Warning: Permanently added '[localhost]:33064' (ECDSA) to the list of known hosts. 2022/09/30 15:12:56 fuzzer started 2022/09/30 15:12:57 dialing manager at localhost:40535 syzkaller login: [ 37.899452] cgroup: Unknown subsys name 'net' [ 37.981094] cgroup: Unknown subsys name 'rlimit' 2022/09/30 15:13:12 syscalls: 201 2022/09/30 15:13:12 code coverage: enabled 2022/09/30 15:13:12 comparison tracing: enabled 2022/09/30 15:13:12 extra coverage: enabled 2022/09/30 15:13:12 setuid sandbox: enabled 2022/09/30 15:13:12 namespace sandbox: enabled 2022/09/30 15:13:12 Android sandbox: enabled 2022/09/30 15:13:12 fault injection: enabled 2022/09/30 15:13:12 leak checking: enabled 2022/09/30 15:13:12 net packet injection: enabled 2022/09/30 15:13:12 net device setup: enabled 2022/09/30 15:13:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 15:13:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 15:13:12 USB emulation: enabled 2022/09/30 15:13:12 hci packet injection: enabled 2022/09/30 15:13:12 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 15:13:12 802.15.4 emulation: enabled 2022/09/30 15:13:12 fetching corpus: 0, signal 0/0 (executing program) 2022/09/30 15:13:13 starting 8 fuzzer processes 15:13:13 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff7, 0x42200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x8000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x51, r0, 0x8000000) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x40000) read$usbmon(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = syz_open_dev$vcsu(&(0x7f0000001240), 0x800, 0x400141) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001280), 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x9a687) r4 = socket(0x15, 0x6, 0x81) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004080}, 0x50) syz_open_dev$usbmon(&(0x7f00000013c0), 0x5, 0x6081) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000001400)) syslog(0x4, &(0x7f0000001440)=""/75, 0x4b) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x20) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x11, 0xffffffffffffffff, 0x27df3d1d) 15:13:13 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x7, 0x9, 0x56, @private2, @mcast1, 0x80, 0x80, 0x80, 0x4}}) sendmsg$nl_xfrm(r3, &(0x7f0000001c40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)=@expire={0x130, 0x18, 0x4, 0x70bd2a, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@local, 0x4e22, 0x0, 0x4e22, 0x4, 0xa, 0x80, 0xa0, 0x2c, r9}, {@in=@broadcast, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, {0x6, 0xa46, 0x7ff, 0xcf21, 0x10bd, 0x40, 0x8, 0x8}, {0x6, 0x2, 0x4, 0x887}, {0x7e, 0x4, 0xc05}, 0x70bd2b, 0x3500, 0x2, 0x2, 0x0, 0x80}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x200}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40090}, 0x81) [ 53.619637] audit: type=1400 audit(1664550793.616:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:13:13 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r6 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x61, 0x32, 0x33, 0x64, 0x34, 0x36, 0x36, 0x35, 0x35, 0x63, 0x63, 0x65, 0x65, 0x63, 0x34, 0x36]}, &(0x7f0000000680)={0x0, "f723c61fb7d47cc32680b647a04f5949f5a09bfcef384131f6c02e849893d0bff576bb23ad6a63d3b56cb678ed0c18923e86e5cf84a17724f07621e9276996e9", 0x15}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, &(0x7f0000000700)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r7, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x0) r8 = eventfd(0x7) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880)=r8, 0x1) 15:13:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000005c0)=0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_open_dev$vcsu(&(0x7f0000000640), 0xb, 0x501000) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x22, 0x0, 0x4, 0x16, 0x4, "1f7cdde11b06f3f601a55eec9dabad5dc82c77d6427cc87d3e6f18a374666462fa759ddace4642be81cae82adf7d108d9dee60624b0c72c477cb092d5f6620f3", "c6366a16901d392d41b58199f85436a8bd345b1249f6b2d14a194885b5a09210aaf662f2d92c01d84f141b3cc77a2579271b5a4b0da5a7e691e0a1e2299e27e1", "17d204396f6dd48aeee2364293e4e5d6dd5558e4a7963b5585f04e3d162de11b", [0x0, 0x6a]}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000780)=r2, 0x1) 15:13:13 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800208}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x24004040) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) 15:13:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) r7 = fsmount(r6, 0x1, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9c1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x200040c5) 15:13:13 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffc00000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000c40)={{0x2, 0x100, 0xe347, 0x1, 0x8, 0x9}, 0x7c, [0x71e5, 0x401, 0x4, 0x20, 0x7f, 0xfff, 0x9, 0x1, 0x53, 0x100, 0x3, 0x4, 0x2, 0x9, 0x8, 0xfffffffd, 0x8, 0x9, 0x0, 0x3, 0x80000001, 0x4, 0x4, 0x3, 0x20, 0x2e, 0xffffffff, 0xfffffffc, 0x8, 0x7, 0xb3, 0x800000, 0x8, 0xdd, 0x2, 0x2, 0xab, 0x80000001, 0x100, 0x100, 0x1, 0x10001, 0x0, 0x5, 0x7, 0x81, 0x7fff, 0x3f, 0x7ff, 0x30c, 0x9, 0x8, 0x7e, 0x1, 0x5, 0x6, 0x9, 0x3, 0x0, 0x6, 0x133, 0x4, 0x1, 0x5, 0x7, 0xdd94, 0x9, 0x8, 0x7, 0xfffff800, 0x1, 0x8, 0x100, 0x1, 0x51d, 0x81, 0x1, 0x2, 0x8, 0x200, 0x9, 0xfffff001, 0x7, 0x40, 0x101, 0x6, 0x1, 0x20, 0x3ff, 0x9, 0x8, 0xa1, 0x4397, 0x0, 0x2, 0x7fffffff, 0x0, 0x3ff, 0x800, 0x80000000, 0xffffff80, 0x4, 0x0, 0x4, 0x400, 0x8000, 0x6, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0x800, 0xd3, 0x101, 0x401, 0x3, 0x4, 0x0, 0x5, 0x20, 0x401, 0xb4d, 0x21, 0x7, 0x5, 0x1, 0x3, 0x4, 0x1000, 0xfffffff9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x0, 0xc0f2, 0x6, 0x1ff, 0x200, 0x2, 0xfffffa21, 0x3ff, 0x2, 0x401, 0x6, 0x2, 0x1000, 0x0, 0x9, 0x9, 0xfffffff9, 0x8, 0x4, 0x9, 0x3f, 0x68000000, 0x2, 0x8, 0x35, 0x80000001, 0x0, 0x422, 0xdb2, 0x6, 0x8, 0x7fffffff, 0xffffff20, 0x196, 0x3, 0x6, 0x83, 0x3, 0x8, 0xb3c, 0x3, 0x0, 0x8, 0x7, 0xfffffffc, 0xe3ac, 0x0, 0x7, 0x3, 0x20, 0x9, 0x101, 0xfffffffa, 0x17d1, 0xfffffe00, 0x1, 0x3, 0x0, 0x7, 0xffffffff, 0x1, 0x10001, 0x20, 0x8, 0x92, 0x7, 0x2, 0x2, 0xdf5, 0x4, 0x6, 0x1, 0x19, 0xc5, 0x7ff, 0x0, 0x1, 0x10001, 0x6, 0x1b, 0x8001, 0x3, 0x2, 0x6, 0x1000, 0xae, 0x10001, 0xff, 0x0, 0x2, 0x81, 0x4, 0x85a, 0x0, 0x1f, 0x1, 0xffff9c0e, 0x7fff, 0x10001, 0x9, 0x40, 0x400, 0xfffffff9, 0x3, 0x6, 0x2, 0x8f, 0x8, 0x5, 0x9, 0x33f3, 0x9576, 0x7, 0x2, 0x6, 0x3ff, 0x8, 0x5, 0x7, 0x8, 0x1, 0x8, 0x6, 0x100, 0x8000, 0x80000000, 0x3, 0x332, 0x4, 0x7, 0x7, 0x3, 0xfffffffe, 0x800, 0x7, 0x120, 0x6a2, 0x218, 0x1, 0x4, 0x0, 0x10001, 0x7, 0x6, 0x100, 0x3, 0x8001, 0x100, 0x6a9d, 0x7c, 0x7fffffff, 0x0, 0x2, 0xf34, 0x80, 0x7ff, 0x2, 0x1, 0x20, 0x101, 0x8, 0xfff, 0x2, 0xfffffffe, 0x7, 0x1, 0xa72e, 0x6, 0x100, 0xff, 0x10000, 0x3, 0x3ff, 0x401, 0x0, 0x3, 0x5, 0x5, 0x400, 0x3c358764, 0x7, 0x9, 0x3, 0x9, 0x5, 0x1, 0x9a, 0x0, 0x7, 0x80000001, 0xa51, 0x9, 0x9d2, 0x9, 0x8, 0x1000, 0x8, 0xd83, 0x8, 0x40, 0x4, 0x1000, 0x5, 0x80000000, 0x76319d2b, 0x3, 0x5, 0x1, 0x7fff, 0x0, 0xffffffff, 0xffffff8d, 0x0, 0x5, 0x4, 0x828, 0x6, 0x8, 0x800, 0x8, 0x10000, 0x5, 0x6, 0xa3d, 0x1, 0x0, 0x3, 0x100, 0x5, 0x2d7, 0xd36, 0x7, 0x3, 0xffffffe1, 0x4, 0x200, 0x3, 0x3, 0x8, 0x200000, 0xfff, 0x7, 0x1, 0x6, 0x9, 0x3c9, 0xfff, 0x1, 0x3f, 0xa7, 0xe6c4, 0x8, 0x3, 0x1, 0x2, 0xa5da, 0x2, 0x40, 0x9, 0x1, 0x10001, 0xfffffff7, 0x2, 0x6, 0x9, 0x0, 0x5, 0x8, 0x7b708108, 0x0, 0x8000, 0xf6, 0x29, 0x81, 0x9, 0xb9d236b, 0xffffff2f, 0x10001, 0x66, 0x4bf, 0x9, 0x100, 0x4d3, 0xfffffffd, 0x2, 0x8, 0x329, 0x0, 0x0, 0xffd, 0x2, 0x9, 0xffffffa0, 0x12000, 0x6, 0x200, 0x1, 0x6, 0x8, 0x7, 0x0, 0x4, 0x8001, 0x5, 0x4, 0xfffffff7, 0x7ff, 0x39f, 0x3, 0x9, 0x9, 0x2, 0x100, 0x8, 0x5aca, 0x6fac, 0x10000, 0x5, 0x5ec, 0x0, 0x26, 0x2f9, 0x1f, 0x3, 0x8, 0x80000001, 0x1, 0x2, 0x400, 0x6, 0x9, 0x6, 0x2, 0x9b9, 0x400, 0x5, 0x7f, 0x6, 0x2dc80d4d, 0x200, 0x8, 0xa12e, 0x20, 0xfffffffd, 0x3ff, 0x800, 0x800, 0x4, 0x8001, 0x58, 0x0, 0x7fffffff, 0x1, 0x1, 0x81, 0x0, 0x1, 0x2, 0x5, 0xfffff7f9, 0x0, 0x1, 0x101, 0x1000, 0x8, 0x1, 0x6, 0x5, 0x1f, 0x5, 0x8, 0x83b, 0x5, 0x4c, 0x8, 0x4, 0x80000001, 0x7fffffff, 0xcd, 0x8000, 0x9b13, 0x9, 0x800, 0x7, 0x6, 0x81, 0x9b, 0x1, 0x3, 0x0, 0x4, 0x200, 0x9, 0x5, 0x10000, 0x50ea, 0xfff, 0x80000000, 0xfffffff8, 0xd181, 0x0, 0x1, 0x7ec, 0x4, 0x10000, 0x2, 0x7, 0x0, 0x1000000, 0x1, 0x6, 0xff, 0x5, 0x8, 0x4, 0x1, 0x5, 0x0, 0x7, 0xacaa, 0x3f, 0x8, 0x5, 0x4, 0x0, 0x9, 0x6, 0x6, 0x8, 0x80000000, 0xfffffa50, 0xffff0000, 0x0, 0xffff, 0x4, 0x1, 0x8, 0x9, 0x5, 0x1, 0x7ff, 0x7f, 0x2, 0x1000, 0x0, 0x3, 0x7ff, 0x8, 0x1, 0x13, 0x5, 0x1, 0x2, 0x0, 0x1, 0xdb6, 0x1, 0x8, 0x0, 0x6, 0xfc, 0x7, 0x6bc, 0x0, 0x401, 0x821, 0x8, 0x2, 0x6, 0x1ff, 0x100, 0x3, 0x1, 0x3, 0x800, 0x1, 0x50, 0x10, 0x3, 0xffff, 0x3, 0x8, 0x6, 0x81, 0x4, 0x5, 0x1, 0x31e1, 0x2, 0x3, 0xfffeffff, 0x1, 0x8, 0x4, 0x2, 0x20, 0x9, 0xe0a, 0x8, 0x5, 0xfffffc01, 0x1, 0x9, 0xffff3a16, 0x5, 0x9, 0xff, 0x8, 0x4, 0x80000000, 0x100, 0x7, 0x160f, 0xa34, 0x7, 0x1, 0x4a, 0x4, 0xd32b, 0x9, 0x0, 0x2c, 0x8, 0x3a, 0x2, 0x0, 0x10000, 0x34c64921, 0x3, 0x6, 0x6, 0x7ff, 0x5c42, 0x7, 0x5, 0xfffffff8, 0x1, 0x0, 0x1, 0x6, 0x5, 0x7fffffff, 0xebd, 0x6, 0xfffffff8, 0x3, 0x4, 0x1e, 0x51, 0x8001, 0x8, 0x6, 0x1, 0x3, 0x20, 0x7fff, 0x10001, 0x550, 0x9, 0x200, 0x8001, 0x6, 0x9, 0x7, 0x8000, 0x401, 0x81, 0x3ff, 0x5, 0x732, 0x8, 0xc6aa, 0x2, 0x4, 0x0, 0x6, 0x3, 0x68, 0x93, 0x0, 0x5, 0x7, 0x8001, 0xfffffffe, 0x6, 0x401, 0x6, 0x0, 0x8, 0x1e5, 0xfff, 0x9, 0x7fff, 0x6, 0x7, 0x3, 0x101, 0x6, 0x5, 0x0, 0x6, 0x101, 0x4, 0x8, 0x9, 0x8, 0x3, 0xffffffe5, 0x2, 0x6, 0x8, 0x9, 0x8, 0x7fffffff, 0x1f, 0x400, 0x74174dfd, 0x4, 0xe5, 0x9, 0x7, 0x6, 0x78, 0x2, 0x1, 0x7, 0xfffff800, 0x7ff, 0xffff, 0xf560, 0x3, 0x4, 0x1df, 0x0, 0x5, 0x3, 0x68, 0x28000000, 0x0, 0x3ff, 0x100, 0x3, 0x1, 0xe1, 0x1, 0x6, 0x800, 0x9, 0x5, 0x1, 0x7, 0x6, 0x5, 0x3, 0x80000001, 0xffffff01, 0x0, 0x0, 0x680, 0x3ff, 0x8, 0x2, 0x80000001, 0x2, 0x3, 0x6, 0x81, 0x2, 0x3, 0x4, 0x8, 0xf9, 0x2, 0x5, 0x8, 0xffffffe0, 0xffffffff, 0x8, 0x7, 0x2, 0xffffff11, 0x101, 0x7, 0x5, 0xfffffff7, 0x1000, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0x401, 0x524, 0x5, 0x5, 0xc9f8, 0x6, 0x1f, 0x4, 0x9, 0x0, 0x400, 0x8295, 0x80000000, 0x1, 0x9a9, 0x8, 0x2, 0x0, 0x7ff, 0x200, 0x2, 0xfb, 0x0, 0x3, 0x6, 0x75a, 0xbcf9, 0x9, 0x7, 0x4, 0x80, 0x3, 0x3, 0x6, 0xb99, 0x1, 0x2, 0x1, 0xfffffffd, 0x4, 0x8000, 0x9, 0x5, 0x4, 0x3, 0x7, 0x4, 0x3, 0xd45, 0x2, 0x7a5, 0x6, 0x101, 0xf9c9, 0x7fffffff, 0x1bc, 0xf3, 0x1, 0x4, 0x81, 0x2, 0x80000001, 0x7, 0xfffffffc, 0x40, 0x4, 0x7, 0x1, 0x350ba536, 0x7, 0xffff, 0x10000, 0x2, 0x3, 0xc10, 0x401, 0x10000, 0xfffffffe, 0x6, 0x0, 0xcef, 0x4, 0x2, 0x80000000, 0x8001, 0x4db, 0x7, 0x10000, 0x4, 0x8, 0x9, 0x3, 0x8, 0x58, 0x10000, 0xffffffff, 0x43, 0x81, 0x0, 0xf994, 0x7, 0x10001, 0x90, 0x7c, 0x2, 0xff7, 0x7f, 0x10, 0x6, 0x7ff, 0x5, 0x3ff, 0x101, 0x1, 0x0, 0x3, 0x84, 0x20, 0x5, 0x4, 0x588, 0x200, 0xd97, 0x2, 0x7, 0x7, 0x4c45d7f0, 0x1000, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0x5, 0x6, 0x100, 0x4, 0x1, 0x6740165c, 0xfff, 0x7, 0x6, 0x9, 0x6, 0x4, 0x7, 0x5, 0xca9e, 0x100, 0x8001, 0xffffffff, 0x10001, 0x6, 0x80000001, 0x1ff, 0x7fff, 0x8, 0x3348000, 0xfffffffd, 0xfffffdc1, 0x401, 0x1, 0xfffffffe, 0x4, 0x1f, 0x1, 0x2, 0x20, 0x7, 0x1, 0x3, 0x6, 0xfffffff7, 0xf36, 0x2, 0xf0d, 0x6, 0x1000, 0x2, 0x7, 0x2f5, 0x31, 0x6, 0x85f, 0x101, 0x7, 0x0, 0x10000, 0x7f, 0x9, 0x3, 0x1, 0x8, 0xfffffffb, 0x20, 0x1, 0xc2000000]}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x32}]}, 0x2c}}, 0x40400c0) 15:13:13 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) r1 = fsopen(&(0x7f0000000140)='selinuxfs\x00', 0x1) r2 = fsmount(r1, 0x1, 0xea) prctl$PR_GET_FP_MODE(0x2e) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x713fbc2c582c698c}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40040c0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x3a5, 0x6, 0x20, 0xd, "590067b76a5d0aad6d69a94ec85447317931605f55e68ec72ba673ba3a064f78c2f3e6a933905d468445bfafc32cb3ee515d8187951dc1290dcf541255cae5c3", "dfcaff015493391fd66d8a08546acc504fdbc002db67e01733f923e4f1b0dfc4", [0xb4, 0x3ff]}) eventfd(0xcf10) r4 = syz_open_dev$vcsu(&(0x7f0000000380), 0xff, 0x101) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000003c0)='/dev/snd/timer\x00', &(0x7f0000000400)='./file0\x00', r3) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x4800, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) r6 = socket(0x3f, 0x6, 0x6119) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x17e, 0x3}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00'}) [ 54.886222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.887815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.889160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.891681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.893470] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.895070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.899917] Bluetooth: hci0: HCI_REQ-0x0c1a [ 54.967384] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.969350] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.972058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.973263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.976911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.978575] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.979939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.983234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.985125] Bluetooth: hci3: HCI_REQ-0x0c1a [ 55.019400] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 55.021131] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 55.022607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 55.025622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 55.027375] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 55.029008] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 55.045839] Bluetooth: hci6: HCI_REQ-0x0c1a [ 55.070195] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 55.071834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.075949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.081027] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 55.095415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.100425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 55.103172] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.105064] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 55.105379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.111146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 55.117620] Bluetooth: hci1: HCI_REQ-0x0c1a [ 55.117636] Bluetooth: hci5: HCI_REQ-0x0c1a [ 55.144354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.146774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 55.154919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.156186] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 55.157859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.157986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 55.163372] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.164877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 55.166430] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.168683] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 55.182121] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 55.182224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.197113] Bluetooth: hci7: HCI_REQ-0x0c1a [ 55.201316] Bluetooth: hci4: HCI_REQ-0x0c1a [ 56.913292] Bluetooth: hci0: command 0x0409 tx timeout [ 56.975856] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 57.039823] Bluetooth: hci3: command 0x0409 tx timeout [ 57.104902] Bluetooth: hci6: command 0x0409 tx timeout [ 57.168788] Bluetooth: hci5: command 0x0409 tx timeout [ 57.168810] Bluetooth: hci1: command 0x0409 tx timeout [ 57.232856] Bluetooth: hci7: command 0x0409 tx timeout [ 57.295820] Bluetooth: hci4: command 0x0409 tx timeout [ 58.960865] Bluetooth: hci0: command 0x041b tx timeout [ 59.087818] Bluetooth: hci3: command 0x041b tx timeout [ 59.151784] Bluetooth: hci6: command 0x041b tx timeout [ 59.215813] Bluetooth: hci1: command 0x041b tx timeout [ 59.215935] Bluetooth: hci5: command 0x041b tx timeout [ 59.280743] Bluetooth: hci7: command 0x041b tx timeout [ 59.343933] Bluetooth: hci4: command 0x041b tx timeout [ 61.007793] Bluetooth: hci0: command 0x040f tx timeout [ 61.135757] Bluetooth: hci3: command 0x040f tx timeout [ 61.199757] Bluetooth: hci6: command 0x040f tx timeout [ 61.263784] Bluetooth: hci1: command 0x040f tx timeout [ 61.263870] Bluetooth: hci5: command 0x040f tx timeout [ 61.327862] Bluetooth: hci7: command 0x040f tx timeout [ 61.392124] Bluetooth: hci4: command 0x040f tx timeout [ 62.031786] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 63.055766] Bluetooth: hci0: command 0x0419 tx timeout [ 63.183778] Bluetooth: hci3: command 0x0419 tx timeout [ 63.247892] Bluetooth: hci6: command 0x0419 tx timeout [ 63.311882] Bluetooth: hci1: command 0x0419 tx timeout [ 63.311939] Bluetooth: hci5: command 0x0419 tx timeout [ 63.376389] Bluetooth: hci7: command 0x0419 tx timeout [ 63.439791] Bluetooth: hci4: command 0x0419 tx timeout [ 64.667223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.671122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.671946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.674229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.675346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.676069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.702471] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.768780] Bluetooth: hci2: command 0x0409 tx timeout [ 68.815762] Bluetooth: hci2: command 0x041b tx timeout [ 70.863876] Bluetooth: hci2: command 0x040f tx timeout [ 72.911781] Bluetooth: hci2: command 0x0419 tx timeout 15:14:06 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) r1 = fsopen(&(0x7f0000000140)='selinuxfs\x00', 0x1) r2 = fsmount(r1, 0x1, 0xea) prctl$PR_GET_FP_MODE(0x2e) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x713fbc2c582c698c}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40040c0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x3a5, 0x6, 0x20, 0xd, "590067b76a5d0aad6d69a94ec85447317931605f55e68ec72ba673ba3a064f78c2f3e6a933905d468445bfafc32cb3ee515d8187951dc1290dcf541255cae5c3", "dfcaff015493391fd66d8a08546acc504fdbc002db67e01733f923e4f1b0dfc4", [0xb4, 0x3ff]}) eventfd(0xcf10) r4 = syz_open_dev$vcsu(&(0x7f0000000380), 0xff, 0x101) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000003c0)='/dev/snd/timer\x00', &(0x7f0000000400)='./file0\x00', r3) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x4800, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) r6 = socket(0x3f, 0x6, 0x6119) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x17e, 0x3}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00'}) 15:14:06 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) r1 = fsopen(&(0x7f0000000140)='selinuxfs\x00', 0x1) r2 = fsmount(r1, 0x1, 0xea) prctl$PR_GET_FP_MODE(0x2e) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x713fbc2c582c698c}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40040c0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x3a5, 0x6, 0x20, 0xd, "590067b76a5d0aad6d69a94ec85447317931605f55e68ec72ba673ba3a064f78c2f3e6a933905d468445bfafc32cb3ee515d8187951dc1290dcf541255cae5c3", "dfcaff015493391fd66d8a08546acc504fdbc002db67e01733f923e4f1b0dfc4", [0xb4, 0x3ff]}) eventfd(0xcf10) r4 = syz_open_dev$vcsu(&(0x7f0000000380), 0xff, 0x101) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000003c0)='/dev/snd/timer\x00', &(0x7f0000000400)='./file0\x00', r3) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x4800, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) r6 = socket(0x3f, 0x6, 0x6119) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x17e, 0x3}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00'}) 15:14:06 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) r1 = fsopen(&(0x7f0000000140)='selinuxfs\x00', 0x1) r2 = fsmount(r1, 0x1, 0xea) prctl$PR_GET_FP_MODE(0x2e) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x713fbc2c582c698c}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40040c0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x3a5, 0x6, 0x20, 0xd, "590067b76a5d0aad6d69a94ec85447317931605f55e68ec72ba673ba3a064f78c2f3e6a933905d468445bfafc32cb3ee515d8187951dc1290dcf541255cae5c3", "dfcaff015493391fd66d8a08546acc504fdbc002db67e01733f923e4f1b0dfc4", [0xb4, 0x3ff]}) eventfd(0xcf10) r4 = syz_open_dev$vcsu(&(0x7f0000000380), 0xff, 0x101) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000003c0)='/dev/snd/timer\x00', &(0x7f0000000400)='./file0\x00', r3) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x4800, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) r6 = socket(0x3f, 0x6, 0x6119) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x17e, 0x3}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00'}) 15:14:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) r7 = fsmount(r6, 0x1, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9c1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x200040c5) 15:14:06 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) r7 = fsmount(r6, 0x1, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9c1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x200040c5) 15:14:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) r7 = fsmount(r6, 0x1, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9c1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x200040c5) 15:14:06 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) r7 = fsmount(r6, 0x1, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9c1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x200040c5) 15:14:07 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) r7 = fsmount(r6, 0x1, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9c1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x200040c5) 15:14:27 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x7, 0x9, 0x56, @private2, @mcast1, 0x80, 0x80, 0x80, 0x4}}) sendmsg$nl_xfrm(r3, &(0x7f0000001c40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)=@expire={0x130, 0x18, 0x4, 0x70bd2a, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@local, 0x4e22, 0x0, 0x4e22, 0x4, 0xa, 0x80, 0xa0, 0x2c, r9}, {@in=@broadcast, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, {0x6, 0xa46, 0x7ff, 0xcf21, 0x10bd, 0x40, 0x8, 0x8}, {0x6, 0x2, 0x4, 0x887}, {0x7e, 0x4, 0xc05}, 0x70bd2b, 0x3500, 0x2, 0x2, 0x0, 0x80}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x200}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40090}, 0x81) 15:14:27 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff7, 0x42200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x8000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x51, r0, 0x8000000) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x40000) read$usbmon(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = syz_open_dev$vcsu(&(0x7f0000001240), 0x800, 0x400141) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001280), 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x9a687) r4 = socket(0x15, 0x6, 0x81) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004080}, 0x50) syz_open_dev$usbmon(&(0x7f00000013c0), 0x5, 0x6081) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000001400)) syslog(0x4, &(0x7f0000001440)=""/75, 0x4b) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x20) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x11, 0xffffffffffffffff, 0x27df3d1d) 15:14:27 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffc00000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000c40)={{0x2, 0x100, 0xe347, 0x1, 0x8, 0x9}, 0x7c, [0x71e5, 0x401, 0x4, 0x20, 0x7f, 0xfff, 0x9, 0x1, 0x53, 0x100, 0x3, 0x4, 0x2, 0x9, 0x8, 0xfffffffd, 0x8, 0x9, 0x0, 0x3, 0x80000001, 0x4, 0x4, 0x3, 0x20, 0x2e, 0xffffffff, 0xfffffffc, 0x8, 0x7, 0xb3, 0x800000, 0x8, 0xdd, 0x2, 0x2, 0xab, 0x80000001, 0x100, 0x100, 0x1, 0x10001, 0x0, 0x5, 0x7, 0x81, 0x7fff, 0x3f, 0x7ff, 0x30c, 0x9, 0x8, 0x7e, 0x1, 0x5, 0x6, 0x9, 0x3, 0x0, 0x6, 0x133, 0x4, 0x1, 0x5, 0x7, 0xdd94, 0x9, 0x8, 0x7, 0xfffff800, 0x1, 0x8, 0x100, 0x1, 0x51d, 0x81, 0x1, 0x2, 0x8, 0x200, 0x9, 0xfffff001, 0x7, 0x40, 0x101, 0x6, 0x1, 0x20, 0x3ff, 0x9, 0x8, 0xa1, 0x4397, 0x0, 0x2, 0x7fffffff, 0x0, 0x3ff, 0x800, 0x80000000, 0xffffff80, 0x4, 0x0, 0x4, 0x400, 0x8000, 0x6, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0x800, 0xd3, 0x101, 0x401, 0x3, 0x4, 0x0, 0x5, 0x20, 0x401, 0xb4d, 0x21, 0x7, 0x5, 0x1, 0x3, 0x4, 0x1000, 0xfffffff9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x0, 0xc0f2, 0x6, 0x1ff, 0x200, 0x2, 0xfffffa21, 0x3ff, 0x2, 0x401, 0x6, 0x2, 0x1000, 0x0, 0x9, 0x9, 0xfffffff9, 0x8, 0x4, 0x9, 0x3f, 0x68000000, 0x2, 0x8, 0x35, 0x80000001, 0x0, 0x422, 0xdb2, 0x6, 0x8, 0x7fffffff, 0xffffff20, 0x196, 0x3, 0x6, 0x83, 0x3, 0x8, 0xb3c, 0x3, 0x0, 0x8, 0x7, 0xfffffffc, 0xe3ac, 0x0, 0x7, 0x3, 0x20, 0x9, 0x101, 0xfffffffa, 0x17d1, 0xfffffe00, 0x1, 0x3, 0x0, 0x7, 0xffffffff, 0x1, 0x10001, 0x20, 0x8, 0x92, 0x7, 0x2, 0x2, 0xdf5, 0x4, 0x6, 0x1, 0x19, 0xc5, 0x7ff, 0x0, 0x1, 0x10001, 0x6, 0x1b, 0x8001, 0x3, 0x2, 0x6, 0x1000, 0xae, 0x10001, 0xff, 0x0, 0x2, 0x81, 0x4, 0x85a, 0x0, 0x1f, 0x1, 0xffff9c0e, 0x7fff, 0x10001, 0x9, 0x40, 0x400, 0xfffffff9, 0x3, 0x6, 0x2, 0x8f, 0x8, 0x5, 0x9, 0x33f3, 0x9576, 0x7, 0x2, 0x6, 0x3ff, 0x8, 0x5, 0x7, 0x8, 0x1, 0x8, 0x6, 0x100, 0x8000, 0x80000000, 0x3, 0x332, 0x4, 0x7, 0x7, 0x3, 0xfffffffe, 0x800, 0x7, 0x120, 0x6a2, 0x218, 0x1, 0x4, 0x0, 0x10001, 0x7, 0x6, 0x100, 0x3, 0x8001, 0x100, 0x6a9d, 0x7c, 0x7fffffff, 0x0, 0x2, 0xf34, 0x80, 0x7ff, 0x2, 0x1, 0x20, 0x101, 0x8, 0xfff, 0x2, 0xfffffffe, 0x7, 0x1, 0xa72e, 0x6, 0x100, 0xff, 0x10000, 0x3, 0x3ff, 0x401, 0x0, 0x3, 0x5, 0x5, 0x400, 0x3c358764, 0x7, 0x9, 0x3, 0x9, 0x5, 0x1, 0x9a, 0x0, 0x7, 0x80000001, 0xa51, 0x9, 0x9d2, 0x9, 0x8, 0x1000, 0x8, 0xd83, 0x8, 0x40, 0x4, 0x1000, 0x5, 0x80000000, 0x76319d2b, 0x3, 0x5, 0x1, 0x7fff, 0x0, 0xffffffff, 0xffffff8d, 0x0, 0x5, 0x4, 0x828, 0x6, 0x8, 0x800, 0x8, 0x10000, 0x5, 0x6, 0xa3d, 0x1, 0x0, 0x3, 0x100, 0x5, 0x2d7, 0xd36, 0x7, 0x3, 0xffffffe1, 0x4, 0x200, 0x3, 0x3, 0x8, 0x200000, 0xfff, 0x7, 0x1, 0x6, 0x9, 0x3c9, 0xfff, 0x1, 0x3f, 0xa7, 0xe6c4, 0x8, 0x3, 0x1, 0x2, 0xa5da, 0x2, 0x40, 0x9, 0x1, 0x10001, 0xfffffff7, 0x2, 0x6, 0x9, 0x0, 0x5, 0x8, 0x7b708108, 0x0, 0x8000, 0xf6, 0x29, 0x81, 0x9, 0xb9d236b, 0xffffff2f, 0x10001, 0x66, 0x4bf, 0x9, 0x100, 0x4d3, 0xfffffffd, 0x2, 0x8, 0x329, 0x0, 0x0, 0xffd, 0x2, 0x9, 0xffffffa0, 0x12000, 0x6, 0x200, 0x1, 0x6, 0x8, 0x7, 0x0, 0x4, 0x8001, 0x5, 0x4, 0xfffffff7, 0x7ff, 0x39f, 0x3, 0x9, 0x9, 0x2, 0x100, 0x8, 0x5aca, 0x6fac, 0x10000, 0x5, 0x5ec, 0x0, 0x26, 0x2f9, 0x1f, 0x3, 0x8, 0x80000001, 0x1, 0x2, 0x400, 0x6, 0x9, 0x6, 0x2, 0x9b9, 0x400, 0x5, 0x7f, 0x6, 0x2dc80d4d, 0x200, 0x8, 0xa12e, 0x20, 0xfffffffd, 0x3ff, 0x800, 0x800, 0x4, 0x8001, 0x58, 0x0, 0x7fffffff, 0x1, 0x1, 0x81, 0x0, 0x1, 0x2, 0x5, 0xfffff7f9, 0x0, 0x1, 0x101, 0x1000, 0x8, 0x1, 0x6, 0x5, 0x1f, 0x5, 0x8, 0x83b, 0x5, 0x4c, 0x8, 0x4, 0x80000001, 0x7fffffff, 0xcd, 0x8000, 0x9b13, 0x9, 0x800, 0x7, 0x6, 0x81, 0x9b, 0x1, 0x3, 0x0, 0x4, 0x200, 0x9, 0x5, 0x10000, 0x50ea, 0xfff, 0x80000000, 0xfffffff8, 0xd181, 0x0, 0x1, 0x7ec, 0x4, 0x10000, 0x2, 0x7, 0x0, 0x1000000, 0x1, 0x6, 0xff, 0x5, 0x8, 0x4, 0x1, 0x5, 0x0, 0x7, 0xacaa, 0x3f, 0x8, 0x5, 0x4, 0x0, 0x9, 0x6, 0x6, 0x8, 0x80000000, 0xfffffa50, 0xffff0000, 0x0, 0xffff, 0x4, 0x1, 0x8, 0x9, 0x5, 0x1, 0x7ff, 0x7f, 0x2, 0x1000, 0x0, 0x3, 0x7ff, 0x8, 0x1, 0x13, 0x5, 0x1, 0x2, 0x0, 0x1, 0xdb6, 0x1, 0x8, 0x0, 0x6, 0xfc, 0x7, 0x6bc, 0x0, 0x401, 0x821, 0x8, 0x2, 0x6, 0x1ff, 0x100, 0x3, 0x1, 0x3, 0x800, 0x1, 0x50, 0x10, 0x3, 0xffff, 0x3, 0x8, 0x6, 0x81, 0x4, 0x5, 0x1, 0x31e1, 0x2, 0x3, 0xfffeffff, 0x1, 0x8, 0x4, 0x2, 0x20, 0x9, 0xe0a, 0x8, 0x5, 0xfffffc01, 0x1, 0x9, 0xffff3a16, 0x5, 0x9, 0xff, 0x8, 0x4, 0x80000000, 0x100, 0x7, 0x160f, 0xa34, 0x7, 0x1, 0x4a, 0x4, 0xd32b, 0x9, 0x0, 0x2c, 0x8, 0x3a, 0x2, 0x0, 0x10000, 0x34c64921, 0x3, 0x6, 0x6, 0x7ff, 0x5c42, 0x7, 0x5, 0xfffffff8, 0x1, 0x0, 0x1, 0x6, 0x5, 0x7fffffff, 0xebd, 0x6, 0xfffffff8, 0x3, 0x4, 0x1e, 0x51, 0x8001, 0x8, 0x6, 0x1, 0x3, 0x20, 0x7fff, 0x10001, 0x550, 0x9, 0x200, 0x8001, 0x6, 0x9, 0x7, 0x8000, 0x401, 0x81, 0x3ff, 0x5, 0x732, 0x8, 0xc6aa, 0x2, 0x4, 0x0, 0x6, 0x3, 0x68, 0x93, 0x0, 0x5, 0x7, 0x8001, 0xfffffffe, 0x6, 0x401, 0x6, 0x0, 0x8, 0x1e5, 0xfff, 0x9, 0x7fff, 0x6, 0x7, 0x3, 0x101, 0x6, 0x5, 0x0, 0x6, 0x101, 0x4, 0x8, 0x9, 0x8, 0x3, 0xffffffe5, 0x2, 0x6, 0x8, 0x9, 0x8, 0x7fffffff, 0x1f, 0x400, 0x74174dfd, 0x4, 0xe5, 0x9, 0x7, 0x6, 0x78, 0x2, 0x1, 0x7, 0xfffff800, 0x7ff, 0xffff, 0xf560, 0x3, 0x4, 0x1df, 0x0, 0x5, 0x3, 0x68, 0x28000000, 0x0, 0x3ff, 0x100, 0x3, 0x1, 0xe1, 0x1, 0x6, 0x800, 0x9, 0x5, 0x1, 0x7, 0x6, 0x5, 0x3, 0x80000001, 0xffffff01, 0x0, 0x0, 0x680, 0x3ff, 0x8, 0x2, 0x80000001, 0x2, 0x3, 0x6, 0x81, 0x2, 0x3, 0x4, 0x8, 0xf9, 0x2, 0x5, 0x8, 0xffffffe0, 0xffffffff, 0x8, 0x7, 0x2, 0xffffff11, 0x101, 0x7, 0x5, 0xfffffff7, 0x1000, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0x401, 0x524, 0x5, 0x5, 0xc9f8, 0x6, 0x1f, 0x4, 0x9, 0x0, 0x400, 0x8295, 0x80000000, 0x1, 0x9a9, 0x8, 0x2, 0x0, 0x7ff, 0x200, 0x2, 0xfb, 0x0, 0x3, 0x6, 0x75a, 0xbcf9, 0x9, 0x7, 0x4, 0x80, 0x3, 0x3, 0x6, 0xb99, 0x1, 0x2, 0x1, 0xfffffffd, 0x4, 0x8000, 0x9, 0x5, 0x4, 0x3, 0x7, 0x4, 0x3, 0xd45, 0x2, 0x7a5, 0x6, 0x101, 0xf9c9, 0x7fffffff, 0x1bc, 0xf3, 0x1, 0x4, 0x81, 0x2, 0x80000001, 0x7, 0xfffffffc, 0x40, 0x4, 0x7, 0x1, 0x350ba536, 0x7, 0xffff, 0x10000, 0x2, 0x3, 0xc10, 0x401, 0x10000, 0xfffffffe, 0x6, 0x0, 0xcef, 0x4, 0x2, 0x80000000, 0x8001, 0x4db, 0x7, 0x10000, 0x4, 0x8, 0x9, 0x3, 0x8, 0x58, 0x10000, 0xffffffff, 0x43, 0x81, 0x0, 0xf994, 0x7, 0x10001, 0x90, 0x7c, 0x2, 0xff7, 0x7f, 0x10, 0x6, 0x7ff, 0x5, 0x3ff, 0x101, 0x1, 0x0, 0x3, 0x84, 0x20, 0x5, 0x4, 0x588, 0x200, 0xd97, 0x2, 0x7, 0x7, 0x4c45d7f0, 0x1000, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0x5, 0x6, 0x100, 0x4, 0x1, 0x6740165c, 0xfff, 0x7, 0x6, 0x9, 0x6, 0x4, 0x7, 0x5, 0xca9e, 0x100, 0x8001, 0xffffffff, 0x10001, 0x6, 0x80000001, 0x1ff, 0x7fff, 0x8, 0x3348000, 0xfffffffd, 0xfffffdc1, 0x401, 0x1, 0xfffffffe, 0x4, 0x1f, 0x1, 0x2, 0x20, 0x7, 0x1, 0x3, 0x6, 0xfffffff7, 0xf36, 0x2, 0xf0d, 0x6, 0x1000, 0x2, 0x7, 0x2f5, 0x31, 0x6, 0x85f, 0x101, 0x7, 0x0, 0x10000, 0x7f, 0x9, 0x3, 0x1, 0x8, 0xfffffffb, 0x20, 0x1, 0xc2000000]}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x32}]}, 0x2c}}, 0x40400c0) 15:14:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000005c0)=0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_open_dev$vcsu(&(0x7f0000000640), 0xb, 0x501000) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x22, 0x0, 0x4, 0x16, 0x4, "1f7cdde11b06f3f601a55eec9dabad5dc82c77d6427cc87d3e6f18a374666462fa759ddace4642be81cae82adf7d108d9dee60624b0c72c477cb092d5f6620f3", "c6366a16901d392d41b58199f85436a8bd345b1249f6b2d14a194885b5a09210aaf662f2d92c01d84f141b3cc77a2579271b5a4b0da5a7e691e0a1e2299e27e1", "17d204396f6dd48aeee2364293e4e5d6dd5558e4a7963b5585f04e3d162de11b", [0x0, 0x6a]}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000780)=r2, 0x1) 15:14:27 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) fsmount(r6, 0x1, 0x80) 15:14:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) r7 = fsmount(r6, 0x1, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9c1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x200040c5) 15:14:27 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800208}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x24004040) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) 15:14:27 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r6 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x61, 0x32, 0x33, 0x64, 0x34, 0x36, 0x36, 0x35, 0x35, 0x63, 0x63, 0x65, 0x65, 0x63, 0x34, 0x36]}, &(0x7f0000000680)={0x0, "f723c61fb7d47cc32680b647a04f5949f5a09bfcef384131f6c02e849893d0bff576bb23ad6a63d3b56cb678ed0c18923e86e5cf84a17724f07621e9276996e9", 0x15}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, &(0x7f0000000700)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r7, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x0) r8 = eventfd(0x7) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880)=r8, 0x1) 15:14:39 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff7, 0x42200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x8000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x51, r0, 0x8000000) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x40000) read$usbmon(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = syz_open_dev$vcsu(&(0x7f0000001240), 0x800, 0x400141) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001280), 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x9a687) r4 = socket(0x15, 0x6, 0x81) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004080}, 0x50) syz_open_dev$usbmon(&(0x7f00000013c0), 0x5, 0x6081) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000001400)) syslog(0x4, &(0x7f0000001440)=""/75, 0x4b) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x20) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x11, 0xffffffffffffffff, 0x27df3d1d) 15:14:39 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffc00000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000c40)={{0x2, 0x100, 0xe347, 0x1, 0x8, 0x9}, 0x7c, [0x71e5, 0x401, 0x4, 0x20, 0x7f, 0xfff, 0x9, 0x1, 0x53, 0x100, 0x3, 0x4, 0x2, 0x9, 0x8, 0xfffffffd, 0x8, 0x9, 0x0, 0x3, 0x80000001, 0x4, 0x4, 0x3, 0x20, 0x2e, 0xffffffff, 0xfffffffc, 0x8, 0x7, 0xb3, 0x800000, 0x8, 0xdd, 0x2, 0x2, 0xab, 0x80000001, 0x100, 0x100, 0x1, 0x10001, 0x0, 0x5, 0x7, 0x81, 0x7fff, 0x3f, 0x7ff, 0x30c, 0x9, 0x8, 0x7e, 0x1, 0x5, 0x6, 0x9, 0x3, 0x0, 0x6, 0x133, 0x4, 0x1, 0x5, 0x7, 0xdd94, 0x9, 0x8, 0x7, 0xfffff800, 0x1, 0x8, 0x100, 0x1, 0x51d, 0x81, 0x1, 0x2, 0x8, 0x200, 0x9, 0xfffff001, 0x7, 0x40, 0x101, 0x6, 0x1, 0x20, 0x3ff, 0x9, 0x8, 0xa1, 0x4397, 0x0, 0x2, 0x7fffffff, 0x0, 0x3ff, 0x800, 0x80000000, 0xffffff80, 0x4, 0x0, 0x4, 0x400, 0x8000, 0x6, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0x800, 0xd3, 0x101, 0x401, 0x3, 0x4, 0x0, 0x5, 0x20, 0x401, 0xb4d, 0x21, 0x7, 0x5, 0x1, 0x3, 0x4, 0x1000, 0xfffffff9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x0, 0xc0f2, 0x6, 0x1ff, 0x200, 0x2, 0xfffffa21, 0x3ff, 0x2, 0x401, 0x6, 0x2, 0x1000, 0x0, 0x9, 0x9, 0xfffffff9, 0x8, 0x4, 0x9, 0x3f, 0x68000000, 0x2, 0x8, 0x35, 0x80000001, 0x0, 0x422, 0xdb2, 0x6, 0x8, 0x7fffffff, 0xffffff20, 0x196, 0x3, 0x6, 0x83, 0x3, 0x8, 0xb3c, 0x3, 0x0, 0x8, 0x7, 0xfffffffc, 0xe3ac, 0x0, 0x7, 0x3, 0x20, 0x9, 0x101, 0xfffffffa, 0x17d1, 0xfffffe00, 0x1, 0x3, 0x0, 0x7, 0xffffffff, 0x1, 0x10001, 0x20, 0x8, 0x92, 0x7, 0x2, 0x2, 0xdf5, 0x4, 0x6, 0x1, 0x19, 0xc5, 0x7ff, 0x0, 0x1, 0x10001, 0x6, 0x1b, 0x8001, 0x3, 0x2, 0x6, 0x1000, 0xae, 0x10001, 0xff, 0x0, 0x2, 0x81, 0x4, 0x85a, 0x0, 0x1f, 0x1, 0xffff9c0e, 0x7fff, 0x10001, 0x9, 0x40, 0x400, 0xfffffff9, 0x3, 0x6, 0x2, 0x8f, 0x8, 0x5, 0x9, 0x33f3, 0x9576, 0x7, 0x2, 0x6, 0x3ff, 0x8, 0x5, 0x7, 0x8, 0x1, 0x8, 0x6, 0x100, 0x8000, 0x80000000, 0x3, 0x332, 0x4, 0x7, 0x7, 0x3, 0xfffffffe, 0x800, 0x7, 0x120, 0x6a2, 0x218, 0x1, 0x4, 0x0, 0x10001, 0x7, 0x6, 0x100, 0x3, 0x8001, 0x100, 0x6a9d, 0x7c, 0x7fffffff, 0x0, 0x2, 0xf34, 0x80, 0x7ff, 0x2, 0x1, 0x20, 0x101, 0x8, 0xfff, 0x2, 0xfffffffe, 0x7, 0x1, 0xa72e, 0x6, 0x100, 0xff, 0x10000, 0x3, 0x3ff, 0x401, 0x0, 0x3, 0x5, 0x5, 0x400, 0x3c358764, 0x7, 0x9, 0x3, 0x9, 0x5, 0x1, 0x9a, 0x0, 0x7, 0x80000001, 0xa51, 0x9, 0x9d2, 0x9, 0x8, 0x1000, 0x8, 0xd83, 0x8, 0x40, 0x4, 0x1000, 0x5, 0x80000000, 0x76319d2b, 0x3, 0x5, 0x1, 0x7fff, 0x0, 0xffffffff, 0xffffff8d, 0x0, 0x5, 0x4, 0x828, 0x6, 0x8, 0x800, 0x8, 0x10000, 0x5, 0x6, 0xa3d, 0x1, 0x0, 0x3, 0x100, 0x5, 0x2d7, 0xd36, 0x7, 0x3, 0xffffffe1, 0x4, 0x200, 0x3, 0x3, 0x8, 0x200000, 0xfff, 0x7, 0x1, 0x6, 0x9, 0x3c9, 0xfff, 0x1, 0x3f, 0xa7, 0xe6c4, 0x8, 0x3, 0x1, 0x2, 0xa5da, 0x2, 0x40, 0x9, 0x1, 0x10001, 0xfffffff7, 0x2, 0x6, 0x9, 0x0, 0x5, 0x8, 0x7b708108, 0x0, 0x8000, 0xf6, 0x29, 0x81, 0x9, 0xb9d236b, 0xffffff2f, 0x10001, 0x66, 0x4bf, 0x9, 0x100, 0x4d3, 0xfffffffd, 0x2, 0x8, 0x329, 0x0, 0x0, 0xffd, 0x2, 0x9, 0xffffffa0, 0x12000, 0x6, 0x200, 0x1, 0x6, 0x8, 0x7, 0x0, 0x4, 0x8001, 0x5, 0x4, 0xfffffff7, 0x7ff, 0x39f, 0x3, 0x9, 0x9, 0x2, 0x100, 0x8, 0x5aca, 0x6fac, 0x10000, 0x5, 0x5ec, 0x0, 0x26, 0x2f9, 0x1f, 0x3, 0x8, 0x80000001, 0x1, 0x2, 0x400, 0x6, 0x9, 0x6, 0x2, 0x9b9, 0x400, 0x5, 0x7f, 0x6, 0x2dc80d4d, 0x200, 0x8, 0xa12e, 0x20, 0xfffffffd, 0x3ff, 0x800, 0x800, 0x4, 0x8001, 0x58, 0x0, 0x7fffffff, 0x1, 0x1, 0x81, 0x0, 0x1, 0x2, 0x5, 0xfffff7f9, 0x0, 0x1, 0x101, 0x1000, 0x8, 0x1, 0x6, 0x5, 0x1f, 0x5, 0x8, 0x83b, 0x5, 0x4c, 0x8, 0x4, 0x80000001, 0x7fffffff, 0xcd, 0x8000, 0x9b13, 0x9, 0x800, 0x7, 0x6, 0x81, 0x9b, 0x1, 0x3, 0x0, 0x4, 0x200, 0x9, 0x5, 0x10000, 0x50ea, 0xfff, 0x80000000, 0xfffffff8, 0xd181, 0x0, 0x1, 0x7ec, 0x4, 0x10000, 0x2, 0x7, 0x0, 0x1000000, 0x1, 0x6, 0xff, 0x5, 0x8, 0x4, 0x1, 0x5, 0x0, 0x7, 0xacaa, 0x3f, 0x8, 0x5, 0x4, 0x0, 0x9, 0x6, 0x6, 0x8, 0x80000000, 0xfffffa50, 0xffff0000, 0x0, 0xffff, 0x4, 0x1, 0x8, 0x9, 0x5, 0x1, 0x7ff, 0x7f, 0x2, 0x1000, 0x0, 0x3, 0x7ff, 0x8, 0x1, 0x13, 0x5, 0x1, 0x2, 0x0, 0x1, 0xdb6, 0x1, 0x8, 0x0, 0x6, 0xfc, 0x7, 0x6bc, 0x0, 0x401, 0x821, 0x8, 0x2, 0x6, 0x1ff, 0x100, 0x3, 0x1, 0x3, 0x800, 0x1, 0x50, 0x10, 0x3, 0xffff, 0x3, 0x8, 0x6, 0x81, 0x4, 0x5, 0x1, 0x31e1, 0x2, 0x3, 0xfffeffff, 0x1, 0x8, 0x4, 0x2, 0x20, 0x9, 0xe0a, 0x8, 0x5, 0xfffffc01, 0x1, 0x9, 0xffff3a16, 0x5, 0x9, 0xff, 0x8, 0x4, 0x80000000, 0x100, 0x7, 0x160f, 0xa34, 0x7, 0x1, 0x4a, 0x4, 0xd32b, 0x9, 0x0, 0x2c, 0x8, 0x3a, 0x2, 0x0, 0x10000, 0x34c64921, 0x3, 0x6, 0x6, 0x7ff, 0x5c42, 0x7, 0x5, 0xfffffff8, 0x1, 0x0, 0x1, 0x6, 0x5, 0x7fffffff, 0xebd, 0x6, 0xfffffff8, 0x3, 0x4, 0x1e, 0x51, 0x8001, 0x8, 0x6, 0x1, 0x3, 0x20, 0x7fff, 0x10001, 0x550, 0x9, 0x200, 0x8001, 0x6, 0x9, 0x7, 0x8000, 0x401, 0x81, 0x3ff, 0x5, 0x732, 0x8, 0xc6aa, 0x2, 0x4, 0x0, 0x6, 0x3, 0x68, 0x93, 0x0, 0x5, 0x7, 0x8001, 0xfffffffe, 0x6, 0x401, 0x6, 0x0, 0x8, 0x1e5, 0xfff, 0x9, 0x7fff, 0x6, 0x7, 0x3, 0x101, 0x6, 0x5, 0x0, 0x6, 0x101, 0x4, 0x8, 0x9, 0x8, 0x3, 0xffffffe5, 0x2, 0x6, 0x8, 0x9, 0x8, 0x7fffffff, 0x1f, 0x400, 0x74174dfd, 0x4, 0xe5, 0x9, 0x7, 0x6, 0x78, 0x2, 0x1, 0x7, 0xfffff800, 0x7ff, 0xffff, 0xf560, 0x3, 0x4, 0x1df, 0x0, 0x5, 0x3, 0x68, 0x28000000, 0x0, 0x3ff, 0x100, 0x3, 0x1, 0xe1, 0x1, 0x6, 0x800, 0x9, 0x5, 0x1, 0x7, 0x6, 0x5, 0x3, 0x80000001, 0xffffff01, 0x0, 0x0, 0x680, 0x3ff, 0x8, 0x2, 0x80000001, 0x2, 0x3, 0x6, 0x81, 0x2, 0x3, 0x4, 0x8, 0xf9, 0x2, 0x5, 0x8, 0xffffffe0, 0xffffffff, 0x8, 0x7, 0x2, 0xffffff11, 0x101, 0x7, 0x5, 0xfffffff7, 0x1000, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0x401, 0x524, 0x5, 0x5, 0xc9f8, 0x6, 0x1f, 0x4, 0x9, 0x0, 0x400, 0x8295, 0x80000000, 0x1, 0x9a9, 0x8, 0x2, 0x0, 0x7ff, 0x200, 0x2, 0xfb, 0x0, 0x3, 0x6, 0x75a, 0xbcf9, 0x9, 0x7, 0x4, 0x80, 0x3, 0x3, 0x6, 0xb99, 0x1, 0x2, 0x1, 0xfffffffd, 0x4, 0x8000, 0x9, 0x5, 0x4, 0x3, 0x7, 0x4, 0x3, 0xd45, 0x2, 0x7a5, 0x6, 0x101, 0xf9c9, 0x7fffffff, 0x1bc, 0xf3, 0x1, 0x4, 0x81, 0x2, 0x80000001, 0x7, 0xfffffffc, 0x40, 0x4, 0x7, 0x1, 0x350ba536, 0x7, 0xffff, 0x10000, 0x2, 0x3, 0xc10, 0x401, 0x10000, 0xfffffffe, 0x6, 0x0, 0xcef, 0x4, 0x2, 0x80000000, 0x8001, 0x4db, 0x7, 0x10000, 0x4, 0x8, 0x9, 0x3, 0x8, 0x58, 0x10000, 0xffffffff, 0x43, 0x81, 0x0, 0xf994, 0x7, 0x10001, 0x90, 0x7c, 0x2, 0xff7, 0x7f, 0x10, 0x6, 0x7ff, 0x5, 0x3ff, 0x101, 0x1, 0x0, 0x3, 0x84, 0x20, 0x5, 0x4, 0x588, 0x200, 0xd97, 0x2, 0x7, 0x7, 0x4c45d7f0, 0x1000, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0x5, 0x6, 0x100, 0x4, 0x1, 0x6740165c, 0xfff, 0x7, 0x6, 0x9, 0x6, 0x4, 0x7, 0x5, 0xca9e, 0x100, 0x8001, 0xffffffff, 0x10001, 0x6, 0x80000001, 0x1ff, 0x7fff, 0x8, 0x3348000, 0xfffffffd, 0xfffffdc1, 0x401, 0x1, 0xfffffffe, 0x4, 0x1f, 0x1, 0x2, 0x20, 0x7, 0x1, 0x3, 0x6, 0xfffffff7, 0xf36, 0x2, 0xf0d, 0x6, 0x1000, 0x2, 0x7, 0x2f5, 0x31, 0x6, 0x85f, 0x101, 0x7, 0x0, 0x10000, 0x7f, 0x9, 0x3, 0x1, 0x8, 0xfffffffb, 0x20, 0x1, 0xc2000000]}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x32}]}, 0x2c}}, 0x40400c0) 15:14:39 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x7, 0x9, 0x56, @private2, @mcast1, 0x80, 0x80, 0x80, 0x4}}) sendmsg$nl_xfrm(r3, &(0x7f0000001c40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)=@expire={0x130, 0x18, 0x4, 0x70bd2a, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@local, 0x4e22, 0x0, 0x4e22, 0x4, 0xa, 0x80, 0xa0, 0x2c, r9}, {@in=@broadcast, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, {0x6, 0xa46, 0x7ff, 0xcf21, 0x10bd, 0x40, 0x8, 0x8}, {0x6, 0x2, 0x4, 0x887}, {0x7e, 0x4, 0xc05}, 0x70bd2b, 0x3500, 0x2, 0x2, 0x0, 0x80}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x200}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40090}, 0x81) 15:14:39 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800208}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x24004040) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) 15:14:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000005c0)=0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_open_dev$vcsu(&(0x7f0000000640), 0xb, 0x501000) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x22, 0x0, 0x4, 0x16, 0x4, "1f7cdde11b06f3f601a55eec9dabad5dc82c77d6427cc87d3e6f18a374666462fa759ddace4642be81cae82adf7d108d9dee60624b0c72c477cb092d5f6620f3", "c6366a16901d392d41b58199f85436a8bd345b1249f6b2d14a194885b5a09210aaf662f2d92c01d84f141b3cc77a2579271b5a4b0da5a7e691e0a1e2299e27e1", "17d204396f6dd48aeee2364293e4e5d6dd5558e4a7963b5585f04e3d162de11b", [0x0, 0x6a]}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000780)=r2, 0x1) 15:14:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) fsmount(r6, 0x1, 0x80) 15:14:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) 15:14:39 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r6 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x61, 0x32, 0x33, 0x64, 0x34, 0x36, 0x36, 0x35, 0x35, 0x63, 0x63, 0x65, 0x65, 0x63, 0x34, 0x36]}, &(0x7f0000000680)={0x0, "f723c61fb7d47cc32680b647a04f5949f5a09bfcef384131f6c02e849893d0bff576bb23ad6a63d3b56cb678ed0c18923e86e5cf84a17724f07621e9276996e9", 0x15}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, &(0x7f0000000700)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r7, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x0) r8 = eventfd(0x7) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880)=r8, 0x1) 15:14:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) fsmount(r2, 0x1, 0xa) 15:14:39 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x7, 0x9, 0x56, @private2, @mcast1, 0x80, 0x80, 0x80, 0x4}}) sendmsg$nl_xfrm(r3, &(0x7f0000001c40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)=@expire={0x130, 0x18, 0x4, 0x70bd2a, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@local, 0x4e22, 0x0, 0x4e22, 0x4, 0xa, 0x80, 0xa0, 0x2c, r9}, {@in=@broadcast, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, {0x6, 0xa46, 0x7ff, 0xcf21, 0x10bd, 0x40, 0x8, 0x8}, {0x6, 0x2, 0x4, 0x887}, {0x7e, 0x4, 0xc05}, 0x70bd2b, 0x3500, 0x2, 0x2, 0x0, 0x80}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x200}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40090}, 0x81) 15:14:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000005c0)=0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_open_dev$vcsu(&(0x7f0000000640), 0xb, 0x501000) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x22, 0x0, 0x4, 0x16, 0x4, "1f7cdde11b06f3f601a55eec9dabad5dc82c77d6427cc87d3e6f18a374666462fa759ddace4642be81cae82adf7d108d9dee60624b0c72c477cb092d5f6620f3", "c6366a16901d392d41b58199f85436a8bd345b1249f6b2d14a194885b5a09210aaf662f2d92c01d84f141b3cc77a2579271b5a4b0da5a7e691e0a1e2299e27e1", "17d204396f6dd48aeee2364293e4e5d6dd5558e4a7963b5585f04e3d162de11b", [0x0, 0x6a]}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000780)=r2, 0x1) 15:14:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) r6 = fsmount(r2, 0x1, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) 15:14:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) fsmount(r2, 0x1, 0xa) 15:14:51 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff7, 0x42200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x8000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x51, r0, 0x8000000) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x40000) read$usbmon(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = syz_open_dev$vcsu(&(0x7f0000001240), 0x800, 0x400141) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001280), 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x9a687) r4 = socket(0x15, 0x6, 0x81) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004080}, 0x50) syz_open_dev$usbmon(&(0x7f00000013c0), 0x5, 0x6081) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000001400)) syslog(0x4, &(0x7f0000001440)=""/75, 0x4b) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x20) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x11, 0xffffffffffffffff, 0x27df3d1d) 15:14:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) 15:14:51 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800208}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x24004040) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) 15:14:51 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffc00000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000c40)={{0x2, 0x100, 0xe347, 0x1, 0x8, 0x9}, 0x7c, [0x71e5, 0x401, 0x4, 0x20, 0x7f, 0xfff, 0x9, 0x1, 0x53, 0x100, 0x3, 0x4, 0x2, 0x9, 0x8, 0xfffffffd, 0x8, 0x9, 0x0, 0x3, 0x80000001, 0x4, 0x4, 0x3, 0x20, 0x2e, 0xffffffff, 0xfffffffc, 0x8, 0x7, 0xb3, 0x800000, 0x8, 0xdd, 0x2, 0x2, 0xab, 0x80000001, 0x100, 0x100, 0x1, 0x10001, 0x0, 0x5, 0x7, 0x81, 0x7fff, 0x3f, 0x7ff, 0x30c, 0x9, 0x8, 0x7e, 0x1, 0x5, 0x6, 0x9, 0x3, 0x0, 0x6, 0x133, 0x4, 0x1, 0x5, 0x7, 0xdd94, 0x9, 0x8, 0x7, 0xfffff800, 0x1, 0x8, 0x100, 0x1, 0x51d, 0x81, 0x1, 0x2, 0x8, 0x200, 0x9, 0xfffff001, 0x7, 0x40, 0x101, 0x6, 0x1, 0x20, 0x3ff, 0x9, 0x8, 0xa1, 0x4397, 0x0, 0x2, 0x7fffffff, 0x0, 0x3ff, 0x800, 0x80000000, 0xffffff80, 0x4, 0x0, 0x4, 0x400, 0x8000, 0x6, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0x800, 0xd3, 0x101, 0x401, 0x3, 0x4, 0x0, 0x5, 0x20, 0x401, 0xb4d, 0x21, 0x7, 0x5, 0x1, 0x3, 0x4, 0x1000, 0xfffffff9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x0, 0xc0f2, 0x6, 0x1ff, 0x200, 0x2, 0xfffffa21, 0x3ff, 0x2, 0x401, 0x6, 0x2, 0x1000, 0x0, 0x9, 0x9, 0xfffffff9, 0x8, 0x4, 0x9, 0x3f, 0x68000000, 0x2, 0x8, 0x35, 0x80000001, 0x0, 0x422, 0xdb2, 0x6, 0x8, 0x7fffffff, 0xffffff20, 0x196, 0x3, 0x6, 0x83, 0x3, 0x8, 0xb3c, 0x3, 0x0, 0x8, 0x7, 0xfffffffc, 0xe3ac, 0x0, 0x7, 0x3, 0x20, 0x9, 0x101, 0xfffffffa, 0x17d1, 0xfffffe00, 0x1, 0x3, 0x0, 0x7, 0xffffffff, 0x1, 0x10001, 0x20, 0x8, 0x92, 0x7, 0x2, 0x2, 0xdf5, 0x4, 0x6, 0x1, 0x19, 0xc5, 0x7ff, 0x0, 0x1, 0x10001, 0x6, 0x1b, 0x8001, 0x3, 0x2, 0x6, 0x1000, 0xae, 0x10001, 0xff, 0x0, 0x2, 0x81, 0x4, 0x85a, 0x0, 0x1f, 0x1, 0xffff9c0e, 0x7fff, 0x10001, 0x9, 0x40, 0x400, 0xfffffff9, 0x3, 0x6, 0x2, 0x8f, 0x8, 0x5, 0x9, 0x33f3, 0x9576, 0x7, 0x2, 0x6, 0x3ff, 0x8, 0x5, 0x7, 0x8, 0x1, 0x8, 0x6, 0x100, 0x8000, 0x80000000, 0x3, 0x332, 0x4, 0x7, 0x7, 0x3, 0xfffffffe, 0x800, 0x7, 0x120, 0x6a2, 0x218, 0x1, 0x4, 0x0, 0x10001, 0x7, 0x6, 0x100, 0x3, 0x8001, 0x100, 0x6a9d, 0x7c, 0x7fffffff, 0x0, 0x2, 0xf34, 0x80, 0x7ff, 0x2, 0x1, 0x20, 0x101, 0x8, 0xfff, 0x2, 0xfffffffe, 0x7, 0x1, 0xa72e, 0x6, 0x100, 0xff, 0x10000, 0x3, 0x3ff, 0x401, 0x0, 0x3, 0x5, 0x5, 0x400, 0x3c358764, 0x7, 0x9, 0x3, 0x9, 0x5, 0x1, 0x9a, 0x0, 0x7, 0x80000001, 0xa51, 0x9, 0x9d2, 0x9, 0x8, 0x1000, 0x8, 0xd83, 0x8, 0x40, 0x4, 0x1000, 0x5, 0x80000000, 0x76319d2b, 0x3, 0x5, 0x1, 0x7fff, 0x0, 0xffffffff, 0xffffff8d, 0x0, 0x5, 0x4, 0x828, 0x6, 0x8, 0x800, 0x8, 0x10000, 0x5, 0x6, 0xa3d, 0x1, 0x0, 0x3, 0x100, 0x5, 0x2d7, 0xd36, 0x7, 0x3, 0xffffffe1, 0x4, 0x200, 0x3, 0x3, 0x8, 0x200000, 0xfff, 0x7, 0x1, 0x6, 0x9, 0x3c9, 0xfff, 0x1, 0x3f, 0xa7, 0xe6c4, 0x8, 0x3, 0x1, 0x2, 0xa5da, 0x2, 0x40, 0x9, 0x1, 0x10001, 0xfffffff7, 0x2, 0x6, 0x9, 0x0, 0x5, 0x8, 0x7b708108, 0x0, 0x8000, 0xf6, 0x29, 0x81, 0x9, 0xb9d236b, 0xffffff2f, 0x10001, 0x66, 0x4bf, 0x9, 0x100, 0x4d3, 0xfffffffd, 0x2, 0x8, 0x329, 0x0, 0x0, 0xffd, 0x2, 0x9, 0xffffffa0, 0x12000, 0x6, 0x200, 0x1, 0x6, 0x8, 0x7, 0x0, 0x4, 0x8001, 0x5, 0x4, 0xfffffff7, 0x7ff, 0x39f, 0x3, 0x9, 0x9, 0x2, 0x100, 0x8, 0x5aca, 0x6fac, 0x10000, 0x5, 0x5ec, 0x0, 0x26, 0x2f9, 0x1f, 0x3, 0x8, 0x80000001, 0x1, 0x2, 0x400, 0x6, 0x9, 0x6, 0x2, 0x9b9, 0x400, 0x5, 0x7f, 0x6, 0x2dc80d4d, 0x200, 0x8, 0xa12e, 0x20, 0xfffffffd, 0x3ff, 0x800, 0x800, 0x4, 0x8001, 0x58, 0x0, 0x7fffffff, 0x1, 0x1, 0x81, 0x0, 0x1, 0x2, 0x5, 0xfffff7f9, 0x0, 0x1, 0x101, 0x1000, 0x8, 0x1, 0x6, 0x5, 0x1f, 0x5, 0x8, 0x83b, 0x5, 0x4c, 0x8, 0x4, 0x80000001, 0x7fffffff, 0xcd, 0x8000, 0x9b13, 0x9, 0x800, 0x7, 0x6, 0x81, 0x9b, 0x1, 0x3, 0x0, 0x4, 0x200, 0x9, 0x5, 0x10000, 0x50ea, 0xfff, 0x80000000, 0xfffffff8, 0xd181, 0x0, 0x1, 0x7ec, 0x4, 0x10000, 0x2, 0x7, 0x0, 0x1000000, 0x1, 0x6, 0xff, 0x5, 0x8, 0x4, 0x1, 0x5, 0x0, 0x7, 0xacaa, 0x3f, 0x8, 0x5, 0x4, 0x0, 0x9, 0x6, 0x6, 0x8, 0x80000000, 0xfffffa50, 0xffff0000, 0x0, 0xffff, 0x4, 0x1, 0x8, 0x9, 0x5, 0x1, 0x7ff, 0x7f, 0x2, 0x1000, 0x0, 0x3, 0x7ff, 0x8, 0x1, 0x13, 0x5, 0x1, 0x2, 0x0, 0x1, 0xdb6, 0x1, 0x8, 0x0, 0x6, 0xfc, 0x7, 0x6bc, 0x0, 0x401, 0x821, 0x8, 0x2, 0x6, 0x1ff, 0x100, 0x3, 0x1, 0x3, 0x800, 0x1, 0x50, 0x10, 0x3, 0xffff, 0x3, 0x8, 0x6, 0x81, 0x4, 0x5, 0x1, 0x31e1, 0x2, 0x3, 0xfffeffff, 0x1, 0x8, 0x4, 0x2, 0x20, 0x9, 0xe0a, 0x8, 0x5, 0xfffffc01, 0x1, 0x9, 0xffff3a16, 0x5, 0x9, 0xff, 0x8, 0x4, 0x80000000, 0x100, 0x7, 0x160f, 0xa34, 0x7, 0x1, 0x4a, 0x4, 0xd32b, 0x9, 0x0, 0x2c, 0x8, 0x3a, 0x2, 0x0, 0x10000, 0x34c64921, 0x3, 0x6, 0x6, 0x7ff, 0x5c42, 0x7, 0x5, 0xfffffff8, 0x1, 0x0, 0x1, 0x6, 0x5, 0x7fffffff, 0xebd, 0x6, 0xfffffff8, 0x3, 0x4, 0x1e, 0x51, 0x8001, 0x8, 0x6, 0x1, 0x3, 0x20, 0x7fff, 0x10001, 0x550, 0x9, 0x200, 0x8001, 0x6, 0x9, 0x7, 0x8000, 0x401, 0x81, 0x3ff, 0x5, 0x732, 0x8, 0xc6aa, 0x2, 0x4, 0x0, 0x6, 0x3, 0x68, 0x93, 0x0, 0x5, 0x7, 0x8001, 0xfffffffe, 0x6, 0x401, 0x6, 0x0, 0x8, 0x1e5, 0xfff, 0x9, 0x7fff, 0x6, 0x7, 0x3, 0x101, 0x6, 0x5, 0x0, 0x6, 0x101, 0x4, 0x8, 0x9, 0x8, 0x3, 0xffffffe5, 0x2, 0x6, 0x8, 0x9, 0x8, 0x7fffffff, 0x1f, 0x400, 0x74174dfd, 0x4, 0xe5, 0x9, 0x7, 0x6, 0x78, 0x2, 0x1, 0x7, 0xfffff800, 0x7ff, 0xffff, 0xf560, 0x3, 0x4, 0x1df, 0x0, 0x5, 0x3, 0x68, 0x28000000, 0x0, 0x3ff, 0x100, 0x3, 0x1, 0xe1, 0x1, 0x6, 0x800, 0x9, 0x5, 0x1, 0x7, 0x6, 0x5, 0x3, 0x80000001, 0xffffff01, 0x0, 0x0, 0x680, 0x3ff, 0x8, 0x2, 0x80000001, 0x2, 0x3, 0x6, 0x81, 0x2, 0x3, 0x4, 0x8, 0xf9, 0x2, 0x5, 0x8, 0xffffffe0, 0xffffffff, 0x8, 0x7, 0x2, 0xffffff11, 0x101, 0x7, 0x5, 0xfffffff7, 0x1000, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0x401, 0x524, 0x5, 0x5, 0xc9f8, 0x6, 0x1f, 0x4, 0x9, 0x0, 0x400, 0x8295, 0x80000000, 0x1, 0x9a9, 0x8, 0x2, 0x0, 0x7ff, 0x200, 0x2, 0xfb, 0x0, 0x3, 0x6, 0x75a, 0xbcf9, 0x9, 0x7, 0x4, 0x80, 0x3, 0x3, 0x6, 0xb99, 0x1, 0x2, 0x1, 0xfffffffd, 0x4, 0x8000, 0x9, 0x5, 0x4, 0x3, 0x7, 0x4, 0x3, 0xd45, 0x2, 0x7a5, 0x6, 0x101, 0xf9c9, 0x7fffffff, 0x1bc, 0xf3, 0x1, 0x4, 0x81, 0x2, 0x80000001, 0x7, 0xfffffffc, 0x40, 0x4, 0x7, 0x1, 0x350ba536, 0x7, 0xffff, 0x10000, 0x2, 0x3, 0xc10, 0x401, 0x10000, 0xfffffffe, 0x6, 0x0, 0xcef, 0x4, 0x2, 0x80000000, 0x8001, 0x4db, 0x7, 0x10000, 0x4, 0x8, 0x9, 0x3, 0x8, 0x58, 0x10000, 0xffffffff, 0x43, 0x81, 0x0, 0xf994, 0x7, 0x10001, 0x90, 0x7c, 0x2, 0xff7, 0x7f, 0x10, 0x6, 0x7ff, 0x5, 0x3ff, 0x101, 0x1, 0x0, 0x3, 0x84, 0x20, 0x5, 0x4, 0x588, 0x200, 0xd97, 0x2, 0x7, 0x7, 0x4c45d7f0, 0x1000, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0x5, 0x6, 0x100, 0x4, 0x1, 0x6740165c, 0xfff, 0x7, 0x6, 0x9, 0x6, 0x4, 0x7, 0x5, 0xca9e, 0x100, 0x8001, 0xffffffff, 0x10001, 0x6, 0x80000001, 0x1ff, 0x7fff, 0x8, 0x3348000, 0xfffffffd, 0xfffffdc1, 0x401, 0x1, 0xfffffffe, 0x4, 0x1f, 0x1, 0x2, 0x20, 0x7, 0x1, 0x3, 0x6, 0xfffffff7, 0xf36, 0x2, 0xf0d, 0x6, 0x1000, 0x2, 0x7, 0x2f5, 0x31, 0x6, 0x85f, 0x101, 0x7, 0x0, 0x10000, 0x7f, 0x9, 0x3, 0x1, 0x8, 0xfffffffb, 0x20, 0x1, 0xc2000000]}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x32}]}, 0x2c}}, 0x40400c0) 15:14:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000005c0)=0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_open_dev$vcsu(&(0x7f0000000640), 0xb, 0x501000) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x22, 0x0, 0x4, 0x16, 0x4, "1f7cdde11b06f3f601a55eec9dabad5dc82c77d6427cc87d3e6f18a374666462fa759ddace4642be81cae82adf7d108d9dee60624b0c72c477cb092d5f6620f3", "c6366a16901d392d41b58199f85436a8bd345b1249f6b2d14a194885b5a09210aaf662f2d92c01d84f141b3cc77a2579271b5a4b0da5a7e691e0a1e2299e27e1", "17d204396f6dd48aeee2364293e4e5d6dd5558e4a7963b5585f04e3d162de11b", [0x0, 0x6a]}) 15:14:51 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r6 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x61, 0x32, 0x33, 0x64, 0x34, 0x36, 0x36, 0x35, 0x35, 0x63, 0x63, 0x65, 0x65, 0x63, 0x34, 0x36]}, &(0x7f0000000680)={0x0, "f723c61fb7d47cc32680b647a04f5949f5a09bfcef384131f6c02e849893d0bff576bb23ad6a63d3b56cb678ed0c18923e86e5cf84a17724f07621e9276996e9", 0x15}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, &(0x7f0000000700)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r7, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x0) r8 = eventfd(0x7) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880)=r8, 0x1) 15:14:51 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x7, 0x9, 0x56, @private2, @mcast1, 0x80, 0x80, 0x80, 0x4}}) 15:14:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) 15:14:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000005c0)=0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) syz_open_dev$vcsu(&(0x7f0000000640), 0xb, 0x501000) 15:14:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x75}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x4, 0x0, {0x10000, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x7}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0x3f}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x44013) 15:14:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) 15:14:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000005c0)=0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) syz_open_dev$vcsu(&(0x7f0000000640), 0xb, 0x501000) 15:14:51 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffc00000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000c40)={{0x2, 0x100, 0xe347, 0x1, 0x8, 0x9}, 0x7c, [0x71e5, 0x401, 0x4, 0x20, 0x7f, 0xfff, 0x9, 0x1, 0x53, 0x100, 0x3, 0x4, 0x2, 0x9, 0x8, 0xfffffffd, 0x8, 0x9, 0x0, 0x3, 0x80000001, 0x4, 0x4, 0x3, 0x20, 0x2e, 0xffffffff, 0xfffffffc, 0x8, 0x7, 0xb3, 0x800000, 0x8, 0xdd, 0x2, 0x2, 0xab, 0x80000001, 0x100, 0x100, 0x1, 0x10001, 0x0, 0x5, 0x7, 0x81, 0x7fff, 0x3f, 0x7ff, 0x30c, 0x9, 0x8, 0x7e, 0x1, 0x5, 0x6, 0x9, 0x3, 0x0, 0x6, 0x133, 0x4, 0x1, 0x5, 0x7, 0xdd94, 0x9, 0x8, 0x7, 0xfffff800, 0x1, 0x8, 0x100, 0x1, 0x51d, 0x81, 0x1, 0x2, 0x8, 0x200, 0x9, 0xfffff001, 0x7, 0x40, 0x101, 0x6, 0x1, 0x20, 0x3ff, 0x9, 0x8, 0xa1, 0x4397, 0x0, 0x2, 0x7fffffff, 0x0, 0x3ff, 0x800, 0x80000000, 0xffffff80, 0x4, 0x0, 0x4, 0x400, 0x8000, 0x6, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0x800, 0xd3, 0x101, 0x401, 0x3, 0x4, 0x0, 0x5, 0x20, 0x401, 0xb4d, 0x21, 0x7, 0x5, 0x1, 0x3, 0x4, 0x1000, 0xfffffff9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x0, 0xc0f2, 0x6, 0x1ff, 0x200, 0x2, 0xfffffa21, 0x3ff, 0x2, 0x401, 0x6, 0x2, 0x1000, 0x0, 0x9, 0x9, 0xfffffff9, 0x8, 0x4, 0x9, 0x3f, 0x68000000, 0x2, 0x8, 0x35, 0x80000001, 0x0, 0x422, 0xdb2, 0x6, 0x8, 0x7fffffff, 0xffffff20, 0x196, 0x3, 0x6, 0x83, 0x3, 0x8, 0xb3c, 0x3, 0x0, 0x8, 0x7, 0xfffffffc, 0xe3ac, 0x0, 0x7, 0x3, 0x20, 0x9, 0x101, 0xfffffffa, 0x17d1, 0xfffffe00, 0x1, 0x3, 0x0, 0x7, 0xffffffff, 0x1, 0x10001, 0x20, 0x8, 0x92, 0x7, 0x2, 0x2, 0xdf5, 0x4, 0x6, 0x1, 0x19, 0xc5, 0x7ff, 0x0, 0x1, 0x10001, 0x6, 0x1b, 0x8001, 0x3, 0x2, 0x6, 0x1000, 0xae, 0x10001, 0xff, 0x0, 0x2, 0x81, 0x4, 0x85a, 0x0, 0x1f, 0x1, 0xffff9c0e, 0x7fff, 0x10001, 0x9, 0x40, 0x400, 0xfffffff9, 0x3, 0x6, 0x2, 0x8f, 0x8, 0x5, 0x9, 0x33f3, 0x9576, 0x7, 0x2, 0x6, 0x3ff, 0x8, 0x5, 0x7, 0x8, 0x1, 0x8, 0x6, 0x100, 0x8000, 0x80000000, 0x3, 0x332, 0x4, 0x7, 0x7, 0x3, 0xfffffffe, 0x800, 0x7, 0x120, 0x6a2, 0x218, 0x1, 0x4, 0x0, 0x10001, 0x7, 0x6, 0x100, 0x3, 0x8001, 0x100, 0x6a9d, 0x7c, 0x7fffffff, 0x0, 0x2, 0xf34, 0x80, 0x7ff, 0x2, 0x1, 0x20, 0x101, 0x8, 0xfff, 0x2, 0xfffffffe, 0x7, 0x1, 0xa72e, 0x6, 0x100, 0xff, 0x10000, 0x3, 0x3ff, 0x401, 0x0, 0x3, 0x5, 0x5, 0x400, 0x3c358764, 0x7, 0x9, 0x3, 0x9, 0x5, 0x1, 0x9a, 0x0, 0x7, 0x80000001, 0xa51, 0x9, 0x9d2, 0x9, 0x8, 0x1000, 0x8, 0xd83, 0x8, 0x40, 0x4, 0x1000, 0x5, 0x80000000, 0x76319d2b, 0x3, 0x5, 0x1, 0x7fff, 0x0, 0xffffffff, 0xffffff8d, 0x0, 0x5, 0x4, 0x828, 0x6, 0x8, 0x800, 0x8, 0x10000, 0x5, 0x6, 0xa3d, 0x1, 0x0, 0x3, 0x100, 0x5, 0x2d7, 0xd36, 0x7, 0x3, 0xffffffe1, 0x4, 0x200, 0x3, 0x3, 0x8, 0x200000, 0xfff, 0x7, 0x1, 0x6, 0x9, 0x3c9, 0xfff, 0x1, 0x3f, 0xa7, 0xe6c4, 0x8, 0x3, 0x1, 0x2, 0xa5da, 0x2, 0x40, 0x9, 0x1, 0x10001, 0xfffffff7, 0x2, 0x6, 0x9, 0x0, 0x5, 0x8, 0x7b708108, 0x0, 0x8000, 0xf6, 0x29, 0x81, 0x9, 0xb9d236b, 0xffffff2f, 0x10001, 0x66, 0x4bf, 0x9, 0x100, 0x4d3, 0xfffffffd, 0x2, 0x8, 0x329, 0x0, 0x0, 0xffd, 0x2, 0x9, 0xffffffa0, 0x12000, 0x6, 0x200, 0x1, 0x6, 0x8, 0x7, 0x0, 0x4, 0x8001, 0x5, 0x4, 0xfffffff7, 0x7ff, 0x39f, 0x3, 0x9, 0x9, 0x2, 0x100, 0x8, 0x5aca, 0x6fac, 0x10000, 0x5, 0x5ec, 0x0, 0x26, 0x2f9, 0x1f, 0x3, 0x8, 0x80000001, 0x1, 0x2, 0x400, 0x6, 0x9, 0x6, 0x2, 0x9b9, 0x400, 0x5, 0x7f, 0x6, 0x2dc80d4d, 0x200, 0x8, 0xa12e, 0x20, 0xfffffffd, 0x3ff, 0x800, 0x800, 0x4, 0x8001, 0x58, 0x0, 0x7fffffff, 0x1, 0x1, 0x81, 0x0, 0x1, 0x2, 0x5, 0xfffff7f9, 0x0, 0x1, 0x101, 0x1000, 0x8, 0x1, 0x6, 0x5, 0x1f, 0x5, 0x8, 0x83b, 0x5, 0x4c, 0x8, 0x4, 0x80000001, 0x7fffffff, 0xcd, 0x8000, 0x9b13, 0x9, 0x800, 0x7, 0x6, 0x81, 0x9b, 0x1, 0x3, 0x0, 0x4, 0x200, 0x9, 0x5, 0x10000, 0x50ea, 0xfff, 0x80000000, 0xfffffff8, 0xd181, 0x0, 0x1, 0x7ec, 0x4, 0x10000, 0x2, 0x7, 0x0, 0x1000000, 0x1, 0x6, 0xff, 0x5, 0x8, 0x4, 0x1, 0x5, 0x0, 0x7, 0xacaa, 0x3f, 0x8, 0x5, 0x4, 0x0, 0x9, 0x6, 0x6, 0x8, 0x80000000, 0xfffffa50, 0xffff0000, 0x0, 0xffff, 0x4, 0x1, 0x8, 0x9, 0x5, 0x1, 0x7ff, 0x7f, 0x2, 0x1000, 0x0, 0x3, 0x7ff, 0x8, 0x1, 0x13, 0x5, 0x1, 0x2, 0x0, 0x1, 0xdb6, 0x1, 0x8, 0x0, 0x6, 0xfc, 0x7, 0x6bc, 0x0, 0x401, 0x821, 0x8, 0x2, 0x6, 0x1ff, 0x100, 0x3, 0x1, 0x3, 0x800, 0x1, 0x50, 0x10, 0x3, 0xffff, 0x3, 0x8, 0x6, 0x81, 0x4, 0x5, 0x1, 0x31e1, 0x2, 0x3, 0xfffeffff, 0x1, 0x8, 0x4, 0x2, 0x20, 0x9, 0xe0a, 0x8, 0x5, 0xfffffc01, 0x1, 0x9, 0xffff3a16, 0x5, 0x9, 0xff, 0x8, 0x4, 0x80000000, 0x100, 0x7, 0x160f, 0xa34, 0x7, 0x1, 0x4a, 0x4, 0xd32b, 0x9, 0x0, 0x2c, 0x8, 0x3a, 0x2, 0x0, 0x10000, 0x34c64921, 0x3, 0x6, 0x6, 0x7ff, 0x5c42, 0x7, 0x5, 0xfffffff8, 0x1, 0x0, 0x1, 0x6, 0x5, 0x7fffffff, 0xebd, 0x6, 0xfffffff8, 0x3, 0x4, 0x1e, 0x51, 0x8001, 0x8, 0x6, 0x1, 0x3, 0x20, 0x7fff, 0x10001, 0x550, 0x9, 0x200, 0x8001, 0x6, 0x9, 0x7, 0x8000, 0x401, 0x81, 0x3ff, 0x5, 0x732, 0x8, 0xc6aa, 0x2, 0x4, 0x0, 0x6, 0x3, 0x68, 0x93, 0x0, 0x5, 0x7, 0x8001, 0xfffffffe, 0x6, 0x401, 0x6, 0x0, 0x8, 0x1e5, 0xfff, 0x9, 0x7fff, 0x6, 0x7, 0x3, 0x101, 0x6, 0x5, 0x0, 0x6, 0x101, 0x4, 0x8, 0x9, 0x8, 0x3, 0xffffffe5, 0x2, 0x6, 0x8, 0x9, 0x8, 0x7fffffff, 0x1f, 0x400, 0x74174dfd, 0x4, 0xe5, 0x9, 0x7, 0x6, 0x78, 0x2, 0x1, 0x7, 0xfffff800, 0x7ff, 0xffff, 0xf560, 0x3, 0x4, 0x1df, 0x0, 0x5, 0x3, 0x68, 0x28000000, 0x0, 0x3ff, 0x100, 0x3, 0x1, 0xe1, 0x1, 0x6, 0x800, 0x9, 0x5, 0x1, 0x7, 0x6, 0x5, 0x3, 0x80000001, 0xffffff01, 0x0, 0x0, 0x680, 0x3ff, 0x8, 0x2, 0x80000001, 0x2, 0x3, 0x6, 0x81, 0x2, 0x3, 0x4, 0x8, 0xf9, 0x2, 0x5, 0x8, 0xffffffe0, 0xffffffff, 0x8, 0x7, 0x2, 0xffffff11, 0x101, 0x7, 0x5, 0xfffffff7, 0x1000, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0x401, 0x524, 0x5, 0x5, 0xc9f8, 0x6, 0x1f, 0x4, 0x9, 0x0, 0x400, 0x8295, 0x80000000, 0x1, 0x9a9, 0x8, 0x2, 0x0, 0x7ff, 0x200, 0x2, 0xfb, 0x0, 0x3, 0x6, 0x75a, 0xbcf9, 0x9, 0x7, 0x4, 0x80, 0x3, 0x3, 0x6, 0xb99, 0x1, 0x2, 0x1, 0xfffffffd, 0x4, 0x8000, 0x9, 0x5, 0x4, 0x3, 0x7, 0x4, 0x3, 0xd45, 0x2, 0x7a5, 0x6, 0x101, 0xf9c9, 0x7fffffff, 0x1bc, 0xf3, 0x1, 0x4, 0x81, 0x2, 0x80000001, 0x7, 0xfffffffc, 0x40, 0x4, 0x7, 0x1, 0x350ba536, 0x7, 0xffff, 0x10000, 0x2, 0x3, 0xc10, 0x401, 0x10000, 0xfffffffe, 0x6, 0x0, 0xcef, 0x4, 0x2, 0x80000000, 0x8001, 0x4db, 0x7, 0x10000, 0x4, 0x8, 0x9, 0x3, 0x8, 0x58, 0x10000, 0xffffffff, 0x43, 0x81, 0x0, 0xf994, 0x7, 0x10001, 0x90, 0x7c, 0x2, 0xff7, 0x7f, 0x10, 0x6, 0x7ff, 0x5, 0x3ff, 0x101, 0x1, 0x0, 0x3, 0x84, 0x20, 0x5, 0x4, 0x588, 0x200, 0xd97, 0x2, 0x7, 0x7, 0x4c45d7f0, 0x1000, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0x5, 0x6, 0x100, 0x4, 0x1, 0x6740165c, 0xfff, 0x7, 0x6, 0x9, 0x6, 0x4, 0x7, 0x5, 0xca9e, 0x100, 0x8001, 0xffffffff, 0x10001, 0x6, 0x80000001, 0x1ff, 0x7fff, 0x8, 0x3348000, 0xfffffffd, 0xfffffdc1, 0x401, 0x1, 0xfffffffe, 0x4, 0x1f, 0x1, 0x2, 0x20, 0x7, 0x1, 0x3, 0x6, 0xfffffff7, 0xf36, 0x2, 0xf0d, 0x6, 0x1000, 0x2, 0x7, 0x2f5, 0x31, 0x6, 0x85f, 0x101, 0x7, 0x0, 0x10000, 0x7f, 0x9, 0x3, 0x1, 0x8, 0xfffffffb, 0x20, 0x1, 0xc2000000]}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 15:14:51 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) 15:14:51 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)) 15:14:51 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r6 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x61, 0x32, 0x33, 0x64, 0x34, 0x36, 0x36, 0x35, 0x35, 0x63, 0x63, 0x65, 0x65, 0x63, 0x34, 0x36]}, &(0x7f0000000680)={0x0, "f723c61fb7d47cc32680b647a04f5949f5a09bfcef384131f6c02e849893d0bff576bb23ad6a63d3b56cb678ed0c18923e86e5cf84a17724f07621e9276996e9", 0x15}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, &(0x7f0000000700)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r7, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880), 0x1) 15:15:03 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800208}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x24004040) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) 15:15:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000005c0)=0x3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) 15:15:03 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r6 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x61, 0x32, 0x33, 0x64, 0x34, 0x36, 0x36, 0x35, 0x35, 0x63, 0x63, 0x65, 0x65, 0x63, 0x34, 0x36]}, &(0x7f0000000680)={0x0, "f723c61fb7d47cc32680b647a04f5949f5a09bfcef384131f6c02e849893d0bff576bb23ad6a63d3b56cb678ed0c18923e86e5cf84a17724f07621e9276996e9", 0x15}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, &(0x7f0000000700)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r3) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880), 0x1) 15:15:03 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffc00000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000c40)={{0x2, 0x100, 0xe347, 0x1, 0x8, 0x9}, 0x7c, [0x71e5, 0x401, 0x4, 0x20, 0x7f, 0xfff, 0x9, 0x1, 0x53, 0x100, 0x3, 0x4, 0x2, 0x9, 0x8, 0xfffffffd, 0x8, 0x9, 0x0, 0x3, 0x80000001, 0x4, 0x4, 0x3, 0x20, 0x2e, 0xffffffff, 0xfffffffc, 0x8, 0x7, 0xb3, 0x800000, 0x8, 0xdd, 0x2, 0x2, 0xab, 0x80000001, 0x100, 0x100, 0x1, 0x10001, 0x0, 0x5, 0x7, 0x81, 0x7fff, 0x3f, 0x7ff, 0x30c, 0x9, 0x8, 0x7e, 0x1, 0x5, 0x6, 0x9, 0x3, 0x0, 0x6, 0x133, 0x4, 0x1, 0x5, 0x7, 0xdd94, 0x9, 0x8, 0x7, 0xfffff800, 0x1, 0x8, 0x100, 0x1, 0x51d, 0x81, 0x1, 0x2, 0x8, 0x200, 0x9, 0xfffff001, 0x7, 0x40, 0x101, 0x6, 0x1, 0x20, 0x3ff, 0x9, 0x8, 0xa1, 0x4397, 0x0, 0x2, 0x7fffffff, 0x0, 0x3ff, 0x800, 0x80000000, 0xffffff80, 0x4, 0x0, 0x4, 0x400, 0x8000, 0x6, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0x800, 0xd3, 0x101, 0x401, 0x3, 0x4, 0x0, 0x5, 0x20, 0x401, 0xb4d, 0x21, 0x7, 0x5, 0x1, 0x3, 0x4, 0x1000, 0xfffffff9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x0, 0xc0f2, 0x6, 0x1ff, 0x200, 0x2, 0xfffffa21, 0x3ff, 0x2, 0x401, 0x6, 0x2, 0x1000, 0x0, 0x9, 0x9, 0xfffffff9, 0x8, 0x4, 0x9, 0x3f, 0x68000000, 0x2, 0x8, 0x35, 0x80000001, 0x0, 0x422, 0xdb2, 0x6, 0x8, 0x7fffffff, 0xffffff20, 0x196, 0x3, 0x6, 0x83, 0x3, 0x8, 0xb3c, 0x3, 0x0, 0x8, 0x7, 0xfffffffc, 0xe3ac, 0x0, 0x7, 0x3, 0x20, 0x9, 0x101, 0xfffffffa, 0x17d1, 0xfffffe00, 0x1, 0x3, 0x0, 0x7, 0xffffffff, 0x1, 0x10001, 0x20, 0x8, 0x92, 0x7, 0x2, 0x2, 0xdf5, 0x4, 0x6, 0x1, 0x19, 0xc5, 0x7ff, 0x0, 0x1, 0x10001, 0x6, 0x1b, 0x8001, 0x3, 0x2, 0x6, 0x1000, 0xae, 0x10001, 0xff, 0x0, 0x2, 0x81, 0x4, 0x85a, 0x0, 0x1f, 0x1, 0xffff9c0e, 0x7fff, 0x10001, 0x9, 0x40, 0x400, 0xfffffff9, 0x3, 0x6, 0x2, 0x8f, 0x8, 0x5, 0x9, 0x33f3, 0x9576, 0x7, 0x2, 0x6, 0x3ff, 0x8, 0x5, 0x7, 0x8, 0x1, 0x8, 0x6, 0x100, 0x8000, 0x80000000, 0x3, 0x332, 0x4, 0x7, 0x7, 0x3, 0xfffffffe, 0x800, 0x7, 0x120, 0x6a2, 0x218, 0x1, 0x4, 0x0, 0x10001, 0x7, 0x6, 0x100, 0x3, 0x8001, 0x100, 0x6a9d, 0x7c, 0x7fffffff, 0x0, 0x2, 0xf34, 0x80, 0x7ff, 0x2, 0x1, 0x20, 0x101, 0x8, 0xfff, 0x2, 0xfffffffe, 0x7, 0x1, 0xa72e, 0x6, 0x100, 0xff, 0x10000, 0x3, 0x3ff, 0x401, 0x0, 0x3, 0x5, 0x5, 0x400, 0x3c358764, 0x7, 0x9, 0x3, 0x9, 0x5, 0x1, 0x9a, 0x0, 0x7, 0x80000001, 0xa51, 0x9, 0x9d2, 0x9, 0x8, 0x1000, 0x8, 0xd83, 0x8, 0x40, 0x4, 0x1000, 0x5, 0x80000000, 0x76319d2b, 0x3, 0x5, 0x1, 0x7fff, 0x0, 0xffffffff, 0xffffff8d, 0x0, 0x5, 0x4, 0x828, 0x6, 0x8, 0x800, 0x8, 0x10000, 0x5, 0x6, 0xa3d, 0x1, 0x0, 0x3, 0x100, 0x5, 0x2d7, 0xd36, 0x7, 0x3, 0xffffffe1, 0x4, 0x200, 0x3, 0x3, 0x8, 0x200000, 0xfff, 0x7, 0x1, 0x6, 0x9, 0x3c9, 0xfff, 0x1, 0x3f, 0xa7, 0xe6c4, 0x8, 0x3, 0x1, 0x2, 0xa5da, 0x2, 0x40, 0x9, 0x1, 0x10001, 0xfffffff7, 0x2, 0x6, 0x9, 0x0, 0x5, 0x8, 0x7b708108, 0x0, 0x8000, 0xf6, 0x29, 0x81, 0x9, 0xb9d236b, 0xffffff2f, 0x10001, 0x66, 0x4bf, 0x9, 0x100, 0x4d3, 0xfffffffd, 0x2, 0x8, 0x329, 0x0, 0x0, 0xffd, 0x2, 0x9, 0xffffffa0, 0x12000, 0x6, 0x200, 0x1, 0x6, 0x8, 0x7, 0x0, 0x4, 0x8001, 0x5, 0x4, 0xfffffff7, 0x7ff, 0x39f, 0x3, 0x9, 0x9, 0x2, 0x100, 0x8, 0x5aca, 0x6fac, 0x10000, 0x5, 0x5ec, 0x0, 0x26, 0x2f9, 0x1f, 0x3, 0x8, 0x80000001, 0x1, 0x2, 0x400, 0x6, 0x9, 0x6, 0x2, 0x9b9, 0x400, 0x5, 0x7f, 0x6, 0x2dc80d4d, 0x200, 0x8, 0xa12e, 0x20, 0xfffffffd, 0x3ff, 0x800, 0x800, 0x4, 0x8001, 0x58, 0x0, 0x7fffffff, 0x1, 0x1, 0x81, 0x0, 0x1, 0x2, 0x5, 0xfffff7f9, 0x0, 0x1, 0x101, 0x1000, 0x8, 0x1, 0x6, 0x5, 0x1f, 0x5, 0x8, 0x83b, 0x5, 0x4c, 0x8, 0x4, 0x80000001, 0x7fffffff, 0xcd, 0x8000, 0x9b13, 0x9, 0x800, 0x7, 0x6, 0x81, 0x9b, 0x1, 0x3, 0x0, 0x4, 0x200, 0x9, 0x5, 0x10000, 0x50ea, 0xfff, 0x80000000, 0xfffffff8, 0xd181, 0x0, 0x1, 0x7ec, 0x4, 0x10000, 0x2, 0x7, 0x0, 0x1000000, 0x1, 0x6, 0xff, 0x5, 0x8, 0x4, 0x1, 0x5, 0x0, 0x7, 0xacaa, 0x3f, 0x8, 0x5, 0x4, 0x0, 0x9, 0x6, 0x6, 0x8, 0x80000000, 0xfffffa50, 0xffff0000, 0x0, 0xffff, 0x4, 0x1, 0x8, 0x9, 0x5, 0x1, 0x7ff, 0x7f, 0x2, 0x1000, 0x0, 0x3, 0x7ff, 0x8, 0x1, 0x13, 0x5, 0x1, 0x2, 0x0, 0x1, 0xdb6, 0x1, 0x8, 0x0, 0x6, 0xfc, 0x7, 0x6bc, 0x0, 0x401, 0x821, 0x8, 0x2, 0x6, 0x1ff, 0x100, 0x3, 0x1, 0x3, 0x800, 0x1, 0x50, 0x10, 0x3, 0xffff, 0x3, 0x8, 0x6, 0x81, 0x4, 0x5, 0x1, 0x31e1, 0x2, 0x3, 0xfffeffff, 0x1, 0x8, 0x4, 0x2, 0x20, 0x9, 0xe0a, 0x8, 0x5, 0xfffffc01, 0x1, 0x9, 0xffff3a16, 0x5, 0x9, 0xff, 0x8, 0x4, 0x80000000, 0x100, 0x7, 0x160f, 0xa34, 0x7, 0x1, 0x4a, 0x4, 0xd32b, 0x9, 0x0, 0x2c, 0x8, 0x3a, 0x2, 0x0, 0x10000, 0x34c64921, 0x3, 0x6, 0x6, 0x7ff, 0x5c42, 0x7, 0x5, 0xfffffff8, 0x1, 0x0, 0x1, 0x6, 0x5, 0x7fffffff, 0xebd, 0x6, 0xfffffff8, 0x3, 0x4, 0x1e, 0x51, 0x8001, 0x8, 0x6, 0x1, 0x3, 0x20, 0x7fff, 0x10001, 0x550, 0x9, 0x200, 0x8001, 0x6, 0x9, 0x7, 0x8000, 0x401, 0x81, 0x3ff, 0x5, 0x732, 0x8, 0xc6aa, 0x2, 0x4, 0x0, 0x6, 0x3, 0x68, 0x93, 0x0, 0x5, 0x7, 0x8001, 0xfffffffe, 0x6, 0x401, 0x6, 0x0, 0x8, 0x1e5, 0xfff, 0x9, 0x7fff, 0x6, 0x7, 0x3, 0x101, 0x6, 0x5, 0x0, 0x6, 0x101, 0x4, 0x8, 0x9, 0x8, 0x3, 0xffffffe5, 0x2, 0x6, 0x8, 0x9, 0x8, 0x7fffffff, 0x1f, 0x400, 0x74174dfd, 0x4, 0xe5, 0x9, 0x7, 0x6, 0x78, 0x2, 0x1, 0x7, 0xfffff800, 0x7ff, 0xffff, 0xf560, 0x3, 0x4, 0x1df, 0x0, 0x5, 0x3, 0x68, 0x28000000, 0x0, 0x3ff, 0x100, 0x3, 0x1, 0xe1, 0x1, 0x6, 0x800, 0x9, 0x5, 0x1, 0x7, 0x6, 0x5, 0x3, 0x80000001, 0xffffff01, 0x0, 0x0, 0x680, 0x3ff, 0x8, 0x2, 0x80000001, 0x2, 0x3, 0x6, 0x81, 0x2, 0x3, 0x4, 0x8, 0xf9, 0x2, 0x5, 0x8, 0xffffffe0, 0xffffffff, 0x8, 0x7, 0x2, 0xffffff11, 0x101, 0x7, 0x5, 0xfffffff7, 0x1000, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0x401, 0x524, 0x5, 0x5, 0xc9f8, 0x6, 0x1f, 0x4, 0x9, 0x0, 0x400, 0x8295, 0x80000000, 0x1, 0x9a9, 0x8, 0x2, 0x0, 0x7ff, 0x200, 0x2, 0xfb, 0x0, 0x3, 0x6, 0x75a, 0xbcf9, 0x9, 0x7, 0x4, 0x80, 0x3, 0x3, 0x6, 0xb99, 0x1, 0x2, 0x1, 0xfffffffd, 0x4, 0x8000, 0x9, 0x5, 0x4, 0x3, 0x7, 0x4, 0x3, 0xd45, 0x2, 0x7a5, 0x6, 0x101, 0xf9c9, 0x7fffffff, 0x1bc, 0xf3, 0x1, 0x4, 0x81, 0x2, 0x80000001, 0x7, 0xfffffffc, 0x40, 0x4, 0x7, 0x1, 0x350ba536, 0x7, 0xffff, 0x10000, 0x2, 0x3, 0xc10, 0x401, 0x10000, 0xfffffffe, 0x6, 0x0, 0xcef, 0x4, 0x2, 0x80000000, 0x8001, 0x4db, 0x7, 0x10000, 0x4, 0x8, 0x9, 0x3, 0x8, 0x58, 0x10000, 0xffffffff, 0x43, 0x81, 0x0, 0xf994, 0x7, 0x10001, 0x90, 0x7c, 0x2, 0xff7, 0x7f, 0x10, 0x6, 0x7ff, 0x5, 0x3ff, 0x101, 0x1, 0x0, 0x3, 0x84, 0x20, 0x5, 0x4, 0x588, 0x200, 0xd97, 0x2, 0x7, 0x7, 0x4c45d7f0, 0x1000, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0x5, 0x6, 0x100, 0x4, 0x1, 0x6740165c, 0xfff, 0x7, 0x6, 0x9, 0x6, 0x4, 0x7, 0x5, 0xca9e, 0x100, 0x8001, 0xffffffff, 0x10001, 0x6, 0x80000001, 0x1ff, 0x7fff, 0x8, 0x3348000, 0xfffffffd, 0xfffffdc1, 0x401, 0x1, 0xfffffffe, 0x4, 0x1f, 0x1, 0x2, 0x20, 0x7, 0x1, 0x3, 0x6, 0xfffffff7, 0xf36, 0x2, 0xf0d, 0x6, 0x1000, 0x2, 0x7, 0x2f5, 0x31, 0x6, 0x85f, 0x101, 0x7, 0x0, 0x10000, 0x7f, 0x9, 0x3, 0x1, 0x8, 0xfffffffb, 0x20, 0x1, 0xc2000000]}) 15:15:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x613ae) 15:15:03 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c080) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) 15:15:03 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) clock_gettime(0x0, &(0x7f0000000300)) 15:15:03 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff7, 0x42200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x8000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x51, r0, 0x8000000) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x40000) read$usbmon(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = syz_open_dev$vcsu(&(0x7f0000001240), 0x800, 0x400141) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001280), 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x9a687) r4 = socket(0x15, 0x6, 0x81) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004080}, 0x50) syz_open_dev$usbmon(&(0x7f00000013c0), 0x5, 0x6081) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000001400)) syslog(0x4, &(0x7f0000001440)=""/75, 0x4b) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x20) 15:15:03 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c080) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) 15:15:03 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) clock_gettime(0x0, &(0x7f0000000300)) 15:15:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) 15:15:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) 15:15:03 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffc00000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) 15:15:03 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c080) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) 15:15:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340), &(0x7f0000000380)={[0x1f]}, 0x8) 15:15:03 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r6 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x61, 0x32, 0x33, 0x64, 0x34, 0x36, 0x36, 0x35, 0x35, 0x63, 0x63, 0x65, 0x65, 0x63, 0x34, 0x36]}, &(0x7f0000000680)={0x0, "f723c61fb7d47cc32680b647a04f5949f5a09bfcef384131f6c02e849893d0bff576bb23ad6a63d3b56cb678ed0c18923e86e5cf84a17724f07621e9276996e9", 0x15}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, &(0x7f0000000700)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880), 0x1) 15:15:14 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) 15:15:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340), &(0x7f0000000380)={[0x1f]}, 0x8) 15:15:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) 15:15:14 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) 15:15:14 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) clock_gettime(0x0, &(0x7f0000000300)) 15:15:14 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800208}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x24004040) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) 15:15:14 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff7, 0x42200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x8000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x51, r0, 0x8000000) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x40000) read$usbmon(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = syz_open_dev$vcsu(&(0x7f0000001240), 0x800, 0x400141) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001280), 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x9a687) r4 = socket(0x15, 0x6, 0x81) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004080}, 0x50) syz_open_dev$usbmon(&(0x7f00000013c0), 0x5, 0x6081) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000001400)) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x20) 15:15:14 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x61, 0x32, 0x33, 0x64, 0x34, 0x36, 0x36, 0x35, 0x35, 0x63, 0x63, 0x65, 0x65, 0x63, 0x34, 0x36]}, &(0x7f0000000680)={0x0, "f723c61fb7d47cc32680b647a04f5949f5a09bfcef384131f6c02e849893d0bff576bb23ad6a63d3b56cb678ed0c18923e86e5cf84a17724f07621e9276996e9", 0x15}, 0x48, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880), 0x1) 15:15:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340), &(0x7f0000000380)={[0x1f]}, 0x8) 15:15:14 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880), 0x1) 15:15:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) 15:15:14 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) 15:15:14 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) clock_gettime(0x0, &(0x7f0000000300)) 15:15:14 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800208}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x24004040) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) [ 179.663896] Bluetooth: hci5: command 0x0406 tx timeout [ 179.664884] Bluetooth: hci0: command 0x0406 tx timeout [ 179.665817] Bluetooth: hci6: command 0x0406 tx timeout [ 179.666680] Bluetooth: hci1: command 0x0406 tx timeout [ 179.667621] Bluetooth: hci3: command 0x0406 tx timeout [ 179.668603] Bluetooth: hci4: command 0x0406 tx timeout [ 179.669788] Bluetooth: hci7: command 0x0406 tx timeout [ 181.200889] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 181.202269] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.203388] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.204815] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 181.207229] Call Trace: [ 181.208289] [ 181.208796] __schedule+0x893/0x2470 [ 181.209586] ? io_schedule_timeout+0x150/0x150 [ 181.210542] ? do_raw_spin_lock+0x121/0x260 [ 181.211482] ? rwlock_bug.part.0+0x90/0x90 [ 181.212248] schedule+0xda/0x1b0 [ 181.212862] rescuer_thread+0x851/0xdb0 [ 181.213533] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.214391] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.215281] ? lockdep_hardirqs_on+0x79/0x100 [ 181.216054] ? worker_thread+0x1260/0x1260 [ 181.216789] kthread+0x2ed/0x3a0 [ 181.217372] ? kthread_complete_and_exit+0x40/0x40 [ 181.218211] ret_from_fork+0x22/0x30 [ 181.218887] [ 181.219312] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 181.220375] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.221249] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.222469] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 181.223867] Call Trace: [ 181.224289] [ 181.224654] __schedule+0x893/0x2470 [ 181.225283] ? io_schedule_timeout+0x150/0x150 [ 181.226021] ? do_raw_spin_lock+0x121/0x260 [ 181.226725] ? rwlock_bug.part.0+0x90/0x90 [ 181.227430] schedule+0xda/0x1b0 [ 181.228005] rescuer_thread+0x851/0xdb0 [ 181.228629] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.229432] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.230237] ? lockdep_hardirqs_on+0x79/0x100 [ 181.230981] ? worker_thread+0x1260/0x1260 [ 181.231739] kthread+0x2ed/0x3a0 [ 181.232283] ? kthread_complete_and_exit+0x40/0x40 [ 181.233075] ret_from_fork+0x22/0x30 [ 181.233684] [ 181.234086] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 181.235130] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.235964] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.237139] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 181.238437] Call Trace: [ 181.238861] [ 181.239266] __schedule+0x893/0x2470 [ 181.239907] ? io_schedule_timeout+0x150/0x150 [ 181.240618] ? do_raw_spin_lock+0x121/0x260 [ 181.241315] ? rwlock_bug.part.0+0x90/0x90 [ 181.242019] schedule+0xda/0x1b0 [ 181.242565] rescuer_thread+0x851/0xdb0 [ 181.243262] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.244074] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.244879] ? lockdep_hardirqs_on+0x79/0x100 [ 181.245580] ? worker_thread+0x1260/0x1260 [ 181.246278] kthread+0x2ed/0x3a0 [ 181.246856] ? kthread_complete_and_exit+0x40/0x40 [ 181.247622] ret_from_fork+0x22/0x30 [ 181.248253] [ 181.248633] INFO: task netns:6 blocked for more than 143 seconds. [ 181.249613] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.250445] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.251727] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 181.253033] Call Trace: [ 181.253446] [ 181.253845] __schedule+0x893/0x2470 [ 181.254459] ? io_schedule_timeout+0x150/0x150 [ 181.255247] ? do_raw_spin_lock+0x121/0x260 [ 181.255976] ? rwlock_bug.part.0+0x90/0x90 [ 181.256676] schedule+0xda/0x1b0 [ 181.257263] rescuer_thread+0x851/0xdb0 [ 181.257932] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.258680] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.259558] ? lockdep_hardirqs_on+0x79/0x100 [ 181.260317] ? worker_thread+0x1260/0x1260 [ 181.261036] kthread+0x2ed/0x3a0 [ 181.261598] ? kthread_complete_and_exit+0x40/0x40 [ 181.262416] ret_from_fork+0x22/0x30 [ 181.263112] [ 181.263496] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 181.264582] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.265453] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.266674] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 181.268095] Workqueue: 0x0 (rcu_gp) [ 181.268741] Call Trace: [ 181.269153] [ 181.269538] __schedule+0x893/0x2470 [ 181.270198] ? io_schedule_timeout+0x150/0x150 [ 181.271015] schedule+0xda/0x1b0 [ 181.271606] worker_thread+0x15f/0x1260 [ 181.272306] ? process_one_work+0x16a0/0x16a0 [ 181.273075] kthread+0x2ed/0x3a0 [ 181.273638] ? kthread_complete_and_exit+0x40/0x40 [ 181.274460] ret_from_fork+0x22/0x30 [ 181.275159] [ 181.275538] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 181.276610] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.277478] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.278723] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 181.280101] Workqueue: 0x0 (kblockd) [ 181.280747] Call Trace: [ 181.281163] [ 181.281538] __schedule+0x893/0x2470 [ 181.282223] ? io_schedule_timeout+0x150/0x150 [ 181.283017] schedule+0xda/0x1b0 [ 181.283597] worker_thread+0x15f/0x1260 [ 181.284302] ? process_one_work+0x16a0/0x16a0 [ 181.285077] kthread+0x2ed/0x3a0 [ 181.285634] ? kthread_complete_and_exit+0x40/0x40 [ 181.286468] ret_from_fork+0x22/0x30 [ 181.287195] [ 181.287584] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 181.288673] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.289542] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.290778] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 181.292145] Call Trace: [ 181.292562] [ 181.292978] __schedule+0x893/0x2470 [ 181.293608] ? io_schedule_timeout+0x150/0x150 [ 181.294387] ? do_raw_spin_lock+0x121/0x260 [ 181.295172] ? rwlock_bug.part.0+0x90/0x90 [ 181.295905] schedule+0xda/0x1b0 [ 181.296471] rescuer_thread+0x851/0xdb0 [ 181.297156] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.297995] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.298828] ? lockdep_hardirqs_on+0x79/0x100 [ 181.299594] ? worker_thread+0x1260/0x1260 [ 181.300322] kthread+0x2ed/0x3a0 [ 181.300912] ? kthread_complete_and_exit+0x40/0x40 [ 181.301731] ret_from_fork+0x22/0x30 [ 181.302352] [ 181.302870] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 181.304053] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.304945] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.306160] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 181.307546] Call Trace: [ 181.307993] [ 181.308365] __schedule+0x893/0x2470 [ 181.309027] ? io_schedule_timeout+0x150/0x150 [ 181.309793] ? mark_held_locks+0x9e/0xe0 [ 181.310456] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.311323] schedule+0xda/0x1b0 [ 181.311919] rcu_tasks_one_gp+0x3db/0xc10 [ 181.312577] rcu_tasks_kthread+0x80/0xa0 [ 181.313222] ? rcu_tasks_postscan+0x10/0x10 [ 181.313936] kthread+0x2ed/0x3a0 [ 181.314458] ? kthread_complete_and_exit+0x40/0x40 [ 181.315259] ret_from_fork+0x22/0x30 [ 181.315901] [ 181.316264] INFO: task kworker/0:1:12 blocked for more than 143 seconds. [ 181.317260] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.318079] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.319323] task:kworker/0:1 state:I stack:28080 pid:12 ppid:2 flags:0x00004000 [ 181.320721] Workqueue: 0x0 (events) [ 181.321330] Call Trace: [ 181.321786] [ 181.322162] __schedule+0x893/0x2470 [ 181.322830] ? io_schedule_timeout+0x150/0x150 [ 181.323607] ? rwlock_bug.part.0+0x90/0x90 [ 181.324355] schedule+0xda/0x1b0 [ 181.324965] worker_thread+0x15f/0x1260 [ 181.325636] ? __kthread_parkme+0x15a/0x220 [ 181.326383] ? process_one_work+0x16a0/0x16a0 [ 181.327209] kthread+0x2ed/0x3a0 [ 181.327814] ? kthread_complete_and_exit+0x40/0x40 [ 181.328621] ret_from_fork+0x22/0x30 [ 181.329306] [ 181.329731] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 181.330832] Not tainted 6.0.0-rc7-next-20220929 #1 [ 181.331753] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.333012] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 181.334385] Workqueue: 0x0 (cgroup_destroy) [ 181.335187] Call Trace: [ 181.335608] [ 181.336023] __schedule+0x893/0x2470 [ 181.336641] ? io_schedule_timeout+0x150/0x150 [ 181.337433] schedule+0xda/0x1b0 [ 181.338021] worker_thread+0x15f/0x1260 [ 181.338676] ? process_one_work+0x16a0/0x16a0 [ 181.339493] kthread+0x2ed/0x3a0 [ 181.340083] ? kthread_complete_and_exit+0x40/0x40 [ 181.340905] ret_from_fork+0x22/0x30 [ 181.341545] [ 181.342031] [ 181.342031] Showing all locks held in the system: [ 181.342992] 1 lock held by rcu_tasks_kthre/11: [ 181.343742] #0: ffffffff85406890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 181.345230] 1 lock held by khungtaskd/25: [ 181.345874] #0: ffffffff85407360 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 181.347380] 1 lock held by in:imklog/212: [ 181.348054] 3 locks held by rs:main Q:Reg/213: [ 181.348812] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 181.350186] #1: ffff888010058438 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x127/0x250 [ 181.351605] #2: ffff88801ad70400 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 [ 181.353334] 3 locks held by syz-executor/4191: [ 181.354113] [ 181.354402] ============================================= [ 181.354402] [ 187.855918] Bluetooth: hci2: command 0x0406 tx timeout 15:15:27 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) 15:15:27 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800208}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x24004040) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) 15:15:27 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff7, 0x42200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x8000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x51, r0, 0x8000000) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x40000) read$usbmon(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = syz_open_dev$vcsu(&(0x7f0000001240), 0x800, 0x400141) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001280), 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x9a687) r4 = socket(0x15, 0x6, 0x81) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004080}, 0x50) syz_open_dev$usbmon(&(0x7f00000013c0), 0x5, 0x6081) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x20) 15:15:27 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)) 15:15:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) 15:15:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x50) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) 15:15:27 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c015}, 0x8c4) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880), 0x1) 15:15:27 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x40014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) 15:15:27 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) clock_gettime(0x0, &(0x7f0000000300)) 15:15:27 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) syz_genetlink_get_family_id$wireguard(&(0x7f00000015c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) 15:15:28 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800208}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d1}, 0x24004040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) 15:15:28 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) clock_gettime(0x0, &(0x7f0000000300)) 15:15:28 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880), 0x1) 15:15:28 executing program 6: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) r4 = syz_open_dev$vcsu(&(0x7f0000000840), 0x3, 0x145000) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd03}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) 15:15:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x90000018) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) 15:15:28 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!)\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x2000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x44) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={0x0, 0x1d, 0x1000}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000000400)="ae12da27b958038ec77fd30df6898986b041651ede1c62f761a990f6a2", &(0x7f0000000440)=""/4096) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000001540)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb13a8376138fe92f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\x7f],^+\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8054}, 0x20008080) 15:15:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) 15:15:28 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff7, 0x42200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x810, r0, 0x8000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x42) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x51, r0, 0x8000000) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x40000) read$usbmon(r2, &(0x7f0000000240)=""/4096, 0x1000) r3 = syz_open_dev$vcsu(&(0x7f0000001240), 0x800, 0x400141) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001280), 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x9a687) r4 = socket(0x15, 0x6, 0x81) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004080}, 0x50) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x20) 15:15:28 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) clock_gettime(0x0, &(0x7f0000000300)) 15:15:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x4002c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0x30e00) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1f, 0x4080) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24040000) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x1f]}, 0x8) 15:15:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x88000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0xfa) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x11, 0x9, "db3a644cbbe359cf2abb827230636cc574f2528f2f95459310b1548cc178ebdec45238a2ca4c05776b48865bba6ab15e42b918c063f582bbf184ce1614c28021", "f070972bb86d981c439954323972a5256a38c3713fc8cadadf3e4e147f4b9a003df2ec1a52c4a775e081622931c9e63f0546c069ef9d217f88109bed9391a481", "24b5e7f689b723092f4b77b27f8ad3f01118c97e7db8fcf75404b2c1329a3f19", [0x4f2, 0x401]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x400) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x81, 0x18b042) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6, 0x1, 0x5, "0c6b2593d7fd63a91562c40f4c00904cf49588d32a7870f8ef06c2453f471ed3d332a348cfd9b46060dcd59deaa860a06343dbf961a058211d837a4fa353ba78", "f4c49698f9955c2a5755eb9c6a6b27f9dbeb1b106cf5e1f67f14524379ed63e6ee7c5dfa75c09f731203965e12841851374c75c7160f27b38441b7f736279088", "2a0ca2636b6505ccf9839f9756c1902654b4e883003e87266487efef7a751ee6", [0x3f, 0x4]}) syz_open_dev$loop(&(0x7f0000000300), 0x10000, 0x280200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x60000004) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) syz_open_dev$vcsu(&(0x7f0000000580), 0x1, 0x101000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) 15:15:28 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xa36}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_io_uring_setup(0x322b, &(0x7f0000000180)={0x0, 0xb7fa, 0x4, 0x0, 0xd9, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xbd, 0x200000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = fsmount(r0, 0x1, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b93d9a09aa44d33aa9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000880), 0x1) 15:15:28 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@report={0x244, 0x20, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2b, {@in=@remote, @in6=@local, 0x4e21, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0xc8, 0x3, {{'lzjh\x00'}, 0x400, "93db17e7dc9334d7ab22b2310e068debe203716d5bc7420e62863e43f8e49fe72e6b7edcf4e56847c2844b4a49f109cdccb68f461900a1a5ed7f06b69853a5e44265f1f81235dafa5b24fc1d3b3d57b1f8dc6203efe1e89e5ecf39c75e925b99f52c65a3bf53f6249610c6d9817aa813bca76b816d040500c6a449aaa4601ecf"}}, @algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x620, "36261d2e2592ae7bdd029769534f83cf531c875bb0d0096e9b53e29e5f5bf2a41cf71cb1e8944459449568424758ea4e3e71969f8d4dd569495a728b4b3bc0b95fecfc8df3e9aac8040dbfb3a14fba23ffe5d9ae6371686551ffd6f651c9b03bdfa343dca2eb6291b07b1aada6917a2ae0a7546edf1ec5bfd74fcd0fd25c13bce91c6d7de5720fa15f978770f01a9335e035a31e7cccf1cf930dbc628c0488ac459b593fbbb8ed7a43aabb687344622e949691cb8f8e4b4db569073fc75f2ca0de4220ef"}}, @replay_thresh={0x8, 0xb, 0x200}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2b, 0xfffffffc}}]}, 0x244}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x20}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xde6e}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x48}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0xb, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x34}}, 0x4000000) io_uring_setup(0x6759, &(0x7f0000000800)={0x0, 0x10a6, 0x0, 0x0, 0x322}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1700}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x24000080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ac0), 0x220000, 0x0) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x10000001) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448c1}, 0x20000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) VM DIAGNOSIS: 15:15:21 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88800902f988 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1b62fd67b0 CR3=000000000fa68000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 bfe62e42fefa39ef YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=fffffbfff0d9a702 RBX=fffffbfff0d9a703 RCX=ffffffff81297e8f RDX=ffff7fffffffffff RSI=0000000000000008 RDI=ffffffff86cd3810 RBP=fffffbfff0d9a702 RSP=ffff8880389af940 R8 =0000000000000000 R9 =ffffffff86cd3817 R10=fffffbfff0d9a702 R11=0000000000000001 R12=0000000000000006 R13=ffff88800e0609c0 R14=00000000000002af R15=0000000000000040 RIP=ffffffff8178772f RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555722400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1b64541088 CR3=0000000015efa000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000