIOCGRAWNAME(r9, 0x80404804, &(0x7f0000001040)) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:38:33 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) socket$unix(0x1, 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000780)='bond0\x00', 0x10) r5 = syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000800)) 18:38:33 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), r10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000040c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000041c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x80, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff, 0x25}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb427}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe28}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xeb6b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb83f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ea}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x28, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x64}, 0x44001) 18:38:33 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x5e, 0x1, 0x1, 0x5, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7}}) r9 = syz_open_dev$hidraw(&(0x7f0000001000), 0x200, 0x400000) ioctl$HIDIOCGRAWNAME(r9, 0x80404804, &(0x7f0000001040)) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:38:33 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) socket$unix(0x1, 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000780)='bond0\x00', 0x10) r5 = syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000800)) [ 116.495728] audit: type=1400 audit(1664735914.154:7): avc: denied { create } for pid=3965 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 18:38:51 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), r10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000040c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000041c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x80, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff, 0x25}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb427}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe28}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xeb6b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb83f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ea}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 18:38:51 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000780)={'binder1\x00'}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r6, 0x4b35, 0x5) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000008c0)) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000900)={0x8000, 0x5, 0x3}) 18:38:51 executing program 6: r0 = socket(0x22, 0x6, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x6}, 0x1000}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2c}}, 0x4000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x8, 0x7800, 0xda8e, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d993efa6ae9c68cc085ee2e53760c10"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/suspend', 0x210042, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair(0x29, 0x3, 0x6, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'syztnl2\x00', r4, 0x40, 0x10, 0x1c, 0x3ff, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x66, 0x0, 0x9, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x3, "d1"}, @rr={0x7, 0x1b, 0x70, [@multicast1, @multicast1, @broadcast, @remote, @private=0xa010101, @multicast2]}, @lsrr={0x83, 0xf, 0x5c, [@multicast2, @empty, @remote]}, @rr={0x7, 0x7, 0x9f, [@private=0xa010100]}, @ssrr={0x89, 0x1b, 0xcf, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @local]}]}}}}}) syz_open_pts(0xffffffffffffffff, 0x10000) 18:38:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1fd) r1 = socket$inet6(0xa, 0x800, 0x5) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000000}, 0x400c0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) getpeername(r1, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001b80)=0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x4, 0x400, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004884}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002000)='/sys/block/sda', 0x8080, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000002040)=0x8, 0x4) socket$inet6(0xa, 0x6, 0x5) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x39) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xa8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ac3f3952686f6b0a43e8fe"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67568dc94a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "aaea217f18"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2fc4df68cf5002911d1024b220"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf0e910cff7025e56d3d02fd09"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000002200)="e220f5488c4b81") recvmmsg$unix(r3, &(0x7f0000005ac0)=[{{&(0x7f0000002240), 0x6e, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/213, 0xd5}, {&(0x7f00000023c0)=""/160, 0xa0}, {&(0x7f0000002480)=""/139, 0x8b}], 0x3, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/64, 0x40}], 0x2, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/19, 0x13}, {&(0x7f00000028c0)=""/143, 0x8f}, {&(0x7f0000002980)=""/2, 0x2}, {&(0x7f00000029c0)=""/220, 0xdc}], 0x4, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/174, 0xae}], 0x1}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/231, 0xe7}, {&(0x7f0000002ec0)=""/48, 0x30}, {&(0x7f0000002f00)=""/214, 0xd6}, {&(0x7f0000003000)=""/122, 0x7a}, {&(0x7f0000003080)=""/39, 0x27}, {&(0x7f00000030c0)=""/173, 0xad}], 0x6}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000005800)=[{&(0x7f0000003280)=""/215, 0xd7}, {&(0x7f0000003380)=""/13, 0xd}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/111, 0x6f}, {&(0x7f0000005440)=""/247, 0xf7}, {&(0x7f0000005540)=""/110, 0x6e}, {&(0x7f00000055c0)=""/176, 0xb0}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/71, 0x47}], 0xa, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005a00)=""/110, 0x6e}, {0xfffffffffffffffd}], 0x2}}], 0x7, 0x40010060, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000005d00)={'ip6tnl0\x00', &(0x7f0000005c80)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xe9, 0x100, 0x19, @private2, @local, 0x87, 0x1, 0xa2dd, 0x6}}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000005e40)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005e00)={&(0x7f0000005d80)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x18}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_bt_hci(r8, 0x400448e3, &(0x7f0000005e80)="85129c5bade1d9de495117090b25f8f64f31b4b23f7302d7a2a83d461c433d6e67e86d9607549fb76dad904dab34e3b2c8b4b4763a610c7380b58db37824e79e37596b584c302980b90b60d3160e94f05dfc514d2e2bc4d1c337ff4b31d8d26605261b7bf87ff6494fe4f397fc3e5c69b88f434d8edc39e6ced5ff7174d8b71e416c6fc69aa4068b5519fa") sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) process_mrelease(0xffffffffffffffff, 0x0) 18:38:51 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x5e, 0x1, 0x1, 0x5, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7}}) syz_open_dev$hidraw(&(0x7f0000001000), 0x200, 0x400000) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:38:51 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) socket$unix(0x1, 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000780)='bond0\x00', 0x10) r5 = syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000800)) 18:38:51 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000005b40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x101, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getpeername$packet(r6, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005ec0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000005f40)={'ip_vti0\x00', &(0x7f0000005f00)={'ip_vti0\x00', r8, 0x26, 0x1, 0x8, 0x0, {{0x7, 0x4, 0x1, 0x23, 0x1c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x83, 0x7, "6c5a47e7ee"}]}}}}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:38:51 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="4670230289291346", 0x8}, {&(0x7f0000000040)}], 0x2, 0xf, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80) r0 = syz_open_pts(0xffffffffffffffff, 0x22200) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x40080) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x281, 0x0) process_mrelease(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0xc010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xc3d) socketpair(0x2a, 0x1, 0x9, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x100, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040845}, 0xba1913b14002bc7a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000012, 0x80010, 0xffffffffffffffff, 0x0) 18:38:51 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000005b40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x101, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getpeername$packet(r6, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005ec0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000005f40)={'ip_vti0\x00', &(0x7f0000005f00)={'ip_vti0\x00', r8, 0x26, 0x1, 0x8, 0x0, {{0x7, 0x4, 0x1, 0x23, 0x1c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x83, 0x7, "6c5a47e7ee"}]}}}}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:38:51 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000005b40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x101, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getpeername$packet(r6, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005ec0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000005f40)={'ip_vti0\x00', &(0x7f0000005f00)={'ip_vti0\x00', r8, 0x26, 0x1, 0x8, 0x0, {{0x7, 0x4, 0x1, 0x23, 0x1c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x83, 0x7, "6c5a47e7ee"}]}}}}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:38:51 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000780)={'binder1\x00'}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r6, 0x4b35, 0x5) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000008c0)) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000900)={0x8000, 0x5, 0x3}) 18:39:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1fd) r1 = socket$inet6(0xa, 0x800, 0x5) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000000}, 0x400c0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) getpeername(r1, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001b80)=0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x4, 0x400, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004884}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002000)='/sys/block/sda', 0x8080, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000002040)=0x8, 0x4) socket$inet6(0xa, 0x6, 0x5) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x39) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xa8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ac3f3952686f6b0a43e8fe"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67568dc94a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "aaea217f18"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2fc4df68cf5002911d1024b220"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf0e910cff7025e56d3d02fd09"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000002200)="e220f5488c4b81") recvmmsg$unix(r3, &(0x7f0000005ac0)=[{{&(0x7f0000002240), 0x6e, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/213, 0xd5}, {&(0x7f00000023c0)=""/160, 0xa0}, {&(0x7f0000002480)=""/139, 0x8b}], 0x3, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/64, 0x40}], 0x2, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/19, 0x13}, {&(0x7f00000028c0)=""/143, 0x8f}, {&(0x7f0000002980)=""/2, 0x2}, {&(0x7f00000029c0)=""/220, 0xdc}], 0x4, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/174, 0xae}], 0x1}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/231, 0xe7}, {&(0x7f0000002ec0)=""/48, 0x30}, {&(0x7f0000002f00)=""/214, 0xd6}, {&(0x7f0000003000)=""/122, 0x7a}, {&(0x7f0000003080)=""/39, 0x27}, {&(0x7f00000030c0)=""/173, 0xad}], 0x6}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000005800)=[{&(0x7f0000003280)=""/215, 0xd7}, {&(0x7f0000003380)=""/13, 0xd}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/111, 0x6f}, {&(0x7f0000005440)=""/247, 0xf7}, {&(0x7f0000005540)=""/110, 0x6e}, {&(0x7f00000055c0)=""/176, 0xb0}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/71, 0x47}], 0xa, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005a00)=""/110, 0x6e}, {0xfffffffffffffffd}], 0x2}}], 0x7, 0x40010060, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000005d00)={'ip6tnl0\x00', &(0x7f0000005c80)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xe9, 0x100, 0x19, @private2, @local, 0x87, 0x1, 0xa2dd, 0x6}}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000005e40)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005e00)={&(0x7f0000005d80)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x18}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_bt_hci(r8, 0x400448e3, &(0x7f0000005e80)="85129c5bade1d9de495117090b25f8f64f31b4b23f7302d7a2a83d461c433d6e67e86d9607549fb76dad904dab34e3b2c8b4b4763a610c7380b58db37824e79e37596b584c302980b90b60d3160e94f05dfc514d2e2bc4d1c337ff4b31d8d26605261b7bf87ff6494fe4f397fc3e5c69b88f434d8edc39e6ced5ff7174d8b71e416c6fc69aa4068b5519fa") sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) process_mrelease(0xffffffffffffffff, 0x0) 18:39:06 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000780)={'binder1\x00'}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r6, 0x4b35, 0x5) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000008c0)) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000900)={0x8000, 0x5, 0x3}) 18:39:06 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), r10) syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000040c0)={'wlan0\x00'}) 18:39:06 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000005b40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x101, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getpeername$packet(r6, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005ec0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000005f40)={'ip_vti0\x00', &(0x7f0000005f00)={'ip_vti0\x00', r8, 0x26, 0x1, 0x8, 0x0, {{0x7, 0x4, 0x1, 0x23, 0x1c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x83, 0x7, "6c5a47e7ee"}]}}}}}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:39:06 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) socket$unix(0x1, 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000780)='bond0\x00', 0x10) syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) 18:39:06 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x5e, 0x1, 0x1, 0x5, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7}}) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:39:06 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="4670230289291346", 0x8}, {&(0x7f0000000040)}], 0x2, 0xf, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80) r0 = syz_open_pts(0xffffffffffffffff, 0x22200) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x40080) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x281, 0x0) process_mrelease(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0xc010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xc3d) socketpair(0x2a, 0x1, 0x9, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x100, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040845}, 0xba1913b14002bc7a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000012, 0x80010, 0xffffffffffffffff, 0x0) 18:39:06 executing program 6: r0 = socket(0x22, 0x6, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x6}, 0x1000}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2c}}, 0x4000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x8, 0x7800, 0xda8e, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d993efa6ae9c68cc085ee2e53760c10"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/suspend', 0x210042, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair(0x29, 0x3, 0x6, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'syztnl2\x00', r4, 0x40, 0x10, 0x1c, 0x3ff, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x66, 0x0, 0x9, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x3, "d1"}, @rr={0x7, 0x1b, 0x70, [@multicast1, @multicast1, @broadcast, @remote, @private=0xa010101, @multicast2]}, @lsrr={0x83, 0xf, 0x5c, [@multicast2, @empty, @remote]}, @rr={0x7, 0x7, 0x9f, [@private=0xa010100]}, @ssrr={0x89, 0x1b, 0xcf, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @local]}]}}}}}) syz_open_pts(0xffffffffffffffff, 0x10000) 18:39:06 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000780)={'binder1\x00'}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r6, 0x4b35, 0x5) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000008c0)) 18:39:06 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000005b40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x101, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getpeername$packet(r6, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005ec0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000005f40)={'ip_vti0\x00', &(0x7f0000005f00)={'ip_vti0\x00', r8, 0x26, 0x1, 0x8, 0x0, {{0x7, 0x4, 0x1, 0x23, 0x1c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x83, 0x7, "6c5a47e7ee"}]}}}}}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:39:06 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), r10) syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) 18:39:06 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000780)={'binder1\x00'}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r6, 0x4b35, 0x5) 18:39:06 executing program 6: r0 = socket(0x22, 0x6, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x6}, 0x1000}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2c}}, 0x4000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x8, 0x7800, 0xda8e, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d993efa6ae9c68cc085ee2e53760c10"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/suspend', 0x210042, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair(0x29, 0x3, 0x6, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'syztnl2\x00', r4, 0x40, 0x10, 0x1c, 0x3ff, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x66, 0x0, 0x9, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x3, "d1"}, @rr={0x7, 0x1b, 0x70, [@multicast1, @multicast1, @broadcast, @remote, @private=0xa010101, @multicast2]}, @lsrr={0x83, 0xf, 0x5c, [@multicast2, @empty, @remote]}, @rr={0x7, 0x7, 0x9f, [@private=0xa010100]}, @ssrr={0x89, 0x1b, 0xcf, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @local]}]}}}}}) syz_open_pts(0xffffffffffffffff, 0x10000) 18:39:06 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000005b40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x101, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getpeername$packet(r6, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005ec0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000005f40)={'ip_vti0\x00', &(0x7f0000005f00)={'ip_vti0\x00', r8, 0x26, 0x1, 0x8, 0x0, {{0x7, 0x4, 0x1, 0x23, 0x1c, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x83, 0x7, "6c5a47e7ee"}]}}}}}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:39:06 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x5e, 0x1, 0x1, 0x5, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7}}) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:39:06 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000780)={'binder1\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x1) 18:39:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1fd) r1 = socket$inet6(0xa, 0x800, 0x5) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000000}, 0x400c0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) getpeername(r1, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001b80)=0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x4, 0x400, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004884}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002000)='/sys/block/sda', 0x8080, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000002040)=0x8, 0x4) socket$inet6(0xa, 0x6, 0x5) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x39) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xa8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ac3f3952686f6b0a43e8fe"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67568dc94a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "aaea217f18"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2fc4df68cf5002911d1024b220"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf0e910cff7025e56d3d02fd09"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000002200)="e220f5488c4b81") recvmmsg$unix(r3, &(0x7f0000005ac0)=[{{&(0x7f0000002240), 0x6e, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/213, 0xd5}, {&(0x7f00000023c0)=""/160, 0xa0}, {&(0x7f0000002480)=""/139, 0x8b}], 0x3, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/64, 0x40}], 0x2, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/19, 0x13}, {&(0x7f00000028c0)=""/143, 0x8f}, {&(0x7f0000002980)=""/2, 0x2}, {&(0x7f00000029c0)=""/220, 0xdc}], 0x4, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/174, 0xae}], 0x1}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/231, 0xe7}, {&(0x7f0000002ec0)=""/48, 0x30}, {&(0x7f0000002f00)=""/214, 0xd6}, {&(0x7f0000003000)=""/122, 0x7a}, {&(0x7f0000003080)=""/39, 0x27}, {&(0x7f00000030c0)=""/173, 0xad}], 0x6}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000005800)=[{&(0x7f0000003280)=""/215, 0xd7}, {&(0x7f0000003380)=""/13, 0xd}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/111, 0x6f}, {&(0x7f0000005440)=""/247, 0xf7}, {&(0x7f0000005540)=""/110, 0x6e}, {&(0x7f00000055c0)=""/176, 0xb0}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/71, 0x47}], 0xa, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005a00)=""/110, 0x6e}, {0xfffffffffffffffd}], 0x2}}], 0x7, 0x40010060, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000005d00)={'ip6tnl0\x00', &(0x7f0000005c80)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xe9, 0x100, 0x19, @private2, @local, 0x87, 0x1, 0xa2dd, 0x6}}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000005e40)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005e00)={&(0x7f0000005d80)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x18}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_bt_hci(r8, 0x400448e3, &(0x7f0000005e80)="85129c5bade1d9de495117090b25f8f64f31b4b23f7302d7a2a83d461c433d6e67e86d9607549fb76dad904dab34e3b2c8b4b4763a610c7380b58db37824e79e37596b584c302980b90b60d3160e94f05dfc514d2e2bc4d1c337ff4b31d8d26605261b7bf87ff6494fe4f397fc3e5c69b88f434d8edc39e6ced5ff7174d8b71e416c6fc69aa4068b5519fa") sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) process_mrelease(0xffffffffffffffff, 0x0) 18:39:20 executing program 6: r0 = socket(0x22, 0x6, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x6}, 0x1000}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2c}}, 0x4000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x8, 0x7800, 0xda8e, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d993efa6ae9c68cc085ee2e53760c10"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/suspend', 0x210042, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair(0x29, 0x3, 0x6, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'syztnl2\x00', r4, 0x40, 0x10, 0x1c, 0x3ff, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x66, 0x0, 0x9, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x3, "d1"}, @rr={0x7, 0x1b, 0x70, [@multicast1, @multicast1, @broadcast, @remote, @private=0xa010101, @multicast2]}, @lsrr={0x83, 0xf, 0x5c, [@multicast2, @empty, @remote]}, @rr={0x7, 0x7, 0x9f, [@private=0xa010100]}, @ssrr={0x89, 0x1b, 0xcf, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @local]}]}}}}}) 18:39:20 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 18:39:20 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000005b40)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x101, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getpeername$packet(r5, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005ec0)=0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:39:20 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'ip6tnl0\x00', 0x0, 0x5e, 0x1, 0x1, 0x5, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7}}) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:39:20 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="4670230289291346", 0x8}, {&(0x7f0000000040)}], 0x2, 0xf, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80) r0 = syz_open_pts(0xffffffffffffffff, 0x22200) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x40080) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x281, 0x0) process_mrelease(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0xc010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xc3d) socketpair(0x2a, 0x1, 0x9, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x100, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040845}, 0xba1913b14002bc7a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000012, 0x80010, 0xffffffffffffffff, 0x0) 18:39:20 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) 18:39:20 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) socket$unix(0x1, 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) 18:39:20 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) 18:39:20 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) 18:39:20 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000005b40)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x101, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:39:20 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) syz_open_dev$ttys(0xc, 0x2, 0x1) 18:39:20 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) 18:39:20 executing program 6: r0 = socket(0x22, 0x6, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x6}, 0x1000}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2c}}, 0x4000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x8, 0x7800, 0xda8e, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d993efa6ae9c68cc085ee2e53760c10"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/suspend', 0x210042, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair(0x29, 0x3, 0x6, &(0x7f0000000600)) 18:39:20 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000005b40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005d40)={'syztnl1\x00', &(0x7f0000005c80)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x7, 0x8, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x1f, 0xbe, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @rand_addr=0x64010102]}, @generic={0x88, 0x5, "4e45d3"}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "7ba4b1e6132492a386ae08040fac"}, {0x0, 0x10, "36b423f47ff167b5ae8dfda06f39"}, {0x5, 0x6, "0e83dff9"}, {0x6, 0xf, "b16ac02fc77c097264140eba80"}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:39:20 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r7) syz_open_dev$hidraw(&(0x7f0000001000), 0x200, 0x400000) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:39:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1fd) r1 = socket$inet6(0xa, 0x800, 0x5) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000000}, 0x400c0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getpeername(r1, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001b80)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x4, 0x400, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004884}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002000)='/sys/block/sda', 0x8080, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000002040)=0x8, 0x4) socket$inet6(0xa, 0x6, 0x5) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x39) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xa8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ac3f3952686f6b0a43e8fe"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67568dc94a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "aaea217f18"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2fc4df68cf5002911d1024b220"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf0e910cff7025e56d3d02fd09"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000002200)="e220f5488c4b81") recvmmsg$unix(r2, &(0x7f0000005ac0)=[{{&(0x7f0000002240), 0x6e, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/213, 0xd5}, {&(0x7f00000023c0)=""/160, 0xa0}, {&(0x7f0000002480)=""/139, 0x8b}], 0x3, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/64, 0x40}], 0x2, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/19, 0x13}, {&(0x7f00000028c0)=""/143, 0x8f}, {&(0x7f0000002980)=""/2, 0x2}, {&(0x7f00000029c0)=""/220, 0xdc}], 0x4, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/174, 0xae}], 0x1}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/231, 0xe7}, {&(0x7f0000002ec0)=""/48, 0x30}, {&(0x7f0000002f00)=""/214, 0xd6}, {&(0x7f0000003000)=""/122, 0x7a}, {&(0x7f0000003080)=""/39, 0x27}, {&(0x7f00000030c0)=""/173, 0xad}], 0x6}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000005800)=[{&(0x7f0000003280)=""/215, 0xd7}, {&(0x7f0000003380)=""/13, 0xd}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/111, 0x6f}, {&(0x7f0000005440)=""/247, 0xf7}, {&(0x7f0000005540)=""/110, 0x6e}, {&(0x7f00000055c0)=""/176, 0xb0}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/71, 0x47}], 0xa, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005a00)=""/110, 0x6e}, {0xfffffffffffffffd}], 0x2}}], 0x7, 0x40010060, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000005d00)={'ip6tnl0\x00', &(0x7f0000005c80)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xe9, 0x100, 0x19, @private2, @local, 0x87, 0x1, 0xa2dd, 0x6}}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000005e40)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005e00)={&(0x7f0000005d80)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x18}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_bt_hci(r6, 0x400448e3, &(0x7f0000005e80)="85129c5bade1d9de495117090b25f8f64f31b4b23f7302d7a2a83d461c433d6e67e86d9607549fb76dad904dab34e3b2c8b4b4763a610c7380b58db37824e79e37596b584c302980b90b60d3160e94f05dfc514d2e2bc4d1c337ff4b31d8d26605261b7bf87ff6494fe4f397fc3e5c69b88f434d8edc39e6ced5ff7174d8b71e416c6fc69aa4068b5519fa") process_mrelease(0xffffffffffffffff, 0x0) 18:39:34 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="4670230289291346", 0x8}, {&(0x7f0000000040)}], 0x2, 0xf, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80) r0 = syz_open_pts(0xffffffffffffffff, 0x22200) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x40080) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x281, 0x0) process_mrelease(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0xc010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xc3d) socketpair(0x2a, 0x1, 0x9, &(0x7f0000000580)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000012, 0x80010, 0xffffffffffffffff, 0x0) 18:39:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1fd) r1 = socket$inet6(0xa, 0x800, 0x5) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000000}, 0x400c0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getpeername(r1, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001b80)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x4, 0x400, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004884}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002000)='/sys/block/sda', 0x8080, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000002040)=0x8, 0x4) socket$inet6(0xa, 0x6, 0x5) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x39) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xa8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ac3f3952686f6b0a43e8fe"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67568dc94a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "aaea217f18"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2fc4df68cf5002911d1024b220"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf0e910cff7025e56d3d02fd09"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000002200)="e220f5488c4b81") recvmmsg$unix(r2, &(0x7f0000005ac0)=[{{&(0x7f0000002240), 0x6e, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/213, 0xd5}, {&(0x7f00000023c0)=""/160, 0xa0}, {&(0x7f0000002480)=""/139, 0x8b}], 0x3, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/64, 0x40}], 0x2, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/19, 0x13}, {&(0x7f00000028c0)=""/143, 0x8f}, {&(0x7f0000002980)=""/2, 0x2}, {&(0x7f00000029c0)=""/220, 0xdc}], 0x4, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/174, 0xae}], 0x1}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/231, 0xe7}, {&(0x7f0000002ec0)=""/48, 0x30}, {&(0x7f0000002f00)=""/214, 0xd6}, {&(0x7f0000003000)=""/122, 0x7a}, {&(0x7f0000003080)=""/39, 0x27}, {&(0x7f00000030c0)=""/173, 0xad}], 0x6}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000005800)=[{&(0x7f0000003280)=""/215, 0xd7}, {&(0x7f0000003380)=""/13, 0xd}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/111, 0x6f}, {&(0x7f0000005440)=""/247, 0xf7}, {&(0x7f0000005540)=""/110, 0x6e}, {&(0x7f00000055c0)=""/176, 0xb0}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/71, 0x47}], 0xa, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005a00)=""/110, 0x6e}, {0xfffffffffffffffd}], 0x2}}], 0x7, 0x40010060, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000005d00)={'ip6tnl0\x00', &(0x7f0000005c80)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xe9, 0x100, 0x19, @private2, @local, 0x87, 0x1, 0xa2dd, 0x6}}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000005e40)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005e00)={&(0x7f0000005d80)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x18}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) process_mrelease(0xffffffffffffffff, 0x0) 18:39:34 executing program 6: r0 = socket(0x22, 0x6, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x6}, 0x1000}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2c}}, 0x4000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x8, 0x7800, 0xda8e, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d993efa6ae9c68cc085ee2e53760c10"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/suspend', 0x210042, 0x0) socketpair(0x29, 0x3, 0x6, &(0x7f0000000600)) 18:39:34 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) syz_open_dev$ttys(0xc, 0x2, 0x1) 18:39:34 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000005b40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000005c40)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7edb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:39:34 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) getpeername(r1, &(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000004000)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) 18:39:34 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) 18:39:34 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_open_dev$hidraw(&(0x7f0000001000), 0x200, 0x400000) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) [ 183.734150] Bluetooth: hci0: command 0x0406 tx timeout [ 183.734188] Bluetooth: hci7: command 0x0406 tx timeout [ 183.735112] Bluetooth: hci5: command 0x0406 tx timeout [ 183.735556] Bluetooth: hci6: command 0x0406 tx timeout [ 183.736458] Bluetooth: hci3: command 0x0406 tx timeout [ 183.736859] Bluetooth: hci2: command 0x0406 tx timeout [ 183.737706] Bluetooth: hci4: command 0x0406 tx timeout [ 187.318075] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.319508] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.320549] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.321987] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.323559] Call Trace: [ 187.324280] [ 187.325193] __schedule+0x893/0x2470 [ 187.326437] ? io_schedule_timeout+0x150/0x150 [ 187.327333] ? do_raw_spin_lock+0x121/0x260 [ 187.328099] ? rwlock_bug.part.0+0x90/0x90 [ 187.328863] schedule+0xda/0x1b0 [ 187.329447] rescuer_thread+0x851/0xdb0 [ 187.330171] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.331046] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.331915] ? lockdep_hardirqs_on+0x79/0x100 [ 187.332673] ? worker_thread+0x1260/0x1260 [ 187.333429] kthread+0x2ed/0x3a0 [ 187.334041] ? kthread_complete_and_exit+0x40/0x40 [ 187.334915] ret_from_fork+0x22/0x30 [ 187.335575] [ 187.336013] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.337175] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.338146] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.339426] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.340824] Call Trace: [ 187.341255] [ 187.341645] __schedule+0x893/0x2470 [ 187.342357] ? io_schedule_timeout+0x150/0x150 [ 187.343168] ? do_raw_spin_lock+0x121/0x260 [ 187.343946] ? rwlock_bug.part.0+0x90/0x90 [ 187.344668] schedule+0xda/0x1b0 [ 187.345292] rescuer_thread+0x851/0xdb0 [ 187.346009] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.346925] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.347765] ? lockdep_hardirqs_on+0x79/0x100 [ 187.348570] ? worker_thread+0x1260/0x1260 [ 187.349343] kthread+0x2ed/0x3a0 [ 187.349980] ? kthread_complete_and_exit+0x40/0x40 [ 187.350866] ret_from_fork+0x22/0x30 [ 187.351525] [ 187.351960] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.353092] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.353999] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.355293] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.356681] Call Trace: [ 187.357158] [ 187.357548] __schedule+0x893/0x2470 [ 187.358271] ? io_schedule_timeout+0x150/0x150 [ 187.359072] ? do_raw_spin_lock+0x121/0x260 [ 187.359839] ? rwlock_bug.part.0+0x90/0x90 [ 187.360495] schedule+0xda/0x1b0 [ 187.361018] rescuer_thread+0x851/0xdb0 [ 187.361592] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.362343] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.363079] ? lockdep_hardirqs_on+0x79/0x100 [ 187.363725] ? worker_thread+0x1260/0x1260 [ 187.364366] kthread+0x2ed/0x3a0 [ 187.364887] ? kthread_complete_and_exit+0x40/0x40 [ 187.365587] ret_from_fork+0x22/0x30 [ 187.366189] [ 187.366592] INFO: task netns:6 blocked for more than 143 seconds. [ 187.367736] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.368701] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.370096] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.371463] Call Trace: [ 187.371858] [ 187.372195] __schedule+0x893/0x2470 [ 187.372743] ? io_schedule_timeout+0x150/0x150 [ 187.373428] ? do_raw_spin_lock+0x121/0x260 [ 187.374074] ? rwlock_bug.part.0+0x90/0x90 [ 187.374706] schedule+0xda/0x1b0 [ 187.375243] rescuer_thread+0x851/0xdb0 [ 187.375851] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.376565] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.377313] ? lockdep_hardirqs_on+0x79/0x100 [ 187.377983] ? worker_thread+0x1260/0x1260 [ 187.378600] kthread+0x2ed/0x3a0 [ 187.379130] ? kthread_complete_and_exit+0x40/0x40 [ 187.379861] ret_from_fork+0x22/0x30 [ 187.380520] [ 187.381030] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 187.382262] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.383238] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.384618] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 187.385973] Workqueue: 0x0 (rcu_gp) [ 187.386555] Call Trace: [ 187.386967] [ 187.387305] __schedule+0x893/0x2470 [ 187.387888] ? io_schedule_timeout+0x150/0x150 [ 187.388555] schedule+0xda/0x1b0 [ 187.389081] worker_thread+0x15f/0x1260 [ 187.389679] ? process_one_work+0x16a0/0x16a0 [ 187.390389] kthread+0x2ed/0x3a0 [ 187.390914] ? kthread_complete_and_exit+0x40/0x40 [ 187.391619] ret_from_fork+0x22/0x30 [ 187.392208] [ 187.392542] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.393490] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.394288] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.395367] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 187.396518] Workqueue: 0x0 (events_highpri) [ 187.397157] Call Trace: [ 187.397511] [ 187.397862] __schedule+0x893/0x2470 [ 187.398409] ? io_schedule_timeout+0x150/0x150 [ 187.399108] schedule+0xda/0x1b0 [ 187.399599] worker_thread+0x15f/0x1260 [ 187.400224] ? process_one_work+0x16a0/0x16a0 [ 187.400898] kthread+0x2ed/0x3a0 [ 187.401381] ? kthread_complete_and_exit+0x40/0x40 [ 187.402087] ret_from_fork+0x22/0x30 [ 187.402659] [ 187.403018] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.403980] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.404721] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.405818] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.407013] Call Trace: [ 187.407386] [ 187.407718] __schedule+0x893/0x2470 [ 187.408303] ? io_schedule_timeout+0x150/0x150 [ 187.408982] ? do_raw_spin_lock+0x121/0x260 [ 187.409611] ? rwlock_bug.part.0+0x90/0x90 [ 187.410277] schedule+0xda/0x1b0 [ 187.410814] rescuer_thread+0x851/0xdb0 [ 187.411384] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.412132] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.412878] ? lockdep_hardirqs_on+0x79/0x100 [ 187.413527] ? worker_thread+0x1260/0x1260 [ 187.414194] kthread+0x2ed/0x3a0 [ 187.414688] ? kthread_complete_and_exit+0x40/0x40 [ 187.415418] ret_from_fork+0x22/0x30 [ 187.416010] [ 187.416356] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.417367] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.418146] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.419261] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.420447] Call Trace: [ 187.420839] [ 187.421171] __schedule+0x893/0x2470 [ 187.421726] ? io_schedule_timeout+0x150/0x150 [ 187.422413] ? mark_held_locks+0x9e/0xe0 [ 187.423030] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.423753] schedule+0xda/0x1b0 [ 187.424294] rcu_tasks_one_gp+0x3db/0xc10 [ 187.424955] rcu_tasks_kthread+0x80/0xa0 [ 187.425543] ? rcu_tasks_postscan+0x10/0x10 [ 187.426206] kthread+0x2ed/0x3a0 [ 187.426706] ? kthread_complete_and_exit+0x40/0x40 [ 187.427437] ret_from_fork+0x22/0x30 [ 187.428033] [ 187.429937] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.430929] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.431663] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.432768] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 187.433970] Workqueue: 0x0 (kblockd) [ 187.434535] Call Trace: [ 187.434934] [ 187.435276] __schedule+0x893/0x2470 [ 187.435854] ? io_schedule_timeout+0x150/0x150 [ 187.436520] schedule+0xda/0x1b0 [ 187.437045] worker_thread+0x15f/0x1260 [ 187.437642] ? process_one_work+0x16a0/0x16a0 [ 187.438342] kthread+0x2ed/0x3a0 [ 187.438860] ? kthread_complete_and_exit+0x40/0x40 [ 187.439553] ret_from_fork+0x22/0x30 [ 187.440142] [ 187.440478] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.441445] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.442235] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.443331] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.444523] Call Trace: [ 187.444926] [ 187.445256] __schedule+0x893/0x2470 [ 187.445833] ? io_schedule_timeout+0x150/0x150 [ 187.446484] ? do_raw_spin_lock+0x121/0x260 [ 187.447139] ? rwlock_bug.part.0+0x90/0x90 [ 187.447761] schedule+0xda/0x1b0 [ 187.448291] rescuer_thread+0x851/0xdb0 [ 187.448907] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.449618] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.450369] ? lockdep_hardirqs_on+0x79/0x100 [ 187.451057] ? worker_thread+0x1260/0x1260 [ 187.451671] kthread+0x2ed/0x3a0 [ 187.452197] ? kthread_complete_and_exit+0x40/0x40 [ 187.452936] ret_from_fork+0x22/0x30 [ 187.453498] [ 187.453932] [ 187.453932] Showing all locks held in the system: [ 187.454850] 1 lock held by rcu_tasks_kthre/11: [ 187.455484] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.456886] 1 lock held by khungtaskd/25: [ 187.457455] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.458799] 2 locks held by in:imklog/188: [ 187.459384] #0: ffff88800e10ad68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 187.460609] #1: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: __schedule+0x1cf/0x2470 [ 187.461836] 2 locks held by syz-executor/4279: [ 187.462482] [ 187.462733] ============================================= [ 187.462733] 18:39:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1fd) r1 = socket$inet6(0xa, 0x800, 0x5) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000000}, 0x400c0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getpeername(r1, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001b80)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x4, 0x400, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004884}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002000)='/sys/block/sda', 0x8080, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000002040)=0x8, 0x4) socket$inet6(0xa, 0x6, 0x5) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x39) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xa8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ac3f3952686f6b0a43e8fe"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67568dc94a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "aaea217f18"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2fc4df68cf5002911d1024b220"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf0e910cff7025e56d3d02fd09"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000002200)="e220f5488c4b81") recvmmsg$unix(r2, &(0x7f0000005ac0)=[{{&(0x7f0000002240), 0x6e, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/213, 0xd5}, {&(0x7f00000023c0)=""/160, 0xa0}, {&(0x7f0000002480)=""/139, 0x8b}], 0x3, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/64, 0x40}], 0x2, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/19, 0x13}, {&(0x7f00000028c0)=""/143, 0x8f}, {&(0x7f0000002980)=""/2, 0x2}, {&(0x7f00000029c0)=""/220, 0xdc}], 0x4, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/174, 0xae}], 0x1}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/231, 0xe7}, {&(0x7f0000002ec0)=""/48, 0x30}, {&(0x7f0000002f00)=""/214, 0xd6}, {&(0x7f0000003000)=""/122, 0x7a}, {&(0x7f0000003080)=""/39, 0x27}, {&(0x7f00000030c0)=""/173, 0xad}], 0x6}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000005800)=[{&(0x7f0000003280)=""/215, 0xd7}, {&(0x7f0000003380)=""/13, 0xd}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/111, 0x6f}, {&(0x7f0000005440)=""/247, 0xf7}, {&(0x7f0000005540)=""/110, 0x6e}, {&(0x7f00000055c0)=""/176, 0xb0}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/71, 0x47}], 0xa, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005a00)=""/110, 0x6e}, {0xfffffffffffffffd}], 0x2}}], 0x7, 0x40010060, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000005d00)={'ip6tnl0\x00', &(0x7f0000005c80)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xe9, 0x100, 0x19, @private2, @local, 0x87, 0x1, 0xa2dd, 0x6}}) process_mrelease(0xffffffffffffffff, 0x0) 18:39:49 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000005b40)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:39:49 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="4670230289291346", 0x8}, {&(0x7f0000000040)}], 0x2, 0xf, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80) r0 = syz_open_pts(0xffffffffffffffff, 0x22200) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x40080) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x281, 0x0) process_mrelease(r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0xc010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xc3d) socketpair(0x2a, 0x1, 0x9, &(0x7f0000000580)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000012, 0x80010, 0xffffffffffffffff, 0x0) 18:39:49 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x62b, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) 18:39:49 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x28, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) 18:39:49 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000700)={0x8001, 0x3, 0x9}) syz_open_dev$ttys(0xc, 0x2, 0x1) 18:39:49 executing program 6: r0 = socket(0x22, 0x6, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x6}, 0x1000}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2c}}, 0x4000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x8, 0x7800, 0xda8e, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d993efa6ae9c68cc085ee2e53760c10"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) socketpair(0x29, 0x3, 0x6, &(0x7f0000000600)) 18:39:49 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00'}) syz_open_dev$hidraw(&(0x7f0000001000), 0x200, 0x400000) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:39:49 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000005b40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) [ 191.926101] Bluetooth: hci1: command 0x0406 tx timeout 18:39:49 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/bus/event_source', 0x11000, 0x102) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 18:39:49 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="4670230289291346", 0x8}, {&(0x7f0000000040)}], 0x2, 0xf, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80) r0 = syz_open_pts(0xffffffffffffffff, 0x22200) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x40080) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x281, 0x0) process_mrelease(r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0xc010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xc3d) socketpair(0x2a, 0x1, 0x9, &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000012, 0x80010, 0xffffffffffffffff, 0x0) 18:39:49 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 18:39:49 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x4000000) socketpair(0x10, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x400c840) recvmmsg$unix(r2, &(0x7f0000003540)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/116, 0x74}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/91, 0x5b}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)=""/169, 0xa9}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/54, 0x36}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/135, 0x87}, {&(0x7f0000003480)=""/59, 0x3b}], 0x5}}], 0x4, 0x40000060, &(0x7f0000003640)={0x77359400}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000036c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xc8, r7, 0x200, 0x1a01fa45, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d963bce78c"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "88f3b7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x842}, 0x8000800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000003e00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a40)={0x344, r3, 0x210, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x41}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x81, @broadcast, 0x2, "", 0x8, 0x800, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @preq={0x82, 0x5c, @not_ext={{}, 0x0, 0x3f, 0x9, @device_b, 0xffff, "", 0x9, 0x2, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7f}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x61bc}]}}, @erp={0x2a, 0x1}, @random={0x70, 0x1f, "d301db8c6fa7e231f56c30d542a16cd19a316cf44d0bb6f21a2196ca2b62ab"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x34, 0xe1}}, @mic={0x8c, 0x10, {0x34f, "ee74528f9c25", @short="4a0a40f58180aa26"}}, @mic={0x8c, 0x18, {0xf39, "99b77f986743", @long="bd9c9fbf118b9321c53969013928c19e"}}, @ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x800, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x16a, 0x2a, [@measure_req={0x26, 0x71, {0x2, 0x3, 0x4, "be6d6ab20769b90bd6f770033a213b3d771ecaa64195c6aa1982e5bebee21538412a618482e1eba38401f4efa0b4dbd469a5dbc3678e0c261b71cbbd3cef924aff5cfb4264df643396abe4bc823512e750e302d32dbe42b2827df37b8b6ed161297ff1f1053eb21feba2e464a6c9"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x86, 0x8, @device_a, 0x80, "", 0xf723, 0x7fff, @device_b, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x1e}, 0x9, 0x60, @device_b, 0x7, 0x7a0, 0xe5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x0, 0xffff, @void, @val=0x2f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0xd8, 0x1f, 0xa, 0x2}}, @random_vendor={0xdd, 0x8c, "d05ad71955ecfbdec6d5b988586922bbff786ae2ec76b6ff273300a715a86bc05767b621d4e2b910cc62487fef3acc0f03d11b6075a8ecfbe405cf3bca3ad15f060640b2207d699d6141cdbc219a41682860934e03757304c38ebf37b8d3d7d83b43a27ac2d918d96237a06f12768b02094f352879840a7aa7404522998872e4bc3f22890d8cee85c17b09b9"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x34, 0x2a, [@supported_rates={0x1, 0x7, [{0x1}, {0xb, 0x1}, {0xb}, {0xc, 0x1}, {0x12}, {0x9}, {0x5}]}, @prep={0x83, 0x25, @ext={{}, 0xbe, 0xff, @device_b, 0x8, @device_b, 0x1a1011ed, 0x651, @device_a, 0x1f}}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x3, 0x3, 0xffffff1d, @device_a, 0xf4, "", 0x9, 0x89, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x3}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x7}}, @supported_rates={0x1, 0x7, [{0x12}, {0x60}, {0x9}, {0x64, 0x1}, {0x9}, {0x4, 0x1}, {0x24}]}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x88, 0x84, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r6) 18:39:50 executing program 6: r0 = socket(0x22, 0x6, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'sit0\x00', {0x6}, 0x1000}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2c}}, 0x4000000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', r3, 0x8, 0x7800, 0xda8e, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d993efa6ae9c68cc085ee2e53760c10"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) socketpair(0x29, 0x3, 0x6, &(0x7f0000000600)) 18:39:49 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x7}) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @local}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000340)="48460d3e2408e78de678347b355ef27fb4091b644739a816ad784e112c125685a9cde90ed343d593445cf4f09581844c9eb0db437c66522a02f42586cf34410c48c6a3cfadb3b6a72f742e42851bcc242fb49594f38d479fb8a92236f8de27fc62f99eae2039eff6e2b48d8763f0559cdfeb230e788a5c3192ff8719599acced843bd82611d8b8e5861174cfead2ecc47a00b430b7c82a63d63f633576bc5835945218d6d28b97973bd6cc955536f7931037b7456de6a0fa16904cacabcf197a990e8d6093f1a03ddfb057f9f9") getpeername(r3, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) getpeername(r2, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f00000007c0), 0x40, 0x101000) 18:39:50 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000005b40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) 18:39:50 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1fd) r1 = socket$inet6(0xa, 0x800, 0x5) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000000}, 0x400c0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getpeername(r1, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001b80)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x38, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x4, 0x400, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004884}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002000)='/sys/block/sda', 0x8080, 0xa) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000002040)=0x8, 0x4) socket$inet6(0xa, 0x6, 0x5) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x39) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0xa8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ac3f3952686f6b0a43e8fe"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67568dc94a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "aaea217f18"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2fc4df68cf5002911d1024b220"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf0e910cff7025e56d3d02fd09"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000002200)="e220f5488c4b81") recvmmsg$unix(r2, &(0x7f0000005ac0)=[{{&(0x7f0000002240), 0x6e, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/213, 0xd5}, {&(0x7f00000023c0)=""/160, 0xa0}, {&(0x7f0000002480)=""/139, 0x8b}], 0x3, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/64, 0x40}], 0x2, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/19, 0x13}, {&(0x7f00000028c0)=""/143, 0x8f}, {&(0x7f0000002980)=""/2, 0x2}, {&(0x7f00000029c0)=""/220, 0xdc}], 0x4, &(0x7f0000002b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/174, 0xae}], 0x1}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/231, 0xe7}, {&(0x7f0000002ec0)=""/48, 0x30}, {&(0x7f0000002f00)=""/214, 0xd6}, {&(0x7f0000003000)=""/122, 0x7a}, {&(0x7f0000003080)=""/39, 0x27}, {&(0x7f00000030c0)=""/173, 0xad}], 0x6}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000005800)=[{&(0x7f0000003280)=""/215, 0xd7}, {&(0x7f0000003380)=""/13, 0xd}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/111, 0x6f}, {&(0x7f0000005440)=""/247, 0xf7}, {&(0x7f0000005540)=""/110, 0x6e}, {&(0x7f00000055c0)=""/176, 0xb0}, {&(0x7f0000005680)=""/195, 0xc3}, {&(0x7f0000005780)=""/71, 0x47}], 0xa, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005a00)=""/110, 0x6e}, {0xfffffffffffffffd}], 0x2}}], 0x7, 0x40010060, 0x0) process_mrelease(0xffffffffffffffff, 0x0) 18:39:50 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x204000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xe, 0x11, 0xd1}) syz_open_pts(0xffffffffffffffff, 0x200200) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x6, 0x3, 0xa7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x1, 0x200, 0x3, 0xcd8f, 0x15, "b5e44638049a0bcd"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/hidraw', 0x2221, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec4, 0x21}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x681, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000640)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x800, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 18:39:50 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0xa, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e9a, 0x43}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4b6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80010) r3 = socket(0x2c, 0x6, 0x2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x2400c014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0x100000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x2f, 0x2, 0x0, 0x101, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x40, 0x3, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x508, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x1, 0x879}, {0x80, 0x7, 0x81, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x508}}, 0x24048091) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$hidraw(&(0x7f0000001000), 0x200, 0x400000) socketpair(0x1, 0x2, 0x8, &(0x7f0000001080)) 18:39:50 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="4670230289291346", 0x8}, {&(0x7f0000000040)}], 0x2, 0xf, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x80) r0 = syz_open_pts(0xffffffffffffffff, 0x22200) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x40080) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x281, 0x0) process_mrelease(r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0xc010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xc3d) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000012, 0x80010, 0xffffffffffffffff, 0x0) 18:39:50 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x8, 0x2a, &(0x7f0000000100)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/230, 0xe6}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/141, 0x8d}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/238, 0xee}, {&(0x7f0000000f80)=""/202, 0xca}, {&(0x7f0000001080)=""/197, 0xc5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/3, 0x3}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/203, 0xcb}, {&(0x7f00000035c0)=""/79, 0x4f}, {&(0x7f0000003640)=""/241, 0xf1}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/128, 0x80}, {&(0x7f0000003840)=""/81, 0x51}, {&(0x7f00000038c0)=""/250, 0xfa}, {&(0x7f00000039c0)=""/100, 0x64}, {&(0x7f0000003a40)=""/15, 0xf}], 0xa, &(0x7f0000003b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b80)=""/120, 0x78}], 0x1, &(0x7f0000003c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000003d00)=""/202, 0xca}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x2, &(0x7f0000004e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/160, 0xa0}, {&(0x7f0000005180)=""/90, 0x5a}, {&(0x7f0000005200)=""/170, 0xaa}, {&(0x7f00000052c0)=""/244, 0xf4}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/99, 0x63}], 0x9, &(0x7f00000055c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005640)=""/112, 0x70}, {&(0x7f00000056c0)=""/19, 0x13}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000005a80), &(0x7f0000005ac0)=0x4) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000005b00)={0xff80, 0xce7, 0xaf3}) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000005b40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000060c0)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000006080)={&(0x7f0000006000)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x52}, 0x14) VM DIAGNOSIS: 18:39:45 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88801006b580 RCX=ffffffff817bd091 RDX=ffffed100200d6b1 RSI=0000000000000008 RDI=ffff88801006b580 RBP=dffffc0000000000 RSP=ffff8880380afa90 R8 =0000000000000000 R9 =ffff88801006b587 R10=ffffed100200d6b0 R11=0000000000000001 R12=ffff888071b05ff9 R13=ffff88801006b580 R14=ffffffffffffffff R15=0000000000000086 RIP=ffffffff817bd091 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556c42400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f66f7323350 CR3=0000000015e62000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 e2d4b6d77da4fca6 7f48cf713933f200 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 80f09f19808d26a3 00000000000aec68 YMM04=0000000000000000 0000000000000000 b198571852e96357 00000000000af320 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 c56093f8f2affd4e 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 2000000000000000 2000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056080f1d6648 CR3=0000000010044000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 000c016c6c6f502e 726567616e614d0c YMM02=0000000000000000 0000000000000000 ad164c5fc34bdbd0 e9d4e42b01553986 YMM03=0000000000000000 0000000000000000 4e8a6bc42bc573c5 9790fb1930ed5a4e YMM04=0000000000000000 0000000000000000 caf023487d9e72b7 7b0484b241d59690 YMM05=0000000000000000 0000000000000000 79efdb9f9374d90c a2c136e9831aafb5 YMM06=0000000000000000 0000000000000000 31a961a19448c92a fd06cfed1bc2146c YMM07=0000000000000000 0000000000000000 865e7b075717ba99 86a2e2c104936257 YMM08=0000000000000000 0000000000000000 8c7f719e0b502bc7 00ce2d177319f572 YMM09=0000000000000000 0000000000000000 f4b4ac3b4e9f6859 fd27d01f02c21a09 YMM10=0000000000000000 0000000000000000 b822d48cf414fdac 7fc2d49c5c0eab98 YMM11=0000000000000000 0000000000000000 5a6f7babb2ee3c0c b5aa92e086971822 YMM12=0000000000000000 0000000000000000 315be3b5a986201a 98fecbe3e1bbced4 YMM13=0000000000000000 0000000000000000 5595ccd63b97978b d2d61852943558bc YMM14=0000000000000000 0000000000000000 abac4c9016faa0e6 6d45b7371093f736 YMM15=0000000000000000 0000000000000000 f9f957b0df3da0f1 93608d0e997a19cf