Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:30180' (ECDSA) to the list of known hosts. 2022/10/01 03:57:55 fuzzer started 2022/10/01 03:57:55 dialing manager at localhost:35095 syzkaller login: [ 36.677262] cgroup: Unknown subsys name 'net' [ 36.757456] cgroup: Unknown subsys name 'rlimit' 2022/10/01 03:58:10 syscalls: 217 2022/10/01 03:58:10 code coverage: enabled 2022/10/01 03:58:10 comparison tracing: enabled 2022/10/01 03:58:10 extra coverage: enabled 2022/10/01 03:58:10 setuid sandbox: enabled 2022/10/01 03:58:10 namespace sandbox: enabled 2022/10/01 03:58:10 Android sandbox: enabled 2022/10/01 03:58:10 fault injection: enabled 2022/10/01 03:58:10 leak checking: enabled 2022/10/01 03:58:10 net packet injection: enabled 2022/10/01 03:58:10 net device setup: enabled 2022/10/01 03:58:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 03:58:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 03:58:10 USB emulation: enabled 2022/10/01 03:58:10 hci packet injection: enabled 2022/10/01 03:58:10 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 03:58:10 802.15.4 emulation: enabled 2022/10/01 03:58:10 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 03:58:11 starting 8 fuzzer processes 03:58:11 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r5, 0x20eb2dc49cd97d84, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x404e085) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008090) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x7f, 0x5, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x700, 0xa7, 0x48c0}}) 03:58:11 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x24040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/21, 0x15, 0x0, &(0x7f00000002c0)=""/62, 0x3e}, &(0x7f0000000340)=0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="83b1a929271fca549561fa231b2a6050", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "7d1dfd1d3bf8155f", "ef89c2201fe702e180839bda380bb8a0934a24f3c82c5b5bb4979e88e8703ea9", "179c1b06", "da3c3e846bd0bb6a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), 0x4) iopl(0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/5, 0x5, 0x0, &(0x7f0000000500)=""/26, 0x1a}, &(0x7f0000000580)=0x40) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x30100, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000600)={0xb}) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xfc1091445819d2eb}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x258, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2592}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0xe36be3f1f40b7448) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000e40)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/184, 0xb8, 0x0, &(0x7f0000000d40)=""/222, 0xde}, &(0x7f0000000e80)=0x40) 03:58:11 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x310, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fe6000/0x14000)=nil, &(0x7f0000000180)="5c7d04d96d550889f48e5ea419eb2ccad3e9d584d3cad99d57eab93986bc5c467b0e5e9f65e5d7c5b11ace4550cfb2d01bb2757cf9dee2304f455e28a7b52a10b760554d2a831b118d88b4dbc9c63ea1752da3587bc3541d2617f008c1f28bf5becaa04ba613a9117369f7", 0x6b}, 0x68) remap_file_pages(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x1, 0x4000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/hwmon', 0x0, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x53c0}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4008010) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r3) pkey_free(r3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4000) r5 = syz_usb_connect(0x2, 0x119, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xf6, 0x52, 0x24, 0x10, 0x10b8, 0x1bb2, 0x682e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x7f, 0x8, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x4, 0xa7, 0x7e, 0x56, 0x8, [@hid_hid={0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x4f5}}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xdd, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x7, 0x90, [@generic={0xc1, 0x23, "cd1be1f12bc4ff85b23ca914c0b621b218afdbafd0a4360112420781d850a7f043eca5090a2f6d32d80784e2eed0871d0ee46c518496a432ebf6a126afca4cb3fc50904a2ffcf7c949e6a66e4f9eec248cc74b3172c939f4cca2eb7c59584061d994b748d66f3b9787db7cfb0e3ceeb3e9148deee9bd18acabafd4020fc80195025a1ba2fd456887829b11c7bfb44a6ae1d831c30979e700405c70b9b4e2e134b96ee425a6e006baa12b84509cd616351c72fff8b4787f100b70d9084d6e39"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x3f, 0x20}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0xac, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfffc}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x5, 0x20, 0x3, 0x10, 0x2}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x8, [{0xe0, &(0x7f0000000700)=@string={0xe0, 0x3, "cef46682a72db9ed1e282e744ade2c14b9e47750de20b85861fd9b67ce4af5c3be55154ca2420847b5f387e7a541d4157480e7a01bfde4c88f9d39196c18cdaf002ac315009ee95e5a219fd7c2374fb1df2e5bd373829cda92876a8f9869f43a0d3fdc4c8c161424a6f2ab741c0e612278ba4a575f9f49051cb10662dc2b18efac54b4b6aa715355e0238a3957fba640c40789171c450ae5b664a321785701114e157c5a23a50b2a7258d1a51d026e989004cffba93564a5e6467f4c6bb00739af2148aacb1a7a697e000648b039ac83c2b1fcf04744cb36b85011e2ad30"}}, {0xf3, &(0x7f0000000800)=@string={0xf3, 0x3, "904a34f8eb6cae9ccf46b33ab1b528dd02b0911dab7f90e839b7e2a3d2923991f4db1d7a1b1fcaa18b023e2374c2e0376d04807e60dd6114d37e540d994691ecfb32ccf140766fe108b853e099f6a94cb672520d54fab2431831d53ecbdfbd668d0f6b9bd1ed1c65844adfe107a3ccccaf925af62ac034b6571f99a68b486609d7ce81bf8b8e7c9cf77d81270ce7b8eeb04e9bde15b9a94dc7171954caa9fb565c1f1f54946ffe8a3826e6a5fff0edb025705f53358a99926e5ffedbacfb65330e68b91c201bd3d7a2192dcf81215985566270144405ea8a44b02c618411393d459b6ee46f404eb591ed1b5aefc3250244"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44d}}, {0xac, &(0x7f0000000940)=@string={0xac, 0x3, "ff2e08f755b7ac18548a291d43aa628d49477aacc6979992ddf88e4e3c9098889ab4da8051f23aa98fd6184a9aed5dfd4d45290466869884f1415da8b9bc068026842fdb86f9812ab82a4e1c8e34b4c9b5b81eece34e56737096779e96ab883923fabe487b51bfa7d0215277fbf604e2c5202a83c35108d84ec39e6ed20388a0affb094f74dc4b471552eea900354cae5f70bfb6e8f787da218829e46b417245e562fc0591f356e29409"}}, {0xb, &(0x7f0000000a00)=@string={0xb, 0x3, "2ec84a909b725903e8"}}, {0xea, &(0x7f0000000a40)=@string={0xea, 0x3, "50f395a529b303b1c35abdae56297154a5afafbada5639a6900594afa88662700c0e67dcc0fda5116c7795bb37b05fa752124eda3f5b919de4e473012147b192bd050b074478dbadb5433297890d24f40a20273507b820139ac192ceb92d4a969aac73dc5ec4d4d06ca2c40436ca346b3efe31189f83d62a8757df90d65565b64bf497ad6e8ed3d081000202f247a658f3688a42d7802023cac4b7e3093c31cabf1f7f691fa6af36174641e01e3346e54ae539ef4cd8c1f90c6f6b2760098b2edd99d674ffb21e5ee0cb24f8186529711127fd6290327753f45bac247767c2275543e6f5f15cbbe8"}}, {0xd1, &(0x7f0000000b40)=@string={0xd1, 0x3, "69329cbe210b3b8faeb377e401abdd474c59c3c846b80e86b01eaaddf5d4d5ff962e63d531fa3972f663960bba847ee20d8191ee4c3af821e42d08275090222b447ee0f1331b4f95afaef4ad4b8c4e65847876c0a7ddf8d596b8b0bc3879e300ab7fd7786204fbf5f59d4c0c0878bc311b7c83f3e6cd229b3ac688cdb7e2aea190d064c36a2d9436e41a374080e6c9efc10ee498a0834252dcc872986cc61fdf8be752d1a5e45ad270d2c3ac386784ec8e57203f6467b84bced5d8d0e319420c277fdb2c4d68c7e3cb6c46d0a9243a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(r5, 0x80, 0xeb, &(0x7f0000000d00)="aaa4788cdbe61c9e0318a5f765bd6556c01fe578924d81926bb871d51f14d77294f6f6db1ff89e14dd3f093f28595ec82fffdd25f84506f9d82a05378cd1cd30bf4850c8aa0cd93809746fb3b64398736e6931ec75e0f643c26b3fe252cfd66d8b0db6dd9cabaab8d7cc258f0172184c0fafbf5237187d4c9a41a14b90e09590f7778062ef6f2789710812b3a41caa8d18a2cfcb0e082eaff9a660a6cab6cfe6a2702232a2a1a879d4e0568d61668b350400dc722b46ed92dbf687aed53b1d7a4e6861f7e67ac29ee379ad570c6de867901da458ddac28d2ae1e8706decff0921082624166996f706be270") socketpair(0x26, 0x1, 0xfff, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x80, 0x1000]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1, 0x24010, r1, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000f40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xbb4e) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000804}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) 03:58:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x20008000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/pcmcia_socket', 0x402200, 0x46) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x2c, 0x7ff}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1f, 0x6e, 0xfff, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10000, 0x8000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4004) socketpair(0x11, 0x3, 0x5, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044085}, 0x8900) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x74}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 03:58:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4001) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xf9, 0x3ff, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x943}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x28000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/snd_hda_codec', 0xc0000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x58e40bf8621b2c9f, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x4000080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0}, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf916575f10d5cf35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl1\x00', r6, 0x29, 0x2, 0x8f, 0xffff080c, 0x7c, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0x8, 0x80000001}}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x565}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1) [ 52.144209] audit: type=1400 audit(1664596691.907:6): avc: denied { execmem } for pid=285 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:58:11 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) setfsuid(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000400)={0x69c80, 0x4, 0x0, 'queue0\x00', 0x168}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:58:11 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0xb65d000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x400, 0x2, 0x1fc8569}) r2 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x1, 0x3}, {0x5, 0x4}, 0x21e1}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/snd_pcm', 0x20082, 0x10) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x58814}, 0x200008c1) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x4}, {0x8, 0x2}, {}, {0x1, 0x5}, {0x29, 0x5}, {0x8, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x8}, {0x3f, 0x7}, {0x8, 0x4}], "57a2fcb49dadf706"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x50}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/bus/hid', 0x400400, 0x50) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000740)=0x3, 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x40) 03:58:11 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000b00)={&(0x7f0000000800), 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x23c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x24, 0x6, 0x12, 0x6c, 0x1b, 0x3b, 0xc, 0xc, 0x7, 0x9, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe21d, 0x100, 0x40, 0x3, 0x1, 0x5, 0xbb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x1}, {0x5, 0xa}, {0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x2}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {}, {0x6, 0x9}, {0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x40, 0x7ff, 0x9, 0x80, 0xa000, 0x1000]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0xfff, 0x4, 0x3, 0x100, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x2c, 0x3, 0x1, 0x36, 0x6c, 0x4, 0x5, 0x1b, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x24, 0x24, 0x69, 0x4, 0x48, 0xc, 0x28, 0x6c, 0x36, 0x24, 0x60, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x0, 0x5, 0x8000, 0x8, 0xc7d, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x5}, {0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x18, 0x6c, 0x2, 0x36, 0x2, 0x12, 0x72, 0x5, 0x60, 0x1, 0x36, 0x4, 0x1, 0x1, 0x2, 0x60, 0x1b, 0x5, 0x3, 0x9, 0x12, 0x1]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x200400c4) write$cgroup_devices(r1, &(0x7f0000000b40)={'a', ' *:* ', 'rwm\x00'}, 0xa) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000805) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000001ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000000d40)={0x1104, r7, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x89, 0xac, "9ff71cd6c31b8a2ef1b8ef63cb2ed806895a6430b9b46c75ac2a36e2ea6606f04e48e5c0b253df451491ce32ab435e354aa7d5f3ea64f283c06d90698ba8a88cd13d3c6c07cc2e082964e4abc14c6c56e5839b04b2207e196fb18fd03220bd33ae52485c2a0f1ea506425fb6e9623604d250ce9f8c0b3c1e18e593032fedf4931c7a99eb37"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0x30, 0x1}, {0x1b, 0x1}, {0xc, 0x1}, {0x3, 0x1}, {0x16}, {0x1b, 0x1}, {0x3}, {0x12}, {0x30, 0x1}, {0x4}, {0x1, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2f0}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x8000, 0x6, 0xeb5e, 0xf53, 0x1ff, 0x5, 0x1ff]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4f1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x1104}, 0x1, 0x0, 0x0, 0xc3fd1e81e39228c6}, 0x400c0) [ 53.519550] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.522362] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.546287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.548957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.550544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.552296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.554220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.555622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.557615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.559759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.573455] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.575544] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.578108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 53.593599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.594589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.596019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.597156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.598272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 53.599382] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 53.601940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 53.604932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.607551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.609347] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 53.611864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.613215] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 53.615959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 53.617842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 53.619092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.620580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.621756] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.623341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.627112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.627128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.628824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.629385] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 53.632166] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 53.633908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 53.635329] Bluetooth: hci2: HCI_REQ-0x0c1a [ 53.637375] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.638595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 53.640716] Bluetooth: hci5: HCI_REQ-0x0c1a [ 53.641708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.643020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.647316] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.648416] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 53.648462] Bluetooth: hci4: HCI_REQ-0x0c1a [ 53.649522] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 53.662987] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.666730] Bluetooth: hci0: HCI_REQ-0x0c1a [ 53.666750] Bluetooth: hci1: HCI_REQ-0x0c1a [ 53.668303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 53.668667] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 53.671699] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 53.676455] Bluetooth: hci3: HCI_REQ-0x0c1a [ 53.677726] Bluetooth: hci6: HCI_REQ-0x0c1a [ 53.689418] Bluetooth: hci7: HCI_REQ-0x0c1a [ 55.674276] Bluetooth: hci1: command 0x0409 tx timeout [ 55.675189] Bluetooth: hci2: command 0x0409 tx timeout [ 55.675829] Bluetooth: hci5: command 0x0409 tx timeout [ 55.738228] Bluetooth: hci4: command 0x0409 tx timeout [ 55.739046] Bluetooth: hci0: command 0x0409 tx timeout [ 55.739599] Bluetooth: hci7: command 0x0409 tx timeout [ 55.740162] Bluetooth: hci6: command 0x0409 tx timeout [ 55.740856] Bluetooth: hci3: command 0x0409 tx timeout [ 57.722451] Bluetooth: hci5: command 0x041b tx timeout [ 57.722937] Bluetooth: hci2: command 0x041b tx timeout [ 57.723333] Bluetooth: hci1: command 0x041b tx timeout [ 57.785890] Bluetooth: hci3: command 0x041b tx timeout [ 57.786310] Bluetooth: hci6: command 0x041b tx timeout [ 57.786704] Bluetooth: hci7: command 0x041b tx timeout [ 57.787141] Bluetooth: hci0: command 0x041b tx timeout [ 57.787529] Bluetooth: hci4: command 0x041b tx timeout [ 59.769926] Bluetooth: hci1: command 0x040f tx timeout [ 59.770760] Bluetooth: hci2: command 0x040f tx timeout [ 59.771759] Bluetooth: hci5: command 0x040f tx timeout [ 59.834057] Bluetooth: hci4: command 0x040f tx timeout [ 59.834897] Bluetooth: hci0: command 0x040f tx timeout [ 59.835659] Bluetooth: hci7: command 0x040f tx timeout [ 59.836926] Bluetooth: hci6: command 0x040f tx timeout [ 59.837702] Bluetooth: hci3: command 0x040f tx timeout [ 61.817927] Bluetooth: hci5: command 0x0419 tx timeout [ 61.818394] Bluetooth: hci2: command 0x0419 tx timeout [ 61.818849] Bluetooth: hci1: command 0x0419 tx timeout [ 61.881900] Bluetooth: hci3: command 0x0419 tx timeout [ 61.882357] Bluetooth: hci6: command 0x0419 tx timeout [ 61.882820] Bluetooth: hci7: command 0x0419 tx timeout [ 61.883233] Bluetooth: hci0: command 0x0419 tx timeout [ 61.883640] Bluetooth: hci4: command 0x0419 tx timeout 03:59:06 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) setfsuid(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000400)={0x69c80, 0x4, 0x0, 'queue0\x00', 0x168}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:06 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) setfsuid(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000400)={0x69c80, 0x4, 0x0, 'queue0\x00', 0x168}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:06 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) setfsuid(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000400)={0x69c80, 0x4, 0x0, 'queue0\x00', 0x168}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:07 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) setfsuid(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:07 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:07 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:07 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:07 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) [ 109.846632] mmap: syz-executor.2 (3980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.907246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.908382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.495448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.496455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:59:27 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:27 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x20008000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/pcmcia_socket', 0x402200, 0x46) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x2c, 0x7ff}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1f, 0x6e, 0xfff, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10000, 0x8000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4004) socketpair(0x11, 0x3, 0x5, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044085}, 0x8900) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x74}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 03:59:27 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0xb65d000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x400, 0x2, 0x1fc8569}) r2 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x1, 0x3}, {0x5, 0x4}, 0x21e1}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/snd_pcm', 0x20082, 0x10) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x58814}, 0x200008c1) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x4}, {0x8, 0x2}, {}, {0x1, 0x5}, {0x29, 0x5}, {0x8, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x8}, {0x3f, 0x7}, {0x8, 0x4}], "57a2fcb49dadf706"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x50}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/bus/hid', 0x400400, 0x50) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000740)=0x3, 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x40) 03:59:27 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x24040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/21, 0x15, 0x0, &(0x7f00000002c0)=""/62, 0x3e}, &(0x7f0000000340)=0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="83b1a929271fca549561fa231b2a6050", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "7d1dfd1d3bf8155f", "ef89c2201fe702e180839bda380bb8a0934a24f3c82c5b5bb4979e88e8703ea9", "179c1b06", "da3c3e846bd0bb6a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), 0x4) iopl(0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/5, 0x5, 0x0, &(0x7f0000000500)=""/26, 0x1a}, &(0x7f0000000580)=0x40) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x30100, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000600)={0xb}) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xfc1091445819d2eb}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x258, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2592}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0xe36be3f1f40b7448) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000e40)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/184, 0xb8, 0x0, &(0x7f0000000d40)=""/222, 0xde}, &(0x7f0000000e80)=0x40) 03:59:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4001) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xf9, 0x3ff, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x943}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x28000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/snd_hda_codec', 0xc0000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x58e40bf8621b2c9f, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x4000080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0}, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf916575f10d5cf35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl1\x00', r6, 0x29, 0x2, 0x8f, 0xffff080c, 0x7c, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0x8, 0x80000001}}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x565}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1) 03:59:27 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x310, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fe6000/0x14000)=nil, &(0x7f0000000180)="5c7d04d96d550889f48e5ea419eb2ccad3e9d584d3cad99d57eab93986bc5c467b0e5e9f65e5d7c5b11ace4550cfb2d01bb2757cf9dee2304f455e28a7b52a10b760554d2a831b118d88b4dbc9c63ea1752da3587bc3541d2617f008c1f28bf5becaa04ba613a9117369f7", 0x6b}, 0x68) remap_file_pages(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x1, 0x4000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/hwmon', 0x0, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x53c0}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4008010) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r3) pkey_free(r3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4000) r5 = syz_usb_connect(0x2, 0x119, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xf6, 0x52, 0x24, 0x10, 0x10b8, 0x1bb2, 0x682e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x7f, 0x8, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x4, 0xa7, 0x7e, 0x56, 0x8, [@hid_hid={0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x4f5}}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xdd, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x7, 0x90, [@generic={0xc1, 0x23, "cd1be1f12bc4ff85b23ca914c0b621b218afdbafd0a4360112420781d850a7f043eca5090a2f6d32d80784e2eed0871d0ee46c518496a432ebf6a126afca4cb3fc50904a2ffcf7c949e6a66e4f9eec248cc74b3172c939f4cca2eb7c59584061d994b748d66f3b9787db7cfb0e3ceeb3e9148deee9bd18acabafd4020fc80195025a1ba2fd456887829b11c7bfb44a6ae1d831c30979e700405c70b9b4e2e134b96ee425a6e006baa12b84509cd616351c72fff8b4787f100b70d9084d6e39"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x3f, 0x20}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0xac, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfffc}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x5, 0x20, 0x3, 0x10, 0x2}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x8, [{0xe0, &(0x7f0000000700)=@string={0xe0, 0x3, "cef46682a72db9ed1e282e744ade2c14b9e47750de20b85861fd9b67ce4af5c3be55154ca2420847b5f387e7a541d4157480e7a01bfde4c88f9d39196c18cdaf002ac315009ee95e5a219fd7c2374fb1df2e5bd373829cda92876a8f9869f43a0d3fdc4c8c161424a6f2ab741c0e612278ba4a575f9f49051cb10662dc2b18efac54b4b6aa715355e0238a3957fba640c40789171c450ae5b664a321785701114e157c5a23a50b2a7258d1a51d026e989004cffba93564a5e6467f4c6bb00739af2148aacb1a7a697e000648b039ac83c2b1fcf04744cb36b85011e2ad30"}}, {0xf3, &(0x7f0000000800)=@string={0xf3, 0x3, "904a34f8eb6cae9ccf46b33ab1b528dd02b0911dab7f90e839b7e2a3d2923991f4db1d7a1b1fcaa18b023e2374c2e0376d04807e60dd6114d37e540d994691ecfb32ccf140766fe108b853e099f6a94cb672520d54fab2431831d53ecbdfbd668d0f6b9bd1ed1c65844adfe107a3ccccaf925af62ac034b6571f99a68b486609d7ce81bf8b8e7c9cf77d81270ce7b8eeb04e9bde15b9a94dc7171954caa9fb565c1f1f54946ffe8a3826e6a5fff0edb025705f53358a99926e5ffedbacfb65330e68b91c201bd3d7a2192dcf81215985566270144405ea8a44b02c618411393d459b6ee46f404eb591ed1b5aefc3250244"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44d}}, {0xac, &(0x7f0000000940)=@string={0xac, 0x3, "ff2e08f755b7ac18548a291d43aa628d49477aacc6979992ddf88e4e3c9098889ab4da8051f23aa98fd6184a9aed5dfd4d45290466869884f1415da8b9bc068026842fdb86f9812ab82a4e1c8e34b4c9b5b81eece34e56737096779e96ab883923fabe487b51bfa7d0215277fbf604e2c5202a83c35108d84ec39e6ed20388a0affb094f74dc4b471552eea900354cae5f70bfb6e8f787da218829e46b417245e562fc0591f356e29409"}}, {0xb, &(0x7f0000000a00)=@string={0xb, 0x3, "2ec84a909b725903e8"}}, {0xea, &(0x7f0000000a40)=@string={0xea, 0x3, "50f395a529b303b1c35abdae56297154a5afafbada5639a6900594afa88662700c0e67dcc0fda5116c7795bb37b05fa752124eda3f5b919de4e473012147b192bd050b074478dbadb5433297890d24f40a20273507b820139ac192ceb92d4a969aac73dc5ec4d4d06ca2c40436ca346b3efe31189f83d62a8757df90d65565b64bf497ad6e8ed3d081000202f247a658f3688a42d7802023cac4b7e3093c31cabf1f7f691fa6af36174641e01e3346e54ae539ef4cd8c1f90c6f6b2760098b2edd99d674ffb21e5ee0cb24f8186529711127fd6290327753f45bac247767c2275543e6f5f15cbbe8"}}, {0xd1, &(0x7f0000000b40)=@string={0xd1, 0x3, "69329cbe210b3b8faeb377e401abdd474c59c3c846b80e86b01eaaddf5d4d5ff962e63d531fa3972f663960bba847ee20d8191ee4c3af821e42d08275090222b447ee0f1331b4f95afaef4ad4b8c4e65847876c0a7ddf8d596b8b0bc3879e300ab7fd7786204fbf5f59d4c0c0878bc311b7c83f3e6cd229b3ac688cdb7e2aea190d064c36a2d9436e41a374080e6c9efc10ee498a0834252dcc872986cc61fdf8be752d1a5e45ad270d2c3ac386784ec8e57203f6467b84bced5d8d0e319420c277fdb2c4d68c7e3cb6c46d0a9243a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(r5, 0x80, 0xeb, &(0x7f0000000d00)="aaa4788cdbe61c9e0318a5f765bd6556c01fe578924d81926bb871d51f14d77294f6f6db1ff89e14dd3f093f28595ec82fffdd25f84506f9d82a05378cd1cd30bf4850c8aa0cd93809746fb3b64398736e6931ec75e0f643c26b3fe252cfd66d8b0db6dd9cabaab8d7cc258f0172184c0fafbf5237187d4c9a41a14b90e09590f7778062ef6f2789710812b3a41caa8d18a2cfcb0e082eaff9a660a6cab6cfe6a2702232a2a1a879d4e0568d61668b350400dc722b46ed92dbf687aed53b1d7a4e6861f7e67ac29ee379ad570c6de867901da458ddac28d2ae1e8706decff0921082624166996f706be270") socketpair(0x26, 0x1, 0xfff, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x80, 0x1000]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1, 0x24010, r1, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000f40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xbb4e) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000804}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) 03:59:27 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000b00)={&(0x7f0000000800), 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x23c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x24, 0x6, 0x12, 0x6c, 0x1b, 0x3b, 0xc, 0xc, 0x7, 0x9, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe21d, 0x100, 0x40, 0x3, 0x1, 0x5, 0xbb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x1}, {0x5, 0xa}, {0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x2}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {}, {0x6, 0x9}, {0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x40, 0x7ff, 0x9, 0x80, 0xa000, 0x1000]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0xfff, 0x4, 0x3, 0x100, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x2c, 0x3, 0x1, 0x36, 0x6c, 0x4, 0x5, 0x1b, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x24, 0x24, 0x69, 0x4, 0x48, 0xc, 0x28, 0x6c, 0x36, 0x24, 0x60, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x0, 0x5, 0x8000, 0x8, 0xc7d, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x5}, {0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x18, 0x6c, 0x2, 0x36, 0x2, 0x12, 0x72, 0x5, 0x60, 0x1, 0x36, 0x4, 0x1, 0x1, 0x2, 0x60, 0x1b, 0x5, 0x3, 0x9, 0x12, 0x1]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x200400c4) write$cgroup_devices(r1, &(0x7f0000000b40)={'a', ' *:* ', 'rwm\x00'}, 0xa) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000805) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000001ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000000d40)={0x1104, r7, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x89, 0xac, "9ff71cd6c31b8a2ef1b8ef63cb2ed806895a6430b9b46c75ac2a36e2ea6606f04e48e5c0b253df451491ce32ab435e354aa7d5f3ea64f283c06d90698ba8a88cd13d3c6c07cc2e082964e4abc14c6c56e5839b04b2207e196fb18fd03220bd33ae52485c2a0f1ea506425fb6e9623604d250ce9f8c0b3c1e18e593032fedf4931c7a99eb37"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0x30, 0x1}, {0x1b, 0x1}, {0xc, 0x1}, {0x3, 0x1}, {0x16}, {0x1b, 0x1}, {0x3}, {0x12}, {0x30, 0x1}, {0x4}, {0x1, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2f0}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x8000, 0x6, 0xeb5e, 0xf53, 0x1ff, 0x5, 0x1ff]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4f1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x1104}, 0x1, 0x0, 0x0, 0xc3fd1e81e39228c6}, 0x400c0) 03:59:27 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r5, 0x20eb2dc49cd97d84, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x404e085) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008090) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x7f, 0x5, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x700, 0xa7, 0x48c0}}) [ 128.011254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.021262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:59:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x310, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fe6000/0x14000)=nil, &(0x7f0000000180)="5c7d04d96d550889f48e5ea419eb2ccad3e9d584d3cad99d57eab93986bc5c467b0e5e9f65e5d7c5b11ace4550cfb2d01bb2757cf9dee2304f455e28a7b52a10b760554d2a831b118d88b4dbc9c63ea1752da3587bc3541d2617f008c1f28bf5becaa04ba613a9117369f7", 0x6b}, 0x68) remap_file_pages(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x1, 0x4000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/hwmon', 0x0, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x53c0}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4008010) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r3) pkey_free(r3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4000) r5 = syz_usb_connect(0x2, 0x119, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xf6, 0x52, 0x24, 0x10, 0x10b8, 0x1bb2, 0x682e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x7f, 0x8, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x4, 0xa7, 0x7e, 0x56, 0x8, [@hid_hid={0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x4f5}}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xdd, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x7, 0x90, [@generic={0xc1, 0x23, "cd1be1f12bc4ff85b23ca914c0b621b218afdbafd0a4360112420781d850a7f043eca5090a2f6d32d80784e2eed0871d0ee46c518496a432ebf6a126afca4cb3fc50904a2ffcf7c949e6a66e4f9eec248cc74b3172c939f4cca2eb7c59584061d994b748d66f3b9787db7cfb0e3ceeb3e9148deee9bd18acabafd4020fc80195025a1ba2fd456887829b11c7bfb44a6ae1d831c30979e700405c70b9b4e2e134b96ee425a6e006baa12b84509cd616351c72fff8b4787f100b70d9084d6e39"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x3f, 0x20}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0xac, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfffc}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x5, 0x20, 0x3, 0x10, 0x2}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x8, [{0xe0, &(0x7f0000000700)=@string={0xe0, 0x3, "cef46682a72db9ed1e282e744ade2c14b9e47750de20b85861fd9b67ce4af5c3be55154ca2420847b5f387e7a541d4157480e7a01bfde4c88f9d39196c18cdaf002ac315009ee95e5a219fd7c2374fb1df2e5bd373829cda92876a8f9869f43a0d3fdc4c8c161424a6f2ab741c0e612278ba4a575f9f49051cb10662dc2b18efac54b4b6aa715355e0238a3957fba640c40789171c450ae5b664a321785701114e157c5a23a50b2a7258d1a51d026e989004cffba93564a5e6467f4c6bb00739af2148aacb1a7a697e000648b039ac83c2b1fcf04744cb36b85011e2ad30"}}, {0xf3, &(0x7f0000000800)=@string={0xf3, 0x3, "904a34f8eb6cae9ccf46b33ab1b528dd02b0911dab7f90e839b7e2a3d2923991f4db1d7a1b1fcaa18b023e2374c2e0376d04807e60dd6114d37e540d994691ecfb32ccf140766fe108b853e099f6a94cb672520d54fab2431831d53ecbdfbd668d0f6b9bd1ed1c65844adfe107a3ccccaf925af62ac034b6571f99a68b486609d7ce81bf8b8e7c9cf77d81270ce7b8eeb04e9bde15b9a94dc7171954caa9fb565c1f1f54946ffe8a3826e6a5fff0edb025705f53358a99926e5ffedbacfb65330e68b91c201bd3d7a2192dcf81215985566270144405ea8a44b02c618411393d459b6ee46f404eb591ed1b5aefc3250244"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44d}}, {0xac, &(0x7f0000000940)=@string={0xac, 0x3, "ff2e08f755b7ac18548a291d43aa628d49477aacc6979992ddf88e4e3c9098889ab4da8051f23aa98fd6184a9aed5dfd4d45290466869884f1415da8b9bc068026842fdb86f9812ab82a4e1c8e34b4c9b5b81eece34e56737096779e96ab883923fabe487b51bfa7d0215277fbf604e2c5202a83c35108d84ec39e6ed20388a0affb094f74dc4b471552eea900354cae5f70bfb6e8f787da218829e46b417245e562fc0591f356e29409"}}, {0xb, &(0x7f0000000a00)=@string={0xb, 0x3, "2ec84a909b725903e8"}}, {0xea, &(0x7f0000000a40)=@string={0xea, 0x3, "50f395a529b303b1c35abdae56297154a5afafbada5639a6900594afa88662700c0e67dcc0fda5116c7795bb37b05fa752124eda3f5b919de4e473012147b192bd050b074478dbadb5433297890d24f40a20273507b820139ac192ceb92d4a969aac73dc5ec4d4d06ca2c40436ca346b3efe31189f83d62a8757df90d65565b64bf497ad6e8ed3d081000202f247a658f3688a42d7802023cac4b7e3093c31cabf1f7f691fa6af36174641e01e3346e54ae539ef4cd8c1f90c6f6b2760098b2edd99d674ffb21e5ee0cb24f8186529711127fd6290327753f45bac247767c2275543e6f5f15cbbe8"}}, {0xd1, &(0x7f0000000b40)=@string={0xd1, 0x3, "69329cbe210b3b8faeb377e401abdd474c59c3c846b80e86b01eaaddf5d4d5ff962e63d531fa3972f663960bba847ee20d8191ee4c3af821e42d08275090222b447ee0f1331b4f95afaef4ad4b8c4e65847876c0a7ddf8d596b8b0bc3879e300ab7fd7786204fbf5f59d4c0c0878bc311b7c83f3e6cd229b3ac688cdb7e2aea190d064c36a2d9436e41a374080e6c9efc10ee498a0834252dcc872986cc61fdf8be752d1a5e45ad270d2c3ac386784ec8e57203f6467b84bced5d8d0e319420c277fdb2c4d68c7e3cb6c46d0a9243a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(r5, 0x80, 0xeb, &(0x7f0000000d00)="aaa4788cdbe61c9e0318a5f765bd6556c01fe578924d81926bb871d51f14d77294f6f6db1ff89e14dd3f093f28595ec82fffdd25f84506f9d82a05378cd1cd30bf4850c8aa0cd93809746fb3b64398736e6931ec75e0f643c26b3fe252cfd66d8b0db6dd9cabaab8d7cc258f0172184c0fafbf5237187d4c9a41a14b90e09590f7778062ef6f2789710812b3a41caa8d18a2cfcb0e082eaff9a660a6cab6cfe6a2702232a2a1a879d4e0568d61668b350400dc722b46ed92dbf687aed53b1d7a4e6861f7e67ac29ee379ad570c6de867901da458ddac28d2ae1e8706decff0921082624166996f706be270") socketpair(0x26, 0x1, 0xfff, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x80, 0x1000]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1, 0x24010, r1, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000f40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xbb4e) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000804}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) 03:59:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4001) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xf9, 0x3ff, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x943}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x28000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/snd_hda_codec', 0xc0000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x58e40bf8621b2c9f, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x4000080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0}, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf916575f10d5cf35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl1\x00', r6, 0x29, 0x2, 0x8f, 0xffff080c, 0x7c, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0x8, 0x80000001}}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x565}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1) 03:59:40 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:40 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0xb65d000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x400, 0x2, 0x1fc8569}) r2 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x1, 0x3}, {0x5, 0x4}, 0x21e1}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/snd_pcm', 0x20082, 0x10) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x58814}, 0x200008c1) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x4}, {0x8, 0x2}, {}, {0x1, 0x5}, {0x29, 0x5}, {0x8, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x8}, {0x3f, 0x7}, {0x8, 0x4}], "57a2fcb49dadf706"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x50}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/bus/hid', 0x400400, 0x50) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000740)=0x3, 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x40) 03:59:40 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r5, 0x20eb2dc49cd97d84, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x404e085) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008090) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x7f, 0x5, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x700, 0xa7, 0x48c0}}) 03:59:40 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x20008000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/pcmcia_socket', 0x402200, 0x46) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x2c, 0x7ff}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1f, 0x6e, 0xfff, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10000, 0x8000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4004) socketpair(0x11, 0x3, 0x5, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044085}, 0x8900) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x74}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 03:59:40 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x24040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/21, 0x15, 0x0, &(0x7f00000002c0)=""/62, 0x3e}, &(0x7f0000000340)=0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="83b1a929271fca549561fa231b2a6050", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "7d1dfd1d3bf8155f", "ef89c2201fe702e180839bda380bb8a0934a24f3c82c5b5bb4979e88e8703ea9", "179c1b06", "da3c3e846bd0bb6a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), 0x4) iopl(0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/5, 0x5, 0x0, &(0x7f0000000500)=""/26, 0x1a}, &(0x7f0000000580)=0x40) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x30100, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000600)={0xb}) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xfc1091445819d2eb}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x258, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2592}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0xe36be3f1f40b7448) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000e40)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/184, 0xb8, 0x0, &(0x7f0000000d40)=""/222, 0xde}, &(0x7f0000000e80)=0x40) 03:59:40 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000b00)={&(0x7f0000000800), 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x23c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x24, 0x6, 0x12, 0x6c, 0x1b, 0x3b, 0xc, 0xc, 0x7, 0x9, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe21d, 0x100, 0x40, 0x3, 0x1, 0x5, 0xbb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x1}, {0x5, 0xa}, {0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x2}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {}, {0x6, 0x9}, {0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x40, 0x7ff, 0x9, 0x80, 0xa000, 0x1000]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0xfff, 0x4, 0x3, 0x100, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x2c, 0x3, 0x1, 0x36, 0x6c, 0x4, 0x5, 0x1b, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x24, 0x24, 0x69, 0x4, 0x48, 0xc, 0x28, 0x6c, 0x36, 0x24, 0x60, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x0, 0x5, 0x8000, 0x8, 0xc7d, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x5}, {0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x18, 0x6c, 0x2, 0x36, 0x2, 0x12, 0x72, 0x5, 0x60, 0x1, 0x36, 0x4, 0x1, 0x1, 0x2, 0x60, 0x1b, 0x5, 0x3, 0x9, 0x12, 0x1]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x200400c4) write$cgroup_devices(r1, &(0x7f0000000b40)={'a', ' *:* ', 'rwm\x00'}, 0xa) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000805) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000001ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000000d40)={0x1104, r7, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x89, 0xac, "9ff71cd6c31b8a2ef1b8ef63cb2ed806895a6430b9b46c75ac2a36e2ea6606f04e48e5c0b253df451491ce32ab435e354aa7d5f3ea64f283c06d90698ba8a88cd13d3c6c07cc2e082964e4abc14c6c56e5839b04b2207e196fb18fd03220bd33ae52485c2a0f1ea506425fb6e9623604d250ce9f8c0b3c1e18e593032fedf4931c7a99eb37"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0x30, 0x1}, {0x1b, 0x1}, {0xc, 0x1}, {0x3, 0x1}, {0x16}, {0x1b, 0x1}, {0x3}, {0x12}, {0x30, 0x1}, {0x4}, {0x1, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2f0}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x8000, 0x6, 0xeb5e, 0xf53, 0x1ff, 0x5, 0x1ff]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4f1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x1104}, 0x1, 0x0, 0x0, 0xc3fd1e81e39228c6}, 0x400c0) [ 140.439952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.440758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:59:40 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:40 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x20008000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/pcmcia_socket', 0x402200, 0x46) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x2c, 0x7ff}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1f, 0x6e, 0xfff, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10000, 0x8000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4004) socketpair(0x11, 0x3, 0x5, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044085}, 0x8900) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x74}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 03:59:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x310, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fe6000/0x14000)=nil, &(0x7f0000000180)="5c7d04d96d550889f48e5ea419eb2ccad3e9d584d3cad99d57eab93986bc5c467b0e5e9f65e5d7c5b11ace4550cfb2d01bb2757cf9dee2304f455e28a7b52a10b760554d2a831b118d88b4dbc9c63ea1752da3587bc3541d2617f008c1f28bf5becaa04ba613a9117369f7", 0x6b}, 0x68) remap_file_pages(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x1, 0x4000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/hwmon', 0x0, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x53c0}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4008010) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r3) pkey_free(r3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4000) r5 = syz_usb_connect(0x2, 0x119, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xf6, 0x52, 0x24, 0x10, 0x10b8, 0x1bb2, 0x682e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x7f, 0x8, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x4, 0xa7, 0x7e, 0x56, 0x8, [@hid_hid={0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x4f5}}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xdd, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x7, 0x90, [@generic={0xc1, 0x23, "cd1be1f12bc4ff85b23ca914c0b621b218afdbafd0a4360112420781d850a7f043eca5090a2f6d32d80784e2eed0871d0ee46c518496a432ebf6a126afca4cb3fc50904a2ffcf7c949e6a66e4f9eec248cc74b3172c939f4cca2eb7c59584061d994b748d66f3b9787db7cfb0e3ceeb3e9148deee9bd18acabafd4020fc80195025a1ba2fd456887829b11c7bfb44a6ae1d831c30979e700405c70b9b4e2e134b96ee425a6e006baa12b84509cd616351c72fff8b4787f100b70d9084d6e39"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x3f, 0x20}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0xac, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfffc}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x5, 0x20, 0x3, 0x10, 0x2}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x8, [{0xe0, &(0x7f0000000700)=@string={0xe0, 0x3, "cef46682a72db9ed1e282e744ade2c14b9e47750de20b85861fd9b67ce4af5c3be55154ca2420847b5f387e7a541d4157480e7a01bfde4c88f9d39196c18cdaf002ac315009ee95e5a219fd7c2374fb1df2e5bd373829cda92876a8f9869f43a0d3fdc4c8c161424a6f2ab741c0e612278ba4a575f9f49051cb10662dc2b18efac54b4b6aa715355e0238a3957fba640c40789171c450ae5b664a321785701114e157c5a23a50b2a7258d1a51d026e989004cffba93564a5e6467f4c6bb00739af2148aacb1a7a697e000648b039ac83c2b1fcf04744cb36b85011e2ad30"}}, {0xf3, &(0x7f0000000800)=@string={0xf3, 0x3, "904a34f8eb6cae9ccf46b33ab1b528dd02b0911dab7f90e839b7e2a3d2923991f4db1d7a1b1fcaa18b023e2374c2e0376d04807e60dd6114d37e540d994691ecfb32ccf140766fe108b853e099f6a94cb672520d54fab2431831d53ecbdfbd668d0f6b9bd1ed1c65844adfe107a3ccccaf925af62ac034b6571f99a68b486609d7ce81bf8b8e7c9cf77d81270ce7b8eeb04e9bde15b9a94dc7171954caa9fb565c1f1f54946ffe8a3826e6a5fff0edb025705f53358a99926e5ffedbacfb65330e68b91c201bd3d7a2192dcf81215985566270144405ea8a44b02c618411393d459b6ee46f404eb591ed1b5aefc3250244"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44d}}, {0xac, &(0x7f0000000940)=@string={0xac, 0x3, "ff2e08f755b7ac18548a291d43aa628d49477aacc6979992ddf88e4e3c9098889ab4da8051f23aa98fd6184a9aed5dfd4d45290466869884f1415da8b9bc068026842fdb86f9812ab82a4e1c8e34b4c9b5b81eece34e56737096779e96ab883923fabe487b51bfa7d0215277fbf604e2c5202a83c35108d84ec39e6ed20388a0affb094f74dc4b471552eea900354cae5f70bfb6e8f787da218829e46b417245e562fc0591f356e29409"}}, {0xb, &(0x7f0000000a00)=@string={0xb, 0x3, "2ec84a909b725903e8"}}, {0xea, &(0x7f0000000a40)=@string={0xea, 0x3, "50f395a529b303b1c35abdae56297154a5afafbada5639a6900594afa88662700c0e67dcc0fda5116c7795bb37b05fa752124eda3f5b919de4e473012147b192bd050b074478dbadb5433297890d24f40a20273507b820139ac192ceb92d4a969aac73dc5ec4d4d06ca2c40436ca346b3efe31189f83d62a8757df90d65565b64bf497ad6e8ed3d081000202f247a658f3688a42d7802023cac4b7e3093c31cabf1f7f691fa6af36174641e01e3346e54ae539ef4cd8c1f90c6f6b2760098b2edd99d674ffb21e5ee0cb24f8186529711127fd6290327753f45bac247767c2275543e6f5f15cbbe8"}}, {0xd1, &(0x7f0000000b40)=@string={0xd1, 0x3, "69329cbe210b3b8faeb377e401abdd474c59c3c846b80e86b01eaaddf5d4d5ff962e63d531fa3972f663960bba847ee20d8191ee4c3af821e42d08275090222b447ee0f1331b4f95afaef4ad4b8c4e65847876c0a7ddf8d596b8b0bc3879e300ab7fd7786204fbf5f59d4c0c0878bc311b7c83f3e6cd229b3ac688cdb7e2aea190d064c36a2d9436e41a374080e6c9efc10ee498a0834252dcc872986cc61fdf8be752d1a5e45ad270d2c3ac386784ec8e57203f6467b84bced5d8d0e319420c277fdb2c4d68c7e3cb6c46d0a9243a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(r5, 0x80, 0xeb, &(0x7f0000000d00)="aaa4788cdbe61c9e0318a5f765bd6556c01fe578924d81926bb871d51f14d77294f6f6db1ff89e14dd3f093f28595ec82fffdd25f84506f9d82a05378cd1cd30bf4850c8aa0cd93809746fb3b64398736e6931ec75e0f643c26b3fe252cfd66d8b0db6dd9cabaab8d7cc258f0172184c0fafbf5237187d4c9a41a14b90e09590f7778062ef6f2789710812b3a41caa8d18a2cfcb0e082eaff9a660a6cab6cfe6a2702232a2a1a879d4e0568d61668b350400dc722b46ed92dbf687aed53b1d7a4e6861f7e67ac29ee379ad570c6de867901da458ddac28d2ae1e8706decff0921082624166996f706be270") socketpair(0x26, 0x1, 0xfff, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x80, 0x1000]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1, 0x24010, r1, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000f40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xbb4e) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000804}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) 03:59:53 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:53 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x20008000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/pcmcia_socket', 0x402200, 0x46) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x2c, 0x7ff}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1f, 0x6e, 0xfff, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10000, 0x8000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4004) socketpair(0x11, 0x3, 0x5, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044085}, 0x8900) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket$netlink(0x10, 0x3, 0x8) 03:59:53 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r5, 0x20eb2dc49cd97d84, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x404e085) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008090) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x7f, 0x5, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x700, 0xa7, 0x48c0}}) 03:59:53 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x24040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/21, 0x15, 0x0, &(0x7f00000002c0)=""/62, 0x3e}, &(0x7f0000000340)=0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="83b1a929271fca549561fa231b2a6050", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "7d1dfd1d3bf8155f", "ef89c2201fe702e180839bda380bb8a0934a24f3c82c5b5bb4979e88e8703ea9", "179c1b06", "da3c3e846bd0bb6a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), 0x4) iopl(0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/5, 0x5, 0x0, &(0x7f0000000500)=""/26, 0x1a}, &(0x7f0000000580)=0x40) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x30100, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000600)={0xb}) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xfc1091445819d2eb}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x258, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2592}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0xe36be3f1f40b7448) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000e40)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/184, 0xb8, 0x0, &(0x7f0000000d40)=""/222, 0xde}, &(0x7f0000000e80)=0x40) 03:59:53 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000b00)={&(0x7f0000000800), 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x23c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x24, 0x6, 0x12, 0x6c, 0x1b, 0x3b, 0xc, 0xc, 0x7, 0x9, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe21d, 0x100, 0x40, 0x3, 0x1, 0x5, 0xbb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x1}, {0x5, 0xa}, {0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x2}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {}, {0x6, 0x9}, {0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x40, 0x7ff, 0x9, 0x80, 0xa000, 0x1000]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0xfff, 0x4, 0x3, 0x100, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x2c, 0x3, 0x1, 0x36, 0x6c, 0x4, 0x5, 0x1b, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x24, 0x24, 0x69, 0x4, 0x48, 0xc, 0x28, 0x6c, 0x36, 0x24, 0x60, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x0, 0x5, 0x8000, 0x8, 0xc7d, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x5}, {0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x18, 0x6c, 0x2, 0x36, 0x2, 0x12, 0x72, 0x5, 0x60, 0x1, 0x36, 0x4, 0x1, 0x1, 0x2, 0x60, 0x1b, 0x5, 0x3, 0x9, 0x12, 0x1]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x200400c4) write$cgroup_devices(r1, &(0x7f0000000b40)={'a', ' *:* ', 'rwm\x00'}, 0xa) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000805) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000001ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000000d40)={0x1104, r7, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x89, 0xac, "9ff71cd6c31b8a2ef1b8ef63cb2ed806895a6430b9b46c75ac2a36e2ea6606f04e48e5c0b253df451491ce32ab435e354aa7d5f3ea64f283c06d90698ba8a88cd13d3c6c07cc2e082964e4abc14c6c56e5839b04b2207e196fb18fd03220bd33ae52485c2a0f1ea506425fb6e9623604d250ce9f8c0b3c1e18e593032fedf4931c7a99eb37"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0x30, 0x1}, {0x1b, 0x1}, {0xc, 0x1}, {0x3, 0x1}, {0x16}, {0x1b, 0x1}, {0x3}, {0x12}, {0x30, 0x1}, {0x4}, {0x1, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2f0}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x8000, 0x6, 0xeb5e, 0xf53, 0x1ff, 0x5, 0x1ff]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4f1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x1104}, 0x1, 0x0, 0x0, 0xc3fd1e81e39228c6}, 0x400c0) 03:59:53 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0xb65d000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x400, 0x2, 0x1fc8569}) r2 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x1, 0x3}, {0x5, 0x4}, 0x21e1}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/snd_pcm', 0x20082, 0x10) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x58814}, 0x200008c1) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x4}, {0x8, 0x2}, {}, {0x1, 0x5}, {0x29, 0x5}, {0x8, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x8}, {0x3f, 0x7}, {0x8, 0x4}], "57a2fcb49dadf706"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x50}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/bus/hid', 0x400400, 0x50) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000740)=0x3, 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x40) 03:59:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4001) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xf9, 0x3ff, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x943}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x28000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/snd_hda_codec', 0xc0000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x58e40bf8621b2c9f, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x4000080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0}, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf916575f10d5cf35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl1\x00', r6, 0x29, 0x2, 0x8f, 0xffff080c, 0x7c, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0x8, 0x80000001}}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x565}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1) [ 154.070095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.071906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:59:53 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:54 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:54 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r5, 0x20eb2dc49cd97d84, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x404e085) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008090) 03:59:54 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4001) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xf9, 0x3ff, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x943}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x28000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/snd_hda_codec', 0xc0000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x58e40bf8621b2c9f, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x4000080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0}, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf916575f10d5cf35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl1\x00', r6, 0x29, 0x2, 0x8f, 0xffff080c, 0x7c, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0x8, 0x80000001}}) 03:59:54 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x24040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/21, 0x15, 0x0, &(0x7f00000002c0)=""/62, 0x3e}, &(0x7f0000000340)=0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="83b1a929271fca549561fa231b2a6050", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "7d1dfd1d3bf8155f", "ef89c2201fe702e180839bda380bb8a0934a24f3c82c5b5bb4979e88e8703ea9", "179c1b06", "da3c3e846bd0bb6a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), 0x4) iopl(0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/5, 0x5, 0x0, &(0x7f0000000500)=""/26, 0x1a}, &(0x7f0000000580)=0x40) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x30100, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000600)={0xb}) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xfc1091445819d2eb}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x258, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2592}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0xe36be3f1f40b7448) 03:59:54 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000b00)={&(0x7f0000000800), 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x23c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x24, 0x6, 0x12, 0x6c, 0x1b, 0x3b, 0xc, 0xc, 0x7, 0x9, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe21d, 0x100, 0x40, 0x3, 0x1, 0x5, 0xbb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x1}, {0x5, 0xa}, {0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x2}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {}, {0x6, 0x9}, {0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x40, 0x7ff, 0x9, 0x80, 0xa000, 0x1000]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0xfff, 0x4, 0x3, 0x100, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x2c, 0x3, 0x1, 0x36, 0x6c, 0x4, 0x5, 0x1b, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x24, 0x24, 0x69, 0x4, 0x48, 0xc, 0x28, 0x6c, 0x36, 0x24, 0x60, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x0, 0x5, 0x8000, 0x8, 0xc7d, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x5}, {0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x18, 0x6c, 0x2, 0x36, 0x2, 0x12, 0x72, 0x5, 0x60, 0x1, 0x36, 0x4, 0x1, 0x1, 0x2, 0x60, 0x1b, 0x5, 0x3, 0x9, 0x12, 0x1]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x200400c4) write$cgroup_devices(r1, &(0x7f0000000b40)={'a', ' *:* ', 'rwm\x00'}, 0xa) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000805) 03:59:54 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:54 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0xb65d000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x400, 0x2, 0x1fc8569}) r2 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x1, 0x3}, {0x5, 0x4}, 0x21e1}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/snd_pcm', 0x20082, 0x10) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x58814}, 0x200008c1) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x4}, {0x8, 0x2}, {}, {0x1, 0x5}, {0x29, 0x5}, {0x8, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x8}, {0x3f, 0x7}, {0x8, 0x4}], "57a2fcb49dadf706"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x50}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/bus/hid', 0x400400, 0x50) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000740)=0x3, 0x4) 03:59:54 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x20008000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/pcmcia_socket', 0x402200, 0x46) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x2c, 0x7ff}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1f, 0x6e, 0xfff, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10000, 0x8000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4004) socketpair(0x11, 0x3, 0x5, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044085}, 0x8900) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r6) socket$netlink(0x10, 0x3, 0x8) 03:59:54 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 03:59:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x310, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fe6000/0x14000)=nil, &(0x7f0000000180)="5c7d04d96d550889f48e5ea419eb2ccad3e9d584d3cad99d57eab93986bc5c467b0e5e9f65e5d7c5b11ace4550cfb2d01bb2757cf9dee2304f455e28a7b52a10b760554d2a831b118d88b4dbc9c63ea1752da3587bc3541d2617f008c1f28bf5becaa04ba613a9117369f7", 0x6b}, 0x68) remap_file_pages(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x1, 0x4000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/hwmon', 0x0, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x53c0}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4008010) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r3) pkey_free(r3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4000) r5 = syz_usb_connect(0x2, 0x119, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xf6, 0x52, 0x24, 0x10, 0x10b8, 0x1bb2, 0x682e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x7f, 0x8, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x4, 0xa7, 0x7e, 0x56, 0x8, [@hid_hid={0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x4f5}}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xdd, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x7, 0x90, [@generic={0xc1, 0x23, "cd1be1f12bc4ff85b23ca914c0b621b218afdbafd0a4360112420781d850a7f043eca5090a2f6d32d80784e2eed0871d0ee46c518496a432ebf6a126afca4cb3fc50904a2ffcf7c949e6a66e4f9eec248cc74b3172c939f4cca2eb7c59584061d994b748d66f3b9787db7cfb0e3ceeb3e9148deee9bd18acabafd4020fc80195025a1ba2fd456887829b11c7bfb44a6ae1d831c30979e700405c70b9b4e2e134b96ee425a6e006baa12b84509cd616351c72fff8b4787f100b70d9084d6e39"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x3f, 0x20}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0xac, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfffc}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x5, 0x20, 0x3, 0x10, 0x2}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x8, [{0xe0, &(0x7f0000000700)=@string={0xe0, 0x3, "cef46682a72db9ed1e282e744ade2c14b9e47750de20b85861fd9b67ce4af5c3be55154ca2420847b5f387e7a541d4157480e7a01bfde4c88f9d39196c18cdaf002ac315009ee95e5a219fd7c2374fb1df2e5bd373829cda92876a8f9869f43a0d3fdc4c8c161424a6f2ab741c0e612278ba4a575f9f49051cb10662dc2b18efac54b4b6aa715355e0238a3957fba640c40789171c450ae5b664a321785701114e157c5a23a50b2a7258d1a51d026e989004cffba93564a5e6467f4c6bb00739af2148aacb1a7a697e000648b039ac83c2b1fcf04744cb36b85011e2ad30"}}, {0xf3, &(0x7f0000000800)=@string={0xf3, 0x3, "904a34f8eb6cae9ccf46b33ab1b528dd02b0911dab7f90e839b7e2a3d2923991f4db1d7a1b1fcaa18b023e2374c2e0376d04807e60dd6114d37e540d994691ecfb32ccf140766fe108b853e099f6a94cb672520d54fab2431831d53ecbdfbd668d0f6b9bd1ed1c65844adfe107a3ccccaf925af62ac034b6571f99a68b486609d7ce81bf8b8e7c9cf77d81270ce7b8eeb04e9bde15b9a94dc7171954caa9fb565c1f1f54946ffe8a3826e6a5fff0edb025705f53358a99926e5ffedbacfb65330e68b91c201bd3d7a2192dcf81215985566270144405ea8a44b02c618411393d459b6ee46f404eb591ed1b5aefc3250244"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44d}}, {0xac, &(0x7f0000000940)=@string={0xac, 0x3, "ff2e08f755b7ac18548a291d43aa628d49477aacc6979992ddf88e4e3c9098889ab4da8051f23aa98fd6184a9aed5dfd4d45290466869884f1415da8b9bc068026842fdb86f9812ab82a4e1c8e34b4c9b5b81eece34e56737096779e96ab883923fabe487b51bfa7d0215277fbf604e2c5202a83c35108d84ec39e6ed20388a0affb094f74dc4b471552eea900354cae5f70bfb6e8f787da218829e46b417245e562fc0591f356e29409"}}, {0xb, &(0x7f0000000a00)=@string={0xb, 0x3, "2ec84a909b725903e8"}}, {0xea, &(0x7f0000000a40)=@string={0xea, 0x3, "50f395a529b303b1c35abdae56297154a5afafbada5639a6900594afa88662700c0e67dcc0fda5116c7795bb37b05fa752124eda3f5b919de4e473012147b192bd050b074478dbadb5433297890d24f40a20273507b820139ac192ceb92d4a969aac73dc5ec4d4d06ca2c40436ca346b3efe31189f83d62a8757df90d65565b64bf497ad6e8ed3d081000202f247a658f3688a42d7802023cac4b7e3093c31cabf1f7f691fa6af36174641e01e3346e54ae539ef4cd8c1f90c6f6b2760098b2edd99d674ffb21e5ee0cb24f8186529711127fd6290327753f45bac247767c2275543e6f5f15cbbe8"}}, {0xd1, &(0x7f0000000b40)=@string={0xd1, 0x3, "69329cbe210b3b8faeb377e401abdd474c59c3c846b80e86b01eaaddf5d4d5ff962e63d531fa3972f663960bba847ee20d8191ee4c3af821e42d08275090222b447ee0f1331b4f95afaef4ad4b8c4e65847876c0a7ddf8d596b8b0bc3879e300ab7fd7786204fbf5f59d4c0c0878bc311b7c83f3e6cd229b3ac688cdb7e2aea190d064c36a2d9436e41a374080e6c9efc10ee498a0834252dcc872986cc61fdf8be752d1a5e45ad270d2c3ac386784ec8e57203f6467b84bced5d8d0e319420c277fdb2c4d68c7e3cb6c46d0a9243a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(r5, 0x80, 0xeb, &(0x7f0000000d00)="aaa4788cdbe61c9e0318a5f765bd6556c01fe578924d81926bb871d51f14d77294f6f6db1ff89e14dd3f093f28595ec82fffdd25f84506f9d82a05378cd1cd30bf4850c8aa0cd93809746fb3b64398736e6931ec75e0f643c26b3fe252cfd66d8b0db6dd9cabaab8d7cc258f0172184c0fafbf5237187d4c9a41a14b90e09590f7778062ef6f2789710812b3a41caa8d18a2cfcb0e082eaff9a660a6cab6cfe6a2702232a2a1a879d4e0568d61668b350400dc722b46ed92dbf687aed53b1d7a4e6861f7e67ac29ee379ad570c6de867901da458ddac28d2ae1e8706decff0921082624166996f706be270") socketpair(0x26, 0x1, 0xfff, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x80, 0x1000]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1, 0x24010, r1, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000f40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xbb4e) 03:59:54 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r5, 0x20eb2dc49cd97d84, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x404e085) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) [ 154.996277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.997421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 03:59:54 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r4, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r7, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) r8 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:00:07 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x310, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fe6000/0x14000)=nil, &(0x7f0000000180)="5c7d04d96d550889f48e5ea419eb2ccad3e9d584d3cad99d57eab93986bc5c467b0e5e9f65e5d7c5b11ace4550cfb2d01bb2757cf9dee2304f455e28a7b52a10b760554d2a831b118d88b4dbc9c63ea1752da3587bc3541d2617f008c1f28bf5becaa04ba613a9117369f7", 0x6b}, 0x68) remap_file_pages(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x1, 0x4000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/hwmon', 0x0, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x53c0}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4008010) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r3) pkey_free(r3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4000) r5 = syz_usb_connect(0x2, 0x119, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xf6, 0x52, 0x24, 0x10, 0x10b8, 0x1bb2, 0x682e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x7f, 0x8, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x4, 0xa7, 0x7e, 0x56, 0x8, [@hid_hid={0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x4f5}}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xdd, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x7, 0x90, [@generic={0xc1, 0x23, "cd1be1f12bc4ff85b23ca914c0b621b218afdbafd0a4360112420781d850a7f043eca5090a2f6d32d80784e2eed0871d0ee46c518496a432ebf6a126afca4cb3fc50904a2ffcf7c949e6a66e4f9eec248cc74b3172c939f4cca2eb7c59584061d994b748d66f3b9787db7cfb0e3ceeb3e9148deee9bd18acabafd4020fc80195025a1ba2fd456887829b11c7bfb44a6ae1d831c30979e700405c70b9b4e2e134b96ee425a6e006baa12b84509cd616351c72fff8b4787f100b70d9084d6e39"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x3f, 0x20}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0xac, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfffc}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x5, 0x20, 0x3, 0x10, 0x2}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x8, [{0xe0, &(0x7f0000000700)=@string={0xe0, 0x3, "cef46682a72db9ed1e282e744ade2c14b9e47750de20b85861fd9b67ce4af5c3be55154ca2420847b5f387e7a541d4157480e7a01bfde4c88f9d39196c18cdaf002ac315009ee95e5a219fd7c2374fb1df2e5bd373829cda92876a8f9869f43a0d3fdc4c8c161424a6f2ab741c0e612278ba4a575f9f49051cb10662dc2b18efac54b4b6aa715355e0238a3957fba640c40789171c450ae5b664a321785701114e157c5a23a50b2a7258d1a51d026e989004cffba93564a5e6467f4c6bb00739af2148aacb1a7a697e000648b039ac83c2b1fcf04744cb36b85011e2ad30"}}, {0xf3, &(0x7f0000000800)=@string={0xf3, 0x3, "904a34f8eb6cae9ccf46b33ab1b528dd02b0911dab7f90e839b7e2a3d2923991f4db1d7a1b1fcaa18b023e2374c2e0376d04807e60dd6114d37e540d994691ecfb32ccf140766fe108b853e099f6a94cb672520d54fab2431831d53ecbdfbd668d0f6b9bd1ed1c65844adfe107a3ccccaf925af62ac034b6571f99a68b486609d7ce81bf8b8e7c9cf77d81270ce7b8eeb04e9bde15b9a94dc7171954caa9fb565c1f1f54946ffe8a3826e6a5fff0edb025705f53358a99926e5ffedbacfb65330e68b91c201bd3d7a2192dcf81215985566270144405ea8a44b02c618411393d459b6ee46f404eb591ed1b5aefc3250244"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44d}}, {0xac, &(0x7f0000000940)=@string={0xac, 0x3, "ff2e08f755b7ac18548a291d43aa628d49477aacc6979992ddf88e4e3c9098889ab4da8051f23aa98fd6184a9aed5dfd4d45290466869884f1415da8b9bc068026842fdb86f9812ab82a4e1c8e34b4c9b5b81eece34e56737096779e96ab883923fabe487b51bfa7d0215277fbf604e2c5202a83c35108d84ec39e6ed20388a0affb094f74dc4b471552eea900354cae5f70bfb6e8f787da218829e46b417245e562fc0591f356e29409"}}, {0xb, &(0x7f0000000a00)=@string={0xb, 0x3, "2ec84a909b725903e8"}}, {0xea, &(0x7f0000000a40)=@string={0xea, 0x3, "50f395a529b303b1c35abdae56297154a5afafbada5639a6900594afa88662700c0e67dcc0fda5116c7795bb37b05fa752124eda3f5b919de4e473012147b192bd050b074478dbadb5433297890d24f40a20273507b820139ac192ceb92d4a969aac73dc5ec4d4d06ca2c40436ca346b3efe31189f83d62a8757df90d65565b64bf497ad6e8ed3d081000202f247a658f3688a42d7802023cac4b7e3093c31cabf1f7f691fa6af36174641e01e3346e54ae539ef4cd8c1f90c6f6b2760098b2edd99d674ffb21e5ee0cb24f8186529711127fd6290327753f45bac247767c2275543e6f5f15cbbe8"}}, {0xd1, &(0x7f0000000b40)=@string={0xd1, 0x3, "69329cbe210b3b8faeb377e401abdd474c59c3c846b80e86b01eaaddf5d4d5ff962e63d531fa3972f663960bba847ee20d8191ee4c3af821e42d08275090222b447ee0f1331b4f95afaef4ad4b8c4e65847876c0a7ddf8d596b8b0bc3879e300ab7fd7786204fbf5f59d4c0c0878bc311b7c83f3e6cd229b3ac688cdb7e2aea190d064c36a2d9436e41a374080e6c9efc10ee498a0834252dcc872986cc61fdf8be752d1a5e45ad270d2c3ac386784ec8e57203f6467b84bced5d8d0e319420c277fdb2c4d68c7e3cb6c46d0a9243a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(r5, 0x80, 0xeb, &(0x7f0000000d00)="aaa4788cdbe61c9e0318a5f765bd6556c01fe578924d81926bb871d51f14d77294f6f6db1ff89e14dd3f093f28595ec82fffdd25f84506f9d82a05378cd1cd30bf4850c8aa0cd93809746fb3b64398736e6931ec75e0f643c26b3fe252cfd66d8b0db6dd9cabaab8d7cc258f0172184c0fafbf5237187d4c9a41a14b90e09590f7778062ef6f2789710812b3a41caa8d18a2cfcb0e082eaff9a660a6cab6cfe6a2702232a2a1a879d4e0568d61668b350400dc722b46ed92dbf687aed53b1d7a4e6861f7e67ac29ee379ad570c6de867901da458ddac28d2ae1e8706decff0921082624166996f706be270") socketpair(0x26, 0x1, 0xfff, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x80, 0x1000]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1, 0x24010, r1, 0x0) 04:00:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4001) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xf9, 0x3ff, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x943}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x28000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/snd_hda_codec', 0xc0000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x58e40bf8621b2c9f, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x4000080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0}, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf916575f10d5cf35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4800) 04:00:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x20008000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/pcmcia_socket', 0x402200, 0x46) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x2c, 0x7ff}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1f, 0x6e, 0xfff, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10000, 0x8000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4004) socketpair(0x11, 0x3, 0x5, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044085}, 0x8900) socket$netlink(0x10, 0x3, 0x8) 04:00:07 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r4, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r7, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) r8 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:00:07 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x24040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/21, 0x15, 0x0, &(0x7f00000002c0)=""/62, 0x3e}, &(0x7f0000000340)=0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="83b1a929271fca549561fa231b2a6050", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "7d1dfd1d3bf8155f", "ef89c2201fe702e180839bda380bb8a0934a24f3c82c5b5bb4979e88e8703ea9", "179c1b06", "da3c3e846bd0bb6a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), 0x4) iopl(0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/5, 0x5, 0x0, &(0x7f0000000500)=""/26, 0x1a}, &(0x7f0000000580)=0x40) openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x30100, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xfc1091445819d2eb}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x258, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2592}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0xe36be3f1f40b7448) 04:00:07 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r5, 0x20eb2dc49cd97d84, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x404e085) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) 04:00:07 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0xb65d000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x400, 0x2, 0x1fc8569}) r2 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x1, 0x3}, {0x5, 0x4}, 0x21e1}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/snd_pcm', 0x20082, 0x10) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x58814}, 0x200008c1) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x4}, {0x8, 0x2}, {}, {0x1, 0x5}, {0x29, 0x5}, {0x8, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x8}, {0x3f, 0x7}, {0x8, 0x4}], "57a2fcb49dadf706"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x50}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/bus/hid', 0x400400, 0x50) 04:00:07 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000b00)={&(0x7f0000000800), 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x23c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x24, 0x6, 0x12, 0x6c, 0x1b, 0x3b, 0xc, 0xc, 0x7, 0x9, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe21d, 0x100, 0x40, 0x3, 0x1, 0x5, 0xbb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x1}, {0x5, 0xa}, {0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x2}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {}, {0x6, 0x9}, {0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x40, 0x7ff, 0x9, 0x80, 0xa000, 0x1000]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0xfff, 0x4, 0x3, 0x100, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x2c, 0x3, 0x1, 0x36, 0x6c, 0x4, 0x5, 0x1b, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x24, 0x24, 0x69, 0x4, 0x48, 0xc, 0x28, 0x6c, 0x36, 0x24, 0x60, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x0, 0x5, 0x8000, 0x8, 0xc7d, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x5}, {0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x18, 0x6c, 0x2, 0x36, 0x2, 0x12, 0x72, 0x5, 0x60, 0x1, 0x36, 0x4, 0x1, 0x1, 0x2, 0x60, 0x1b, 0x5, 0x3, 0x9, 0x12, 0x1]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x200400c4) write$cgroup_devices(r1, &(0x7f0000000b40)={'a', ' *:* ', 'rwm\x00'}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) 04:00:07 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r4, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r7, 0x0, &(0x7f0000000140)="23e271993bae6f0009e143ef43fa765da7925e26b215fe0f26d122bf8dd13a8cd0822b1f2b078720b93f58ff103d97597ae51a940a2b3ae106823355f603e8e60a0ccaf170f103494a234ed3cc6526d3fad046f0b846328cd0c813a6fe4a", 0x5e, 0x8000, 0x1}, 0x8) r8 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) [ 167.713248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.721335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.641992] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.642093] Bluetooth: hci2: command 0x0406 tx timeout [ 179.643065] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.644041] Bluetooth: hci1: command 0x0406 tx timeout [ 179.644720] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.644731] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.645776] Bluetooth: hci5: command 0x0406 tx timeout [ 179.647744] Call Trace: [ 179.648951] Bluetooth: hci0: command 0x0406 tx timeout [ 179.649754] [ 179.650172] Bluetooth: hci7: command 0x0406 tx timeout [ 179.651061] __schedule+0x893/0x2470 [ 179.651394] Bluetooth: hci3: command 0x0406 tx timeout [ 179.652205] ? io_schedule_timeout+0x150/0x150 [ 179.652728] Bluetooth: hci6: command 0x0406 tx timeout [ 179.653433] ? do_raw_spin_lock+0x121/0x260 [ 179.654133] Bluetooth: hci4: command 0x0406 tx timeout [ 179.654911] ? rwlock_bug.part.0+0x90/0x90 [ 179.656961] schedule+0xda/0x1b0 [ 179.657458] rescuer_thread+0x851/0xdb0 [ 179.658076] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.658819] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.659536] ? lockdep_hardirqs_on+0x79/0x100 [ 179.660204] ? worker_thread+0x1260/0x1260 [ 179.660846] kthread+0x2ed/0x3a0 [ 179.661343] ? kthread_complete_and_exit+0x40/0x40 [ 179.662070] ret_from_fork+0x22/0x30 [ 179.662631] [ 179.663020] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.663945] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.664683] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.665752] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.666970] Call Trace: [ 179.667343] [ 179.667675] __schedule+0x893/0x2470 [ 179.668257] ? io_schedule_timeout+0x150/0x150 [ 179.668932] ? do_raw_spin_lock+0x121/0x260 [ 179.669554] ? rwlock_bug.part.0+0x90/0x90 [ 179.670204] schedule+0xda/0x1b0 [ 179.670698] rescuer_thread+0x851/0xdb0 [ 179.671324] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.672069] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.672776] ? lockdep_hardirqs_on+0x79/0x100 [ 179.673453] ? worker_thread+0x1260/0x1260 [ 179.674097] kthread+0x2ed/0x3a0 [ 179.674588] ? kthread_complete_and_exit+0x40/0x40 [ 179.675345] ret_from_fork+0x22/0x30 [ 179.675931] [ 179.676272] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.677219] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.677994] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.679087] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.680273] Call Trace: [ 179.680638] [ 179.681025] __schedule+0x893/0x2470 [ 179.681636] ? io_schedule_timeout+0x150/0x150 [ 179.682387] ? do_raw_spin_lock+0x121/0x260 [ 179.683129] ? rwlock_bug.part.0+0x90/0x90 [ 179.683836] schedule+0xda/0x1b0 [ 179.684359] rescuer_thread+0x851/0xdb0 [ 179.685029] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.685870] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.686640] ? lockdep_hardirqs_on+0x79/0x100 [ 179.687378] ? worker_thread+0x1260/0x1260 [ 179.688084] kthread+0x2ed/0x3a0 [ 179.688622] ? kthread_complete_and_exit+0x40/0x40 [ 179.689414] ret_from_fork+0x22/0x30 [ 179.690064] [ 179.690438] INFO: task netns:6 blocked for more than 143 seconds. [ 179.691400] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.692238] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.693418] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.694752] Call Trace: [ 179.695204] [ 179.695580] __schedule+0x893/0x2470 [ 179.696227] ? io_schedule_timeout+0x150/0x150 [ 179.696989] ? do_raw_spin_lock+0x121/0x260 [ 179.697648] ? rwlock_bug.part.0+0x90/0x90 [ 179.698369] schedule+0xda/0x1b0 [ 179.698930] rescuer_thread+0x851/0xdb0 [ 179.699562] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.700384] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.701193] ? lockdep_hardirqs_on+0x79/0x100 [ 179.701924] ? worker_thread+0x1260/0x1260 [ 179.702612] kthread+0x2ed/0x3a0 [ 179.703208] ? kthread_complete_and_exit+0x40/0x40 [ 179.704029] ret_from_fork+0x22/0x30 [ 179.704637] [ 179.705045] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 179.706095] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.706974] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.708181] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 179.709500] Workqueue: 0x0 (ata_sff) [ 179.710116] Call Trace: [ 179.710527] [ 179.710948] __schedule+0x893/0x2470 [ 179.711562] ? io_schedule_timeout+0x150/0x150 [ 179.712315] schedule+0xda/0x1b0 [ 179.712913] worker_thread+0x15f/0x1260 [ 179.713588] ? process_one_work+0x16a0/0x16a0 [ 179.714346] kthread+0x2ed/0x3a0 [ 179.714949] ? kthread_complete_and_exit+0x40/0x40 [ 179.715706] ret_from_fork+0x22/0x30 [ 179.716379] [ 179.716756] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.717842] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.718650] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.719864] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 179.721183] Workqueue: 0x0 (kblockd) [ 179.721838] Call Trace: [ 179.722249] [ 179.722610] __schedule+0x893/0x2470 [ 179.723265] ? io_schedule_timeout+0x150/0x150 [ 179.724025] schedule+0xda/0x1b0 [ 179.724562] worker_thread+0x15f/0x1260 [ 179.725273] ? process_one_work+0x16a0/0x16a0 [ 179.726019] kthread+0x2ed/0x3a0 [ 179.726569] ? kthread_complete_and_exit+0x40/0x40 [ 179.727410] ret_from_fork+0x22/0x30 [ 179.728045] [ 179.728426] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.729497] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.730318] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.731546] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.732881] Call Trace: [ 179.733291] [ 179.733664] __schedule+0x893/0x2470 [ 179.734313] ? io_schedule_timeout+0x150/0x150 [ 179.735059] ? do_raw_spin_lock+0x121/0x260 [ 179.735744] ? rwlock_bug.part.0+0x90/0x90 [ 179.736460] schedule+0xda/0x1b0 [ 179.737041] rescuer_thread+0x851/0xdb0 [ 179.737689] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.738511] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.739353] ? lockdep_hardirqs_on+0x79/0x100 [ 179.740102] ? worker_thread+0x1260/0x1260 [ 179.740758] kthread+0x2ed/0x3a0 [ 179.741302] ? kthread_complete_and_exit+0x40/0x40 [ 179.742123] ret_from_fork+0x22/0x30 [ 179.742731] [ 179.785844] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.786997] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.787873] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.789086] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.790399] Call Trace: [ 179.790835] [ 179.791204] __schedule+0x893/0x2470 [ 179.791845] ? io_schedule_timeout+0x150/0x150 [ 179.792582] ? mark_held_locks+0x9e/0xe0 [ 179.793262] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.794099] schedule+0xda/0x1b0 [ 179.794643] rcu_tasks_one_gp+0x3db/0xc10 [ 179.795387] rcu_tasks_kthread+0x80/0xa0 [ 179.796071] ? rcu_tasks_postscan+0x10/0x10 [ 179.796749] kthread+0x2ed/0x3a0 [ 179.797327] ? kthread_complete_and_exit+0x40/0x40 [ 179.798131] ret_from_fork+0x22/0x30 [ 179.798750] [ 179.799165] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.800237] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.801087] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.802314] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 179.803629] Workqueue: 0x0 (events_highpri) [ 179.804363] Call Trace: [ 179.804758] [ 179.805167] __schedule+0x893/0x2470 [ 179.805822] ? io_schedule_timeout+0x150/0x150 [ 179.806578] schedule+0xda/0x1b0 [ 179.807164] worker_thread+0x15f/0x1260 [ 179.807878] ? process_one_work+0x16a0/0x16a0 [ 179.808575] kthread+0x2ed/0x3a0 [ 179.809143] ? kthread_complete_and_exit+0x40/0x40 [ 179.809960] ret_from_fork+0x22/0x30 [ 179.810587] [ 179.811016] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.812104] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.812949] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.814163] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.815490] Call Trace: [ 179.815929] [ 179.816287] __schedule+0x893/0x2470 [ 179.816933] ? io_schedule_timeout+0x150/0x150 [ 179.817649] ? do_raw_spin_lock+0x121/0x260 [ 179.818381] ? rwlock_bug.part.0+0x90/0x90 [ 179.819114] schedule+0xda/0x1b0 [ 179.819619] rescuer_thread+0x851/0xdb0 [ 179.820289] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.821131] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.821956] ? lockdep_hardirqs_on+0x79/0x100 [ 179.822626] ? worker_thread+0x1260/0x1260 [ 179.823349] kthread+0x2ed/0x3a0 [ 179.823883] ? kthread_complete_and_exit+0x40/0x40 [ 179.824663] ret_from_fork+0x22/0x30 [ 179.825266] [ 179.825679] [ 179.825679] Showing all locks held in the system: [ 179.826556] 1 lock held by rcu_tasks_kthre/11: [ 179.827227] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.828618] 1 lock held by khungtaskd/25: [ 179.829221] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.830525] 2 locks held by systemd-journal/112: [ 179.831237] 1 lock held by in:imklog/213: [ 179.831843] 2 locks held by syz-executor/4363: [ 179.832474] [ 179.832720] ============================================= [ 179.832720] 04:00:21 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0xb65d000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x400, 0x2, 0x1fc8569}) r2 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x1, 0x3}, {0x5, 0x4}, 0x21e1}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/snd_pcm', 0x20082, 0x10) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x58814}, 0x200008c1) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x4}, {0x8, 0x2}, {}, {0x1, 0x5}, {0x29, 0x5}, {0x8, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x8}, {0x3f, 0x7}, {0x8, 0x4}], "57a2fcb49dadf706"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x50}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 04:00:21 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r6 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:00:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x310, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fe6000/0x14000)=nil, &(0x7f0000000180)="5c7d04d96d550889f48e5ea419eb2ccad3e9d584d3cad99d57eab93986bc5c467b0e5e9f65e5d7c5b11ace4550cfb2d01bb2757cf9dee2304f455e28a7b52a10b760554d2a831b118d88b4dbc9c63ea1752da3587bc3541d2617f008c1f28bf5becaa04ba613a9117369f7", 0x6b}, 0x68) remap_file_pages(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x1, 0x4000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/hwmon', 0x0, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x53c0}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4008010) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r3) pkey_free(r3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4000) r5 = syz_usb_connect(0x2, 0x119, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xf6, 0x52, 0x24, 0x10, 0x10b8, 0x1bb2, 0x682e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x7f, 0x8, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x4, 0xa7, 0x7e, 0x56, 0x8, [@hid_hid={0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x4f5}}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xdd, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x7, 0x90, [@generic={0xc1, 0x23, "cd1be1f12bc4ff85b23ca914c0b621b218afdbafd0a4360112420781d850a7f043eca5090a2f6d32d80784e2eed0871d0ee46c518496a432ebf6a126afca4cb3fc50904a2ffcf7c949e6a66e4f9eec248cc74b3172c939f4cca2eb7c59584061d994b748d66f3b9787db7cfb0e3ceeb3e9148deee9bd18acabafd4020fc80195025a1ba2fd456887829b11c7bfb44a6ae1d831c30979e700405c70b9b4e2e134b96ee425a6e006baa12b84509cd616351c72fff8b4787f100b70d9084d6e39"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x3f, 0x20}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0xac, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfffc}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x5, 0x20, 0x3, 0x10, 0x2}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x8, [{0xe0, &(0x7f0000000700)=@string={0xe0, 0x3, "cef46682a72db9ed1e282e744ade2c14b9e47750de20b85861fd9b67ce4af5c3be55154ca2420847b5f387e7a541d4157480e7a01bfde4c88f9d39196c18cdaf002ac315009ee95e5a219fd7c2374fb1df2e5bd373829cda92876a8f9869f43a0d3fdc4c8c161424a6f2ab741c0e612278ba4a575f9f49051cb10662dc2b18efac54b4b6aa715355e0238a3957fba640c40789171c450ae5b664a321785701114e157c5a23a50b2a7258d1a51d026e989004cffba93564a5e6467f4c6bb00739af2148aacb1a7a697e000648b039ac83c2b1fcf04744cb36b85011e2ad30"}}, {0xf3, &(0x7f0000000800)=@string={0xf3, 0x3, "904a34f8eb6cae9ccf46b33ab1b528dd02b0911dab7f90e839b7e2a3d2923991f4db1d7a1b1fcaa18b023e2374c2e0376d04807e60dd6114d37e540d994691ecfb32ccf140766fe108b853e099f6a94cb672520d54fab2431831d53ecbdfbd668d0f6b9bd1ed1c65844adfe107a3ccccaf925af62ac034b6571f99a68b486609d7ce81bf8b8e7c9cf77d81270ce7b8eeb04e9bde15b9a94dc7171954caa9fb565c1f1f54946ffe8a3826e6a5fff0edb025705f53358a99926e5ffedbacfb65330e68b91c201bd3d7a2192dcf81215985566270144405ea8a44b02c618411393d459b6ee46f404eb591ed1b5aefc3250244"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44d}}, {0xac, &(0x7f0000000940)=@string={0xac, 0x3, "ff2e08f755b7ac18548a291d43aa628d49477aacc6979992ddf88e4e3c9098889ab4da8051f23aa98fd6184a9aed5dfd4d45290466869884f1415da8b9bc068026842fdb86f9812ab82a4e1c8e34b4c9b5b81eece34e56737096779e96ab883923fabe487b51bfa7d0215277fbf604e2c5202a83c35108d84ec39e6ed20388a0affb094f74dc4b471552eea900354cae5f70bfb6e8f787da218829e46b417245e562fc0591f356e29409"}}, {0xb, &(0x7f0000000a00)=@string={0xb, 0x3, "2ec84a909b725903e8"}}, {0xea, &(0x7f0000000a40)=@string={0xea, 0x3, "50f395a529b303b1c35abdae56297154a5afafbada5639a6900594afa88662700c0e67dcc0fda5116c7795bb37b05fa752124eda3f5b919de4e473012147b192bd050b074478dbadb5433297890d24f40a20273507b820139ac192ceb92d4a969aac73dc5ec4d4d06ca2c40436ca346b3efe31189f83d62a8757df90d65565b64bf497ad6e8ed3d081000202f247a658f3688a42d7802023cac4b7e3093c31cabf1f7f691fa6af36174641e01e3346e54ae539ef4cd8c1f90c6f6b2760098b2edd99d674ffb21e5ee0cb24f8186529711127fd6290327753f45bac247767c2275543e6f5f15cbbe8"}}, {0xd1, &(0x7f0000000b40)=@string={0xd1, 0x3, "69329cbe210b3b8faeb377e401abdd474c59c3c846b80e86b01eaaddf5d4d5ff962e63d531fa3972f663960bba847ee20d8191ee4c3af821e42d08275090222b447ee0f1331b4f95afaef4ad4b8c4e65847876c0a7ddf8d596b8b0bc3879e300ab7fd7786204fbf5f59d4c0c0878bc311b7c83f3e6cd229b3ac688cdb7e2aea190d064c36a2d9436e41a374080e6c9efc10ee498a0834252dcc872986cc61fdf8be752d1a5e45ad270d2c3ac386784ec8e57203f6467b84bced5d8d0e319420c277fdb2c4d68c7e3cb6c46d0a9243a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(r5, 0x80, 0xeb, &(0x7f0000000d00)="aaa4788cdbe61c9e0318a5f765bd6556c01fe578924d81926bb871d51f14d77294f6f6db1ff89e14dd3f093f28595ec82fffdd25f84506f9d82a05378cd1cd30bf4850c8aa0cd93809746fb3b64398736e6931ec75e0f643c26b3fe252cfd66d8b0db6dd9cabaab8d7cc258f0172184c0fafbf5237187d4c9a41a14b90e09590f7778062ef6f2789710812b3a41caa8d18a2cfcb0e082eaff9a660a6cab6cfe6a2702232a2a1a879d4e0568d61668b350400dc722b46ed92dbf687aed53b1d7a4e6861f7e67ac29ee379ad570c6de867901da458ddac28d2ae1e8706decff0921082624166996f706be270") socketpair(0x26, 0x1, 0xfff, &(0x7f0000000e00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1, 0x24010, r1, 0x0) 04:00:21 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x24040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/21, 0x15, 0x0, &(0x7f00000002c0)=""/62, 0x3e}, &(0x7f0000000340)=0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="83b1a929271fca549561fa231b2a6050", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "7d1dfd1d3bf8155f", "ef89c2201fe702e180839bda380bb8a0934a24f3c82c5b5bb4979e88e8703ea9", "179c1b06", "da3c3e846bd0bb6a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), 0x4) iopl(0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/5, 0x5, 0x0, &(0x7f0000000500)=""/26, 0x1a}, &(0x7f0000000580)=0x40) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xfc1091445819d2eb}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x258, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2592}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0xe36be3f1f40b7448) 04:00:21 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r5, 0x20eb2dc49cd97d84, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) 04:00:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4001) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xf9, 0x3ff, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x943}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x28000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/snd_hda_codec', 0xc0000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x58e40bf8621b2c9f, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x4000080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0}, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) 04:00:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x20008000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/pcmcia_socket', 0x402200, 0x46) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x2c, 0x7ff}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1f, 0x6e, 0xfff, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10000, 0x8000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4004) socketpair(0x11, 0x3, 0x5, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) socket$netlink(0x10, 0x3, 0x8) 04:00:21 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000b00)={&(0x7f0000000800), 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x23c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x24, 0x6, 0x12, 0x6c, 0x1b, 0x3b, 0xc, 0xc, 0x7, 0x9, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe21d, 0x100, 0x40, 0x3, 0x1, 0x5, 0xbb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x1}, {0x5, 0xa}, {0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x2}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {}, {0x6, 0x9}, {0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x40, 0x7ff, 0x9, 0x80, 0xa000, 0x1000]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0xfff, 0x4, 0x3, 0x100, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x2c, 0x3, 0x1, 0x36, 0x6c, 0x4, 0x5, 0x1b, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x24, 0x24, 0x69, 0x4, 0x48, 0xc, 0x28, 0x6c, 0x36, 0x24, 0x60, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x0, 0x5, 0x8000, 0x8, 0xc7d, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x5}, {0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x18, 0x6c, 0x2, 0x36, 0x2, 0x12, 0x72, 0x5, 0x60, 0x1, 0x36, 0x4, 0x1, 0x1, 0x2, 0x60, 0x1b, 0x5, 0x3, 0x9, 0x12, 0x1]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x200400c4) write$cgroup_devices(r1, &(0x7f0000000b40)={'a', ' *:* ', 'rwm\x00'}, 0xa) [ 181.803688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.808550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:00:21 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r6 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:00:21 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000b00)={&(0x7f0000000800), 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x23c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x24, 0x6, 0x12, 0x6c, 0x1b, 0x3b, 0xc, 0xc, 0x7, 0x9, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe21d, 0x100, 0x40, 0x3, 0x1, 0x5, 0xbb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x1}, {0x5, 0xa}, {0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x2}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {}, {0x6, 0x9}, {0x6}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x40, 0x7ff, 0x9, 0x80, 0xa000, 0x1000]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x2}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {}, {0x4, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x8, 0xfff, 0x4, 0x3, 0x100, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x2c, 0x3, 0x1, 0x36, 0x6c, 0x4, 0x5, 0x1b, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x24, 0x24, 0x69, 0x4, 0x48, 0xc, 0x28, 0x6c, 0x36, 0x24, 0x60, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x0, 0x5, 0x8000, 0x8, 0xc7d, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x5}, {0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x18, 0x6c, 0x2, 0x36, 0x2, 0x12, 0x72, 0x5, 0x60, 0x1, 0x36, 0x4, 0x1, 0x1, 0x2, 0x60, 0x1b, 0x5, 0x3, 0x9, 0x12, 0x1]}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x200400c4) 04:00:22 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) 04:00:22 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) 04:00:22 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x24040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/21, 0x15, 0x0, &(0x7f00000002c0)=""/62, 0x3e}, &(0x7f0000000340)=0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="83b1a929271fca549561fa231b2a6050", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "7d1dfd1d3bf8155f", "ef89c2201fe702e180839bda380bb8a0934a24f3c82c5b5bb4979e88e8703ea9", "179c1b06", "da3c3e846bd0bb6a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), 0x4) iopl(0x3) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xfc1091445819d2eb}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x258, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2592}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0xe36be3f1f40b7448) 04:00:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4001) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xf9, 0x3ff, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x5, 0x943}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x28000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/snd_hda_codec', 0xc0000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x58e40bf8621b2c9f, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) 04:00:22 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0xb65d000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x400, 0x2, 0x1fc8569}) r2 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x1, 0x3}, {0x5, 0x4}, 0x21e1}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x70}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/snd_pcm', 0x20082, 0x10) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x58814}, 0x200008c1) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x4}, {0x8, 0x2}, {}, {0x1, 0x5}, {0x29, 0x5}, {0x8, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x8}, {0x3f, 0x7}, {0x8, 0x4}], "57a2fcb49dadf706"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x50}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000) 04:00:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x20008000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/pcmcia_socket', 0x402200, 0x46) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x4, 0x2c, 0x7ff}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x2f, 0x1f, 0x6e, 0xfff, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x1, 0x10000, 0x8000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4004) socketpair(0x11, 0x3, 0x5, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) socket$netlink(0x10, 0x3, 0x8) 04:00:22 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r6 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:00:22 executing program 5: r0 = getuid() setfsuid(r0) geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee00}}, './file0\x00'}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010100}, 0x0, 0x0, 0x7e4281c144bd8377}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r1, 0x10000000) quotactl(0x600000000000000, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)="8d5964d7a305eb9e9da42fc5c55333e505234200d379992547612590d9ca9a74d929c744c1ebf32ec248b6db38d9354d40609da3b77f501d3939bc481f6bbfc9") r6 = syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x20001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/38, 0x26, 0x0, &(0x7f0000000300)=""/37, 0x25}, &(0x7f0000000380)=0x40) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:00:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x310, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fe6000/0x14000)=nil, &(0x7f0000000180)="5c7d04d96d550889f48e5ea419eb2ccad3e9d584d3cad99d57eab93986bc5c467b0e5e9f65e5d7c5b11ace4550cfb2d01bb2757cf9dee2304f455e28a7b52a10b760554d2a831b118d88b4dbc9c63ea1752da3587bc3541d2617f008c1f28bf5becaa04ba613a9117369f7", 0x6b}, 0x68) remap_file_pages(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x1, 0x4000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/hwmon', 0x0, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x53c0}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4008010) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r3) pkey_free(r3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4000) r5 = syz_usb_connect(0x2, 0x119, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xf6, 0x52, 0x24, 0x10, 0x10b8, 0x1bb2, 0x682e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x7f, 0x8, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x4, 0xa7, 0x7e, 0x56, 0x8, [@hid_hid={0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x4f5}}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0xdd, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x3, 0x7, 0x90, [@generic={0xc1, 0x23, "cd1be1f12bc4ff85b23ca914c0b621b218afdbafd0a4360112420781d850a7f043eca5090a2f6d32d80784e2eed0871d0ee46c518496a432ebf6a126afca4cb3fc50904a2ffcf7c949e6a66e4f9eec248cc74b3172c939f4cca2eb7c59584061d994b748d66f3b9787db7cfb0e3ceeb3e9148deee9bd18acabafd4020fc80195025a1ba2fd456887829b11c7bfb44a6ae1d831c30979e700405c70b9b4e2e134b96ee425a6e006baa12b84509cd616351c72fff8b4787f100b70d9084d6e39"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x3f, 0x20}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7, 0xac, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfffc}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x5, 0x20, 0x3, 0x10, 0x2}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x8, [{0xe0, &(0x7f0000000700)=@string={0xe0, 0x3, "cef46682a72db9ed1e282e744ade2c14b9e47750de20b85861fd9b67ce4af5c3be55154ca2420847b5f387e7a541d4157480e7a01bfde4c88f9d39196c18cdaf002ac315009ee95e5a219fd7c2374fb1df2e5bd373829cda92876a8f9869f43a0d3fdc4c8c161424a6f2ab741c0e612278ba4a575f9f49051cb10662dc2b18efac54b4b6aa715355e0238a3957fba640c40789171c450ae5b664a321785701114e157c5a23a50b2a7258d1a51d026e989004cffba93564a5e6467f4c6bb00739af2148aacb1a7a697e000648b039ac83c2b1fcf04744cb36b85011e2ad30"}}, {0xf3, &(0x7f0000000800)=@string={0xf3, 0x3, "904a34f8eb6cae9ccf46b33ab1b528dd02b0911dab7f90e839b7e2a3d2923991f4db1d7a1b1fcaa18b023e2374c2e0376d04807e60dd6114d37e540d994691ecfb32ccf140766fe108b853e099f6a94cb672520d54fab2431831d53ecbdfbd668d0f6b9bd1ed1c65844adfe107a3ccccaf925af62ac034b6571f99a68b486609d7ce81bf8b8e7c9cf77d81270ce7b8eeb04e9bde15b9a94dc7171954caa9fb565c1f1f54946ffe8a3826e6a5fff0edb025705f53358a99926e5ffedbacfb65330e68b91c201bd3d7a2192dcf81215985566270144405ea8a44b02c618411393d459b6ee46f404eb591ed1b5aefc3250244"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x44d}}, {0xac, &(0x7f0000000940)=@string={0xac, 0x3, "ff2e08f755b7ac18548a291d43aa628d49477aacc6979992ddf88e4e3c9098889ab4da8051f23aa98fd6184a9aed5dfd4d45290466869884f1415da8b9bc068026842fdb86f9812ab82a4e1c8e34b4c9b5b81eece34e56737096779e96ab883923fabe487b51bfa7d0215277fbf604e2c5202a83c35108d84ec39e6ed20388a0affb094f74dc4b471552eea900354cae5f70bfb6e8f787da218829e46b417245e562fc0591f356e29409"}}, {0xb, &(0x7f0000000a00)=@string={0xb, 0x3, "2ec84a909b725903e8"}}, {0xea, &(0x7f0000000a40)=@string={0xea, 0x3, "50f395a529b303b1c35abdae56297154a5afafbada5639a6900594afa88662700c0e67dcc0fda5116c7795bb37b05fa752124eda3f5b919de4e473012147b192bd050b074478dbadb5433297890d24f40a20273507b820139ac192ceb92d4a969aac73dc5ec4d4d06ca2c40436ca346b3efe31189f83d62a8757df90d65565b64bf497ad6e8ed3d081000202f247a658f3688a42d7802023cac4b7e3093c31cabf1f7f691fa6af36174641e01e3346e54ae539ef4cd8c1f90c6f6b2760098b2edd99d674ffb21e5ee0cb24f8186529711127fd6290327753f45bac247767c2275543e6f5f15cbbe8"}}, {0xd1, &(0x7f0000000b40)=@string={0xd1, 0x3, "69329cbe210b3b8faeb377e401abdd474c59c3c846b80e86b01eaaddf5d4d5ff962e63d531fa3972f663960bba847ee20d8191ee4c3af821e42d08275090222b447ee0f1331b4f95afaef4ad4b8c4e65847876c0a7ddf8d596b8b0bc3879e300ab7fd7786204fbf5f59d4c0c0878bc311b7c83f3e6cd229b3ac688cdb7e2aea190d064c36a2d9436e41a374080e6c9efc10ee498a0834252dcc872986cc61fdf8be752d1a5e45ad270d2c3ac386784ec8e57203f6467b84bced5d8d0e319420c277fdb2c4d68c7e3cb6c46d0a9243a"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(r5, 0x80, 0xeb, &(0x7f0000000d00)="aaa4788cdbe61c9e0318a5f765bd6556c01fe578924d81926bb871d51f14d77294f6f6db1ff89e14dd3f093f28595ec82fffdd25f84506f9d82a05378cd1cd30bf4850c8aa0cd93809746fb3b64398736e6931ec75e0f643c26b3fe252cfd66d8b0db6dd9cabaab8d7cc258f0172184c0fafbf5237187d4c9a41a14b90e09590f7778062ef6f2789710812b3a41caa8d18a2cfcb0e082eaff9a660a6cab6cfe6a2702232a2a1a879d4e0568d61668b350400dc722b46ed92dbf687aed53b1d7a4e6861f7e67ac29ee379ad570c6de867901da458ddac28d2ae1e8706decff0921082624166996f706be270") mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1, 0x24010, r1, 0x0) 04:00:22 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10850, 0xffffffffffffffff, 0x10001) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0xa0000, 0xd0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0x711, 0x2, 0xffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x8, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x6}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f63}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x471, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x494ab03b}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfad, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6c93}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xddd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7733}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2b0}}, 0x20000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) write$cgroup_devices(r0, &(0x7f0000000640)={'c', ' *:* ', 'm\x00'}, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) 04:00:22 executing program 0: futex(&(0x7f0000000000), 0x106, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) setfsuid(0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200001a, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r1 = socket(0x10, 0x4, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xfff, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x812, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048840) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000980)={&(0x7f00000003c0), 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x538, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0xb, 0x6, 0x3, 0xb, 0x1b, 0x1b, 0x48, 0x2, 0x2, 0xc, 0x12, 0x9, 0x40, 0x2, 0x24, 0x60, 0x48, 0x60, 0x36, 0x30, 0x3, 0x6, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x31, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26f, 0xf8ab, 0xfe00, 0x9c66, 0x2, 0x2, 0x68, 0x6]}}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x18, 0x4, 0x1, 0xb, 0x30, 0x4, 0x16, 0xc, 0x18, 0x1, 0x0, 0x2, 0x2, 0x36, 0x3, 0x30, 0x30, 0x6c, 0x17, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x4, 0x5d, 0x60, 0x1, 0xb, 0x9, 0xc, 0x2, 0x9, 0x3d, 0x18, 0x9, 0x9, 0x6c, 0x9, 0x6c, 0x12, 0x5, 0xb, 0x1b, 0x16, 0x5, 0x12, 0x9, 0x5, 0x60, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa7, 0x7, 0x6, 0x9e49, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x6c, 0x5, 0xb, 0xc, 0x36, 0x18, 0x6c, 0x60, 0x48, 0x2, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x6, 0x2, 0x36, 0x2, 0x18, 0x36, 0xb, 0x6, 0x6, 0x48]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x9, 0xb07]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0xc}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x16, 0x6, 0x6, 0xb, 0xc, 0x4, 0x24, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0xb, 0x4, 0x12, 0x2, 0x6, 0x60, 0x12, 0x4, 0x6c, 0x30, 0x60, 0x12, 0x1, 0x30, 0x24, 0x9, 0x12, 0x4, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x15, 0x36, 0x36, 0x3, 0x5, 0xb, 0x12, 0x3, 0x12, 0x16, 0x6c, 0xc, 0x6c, 0x36, 0x5, 0x30, 0x0, 0xb, 0x5, 0x2, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x30, 0x16, 0x0, 0x2, 0x3, 0x3, 0x24, 0x18, 0x36, 0x12, 0x36, 0x60, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0xfff, 0x0, 0x0, 0x1000, 0xc, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xb, 0x60, 0xc, 0x18, 0x3, 0x9, 0x3, 0x60, 0x9, 0x36, 0x9, 0x4, 0x1b, 0x18, 0x30, 0x4, 0x1b, 0x3, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x12, 0x18, 0x6c, 0x60, 0x18, 0x60, 0x48, 0x1, 0x36, 0x16, 0x13, 0x2, 0x6, 0x24, 0x60, 0x60, 0x69, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x4, 0x80, 0x26, 0x3, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x18, 0x3, 0x2, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1a]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x2, 0x4}, {0x6}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x6c, 0x6, 0x6, 0xb, 0x38, 0x48, 0x1b, 0x24, 0x24, 0x57, 0x60, 0x36, 0x4, 0x24, 0x1b, 0x14, 0xb, 0x18, 0x5, 0x6, 0x39, 0x9, 0x6c, 0x30, 0x1, 0x1, 0x1, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x1, 0x48, 0x6c, 0x4, 0x36, 0x24, 0x2, 0xb, 0x6, 0xc, 0x18, 0x4, 0x24, 0x4, 0x24, 0x1, 0x2b, 0xb, 0x12, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x24, 0x3, 0x5f, 0x2, 0xfe302b94895ecca0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x932, 0x0, 0x1ff, 0x3, 0x5, 0x2d, 0xa952]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x18}, {0x4, 0x5}, {0x0, 0xe}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x1, 0x0, 0xad8, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xffff, 0x4a2a, 0x1f, 0x7, 0x9, 0x6ae, 0xf1]}}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x68, 0x6c, 0x6, 0x36, 0x4, 0x5, 0x6c, 0x6c, 0x4, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x5}, {0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x100, 0x5, 0x200, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x48, 0xb, 0x9, 0x24, 0x60, 0x5, 0x12, 0x3, 0x30, 0x16, 0x1, 0x2, 0x1, 0x31, 0x24, 0x48, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x80, 0x5bcc, 0xfff8, 0x6, 0x720, 0x0, 0x100]}}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40010}, 0x88000) futex(&(0x7f00000009c0), 0xc, 0x0, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40), 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) [ 183.167461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.169335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:00:22 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) r1 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x24040001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/21, 0x15, 0x0, &(0x7f00000002c0)=""/62, 0x3e}, &(0x7f0000000340)=0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="83b1a929271fca549561fa231b2a6050", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "7d1dfd1d3bf8155f", "ef89c2201fe702e180839bda380bb8a0934a24f3c82c5b5bb4979e88e8703ea9", "179c1b06", "da3c3e846bd0bb6a"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480), 0x4) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xfc1091445819d2eb}, 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x258, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x74}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb15}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x651}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x872}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2592}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0xe36be3f1f40b7448) VM DIAGNOSIS: 04:00:19 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff8880361ad040 RSI=ffffffff812c6586 RDI=0000000000000001 RBP=ffff88803621fb00 RSP=ffff88803621fac8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000002a R13=ffff888008901ac0 R14=0000000000000200 R15=ffff88803621fb50 RIP=ffffffff812c6588 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c533943030 CR3=0000000018354000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 414f49f2964471d6 YMM01=0000000000000000 0000000000000000 0000000000000000 3f847ae147ae147b YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 3f7424d8959cdcec YMM04=0000000000000000 0000000000000000 0000000000000000 3fd07245e0c643c0 YMM05=0000000000000000 0000000000000000 000000c005981140 000000c005981100 YMM06=0000000000000000 0000000000000000 0000000000000000 3fd3333333333333 YMM07=0000000000000000 0000000000000000 0000000000000000 3fd0000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 3fcc8fa5b8893008 YMM09=0000000000000000 0000000000000000 0000000000000000 bfbe8dae46fb65a4 YMM10=0000000000000000 0000000000000000 0000000000000000 3fc4298323f91d26 YMM11=0000000000000000 0000000000000000 000000c005a718c0 000000c005a70f00 YMM12=0000000000000000 0000000000000000 000000c005b986c0 000000c005a71ec0 YMM13=0000000000000000 0000000000000000 ad79e39ec27ae6f7 61684e7a1d3bd5ae YMM14=0000000000000000 0000000000000000 871eaed228acdd58 a41d9067e86d0c57 YMM15=0000000000000000 0000000000000000 70e26b706f996641 62821092f0cfde06 info registers vcpu 1 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f988 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006b R11=0000000000000001 R12=000000000000006b R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c53391b648 CR3=0000000010018000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 4040404040404040 4040404040404040 YMM05=0000000000000000 0000000000000000 5a5a5a5a5a5a5a5a 5a5a5a5a5a5a5a5a YMM06=0000000000000000 0000000000000000 2020202020202020 2020202020202020 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 25203a646672656d 6974206574616572 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 2000000020000000 2000000020000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000