Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:21038' (ECDSA) to the list of known hosts. 2022/10/01 04:40:39 fuzzer started 2022/10/01 04:40:39 dialing manager at localhost:35095 syzkaller login: [ 36.982339] cgroup: Unknown subsys name 'net' [ 37.069250] cgroup: Unknown subsys name 'rlimit' 2022/10/01 04:40:54 syscalls: 210 2022/10/01 04:40:54 code coverage: enabled 2022/10/01 04:40:54 comparison tracing: enabled 2022/10/01 04:40:54 extra coverage: enabled 2022/10/01 04:40:54 setuid sandbox: enabled 2022/10/01 04:40:54 namespace sandbox: enabled 2022/10/01 04:40:54 Android sandbox: enabled 2022/10/01 04:40:54 fault injection: enabled 2022/10/01 04:40:54 leak checking: enabled 2022/10/01 04:40:54 net packet injection: enabled 2022/10/01 04:40:54 net device setup: enabled 2022/10/01 04:40:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 04:40:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 04:40:54 USB emulation: enabled 2022/10/01 04:40:54 hci packet injection: enabled 2022/10/01 04:40:54 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 04:40:54 802.15.4 emulation: enabled 2022/10/01 04:40:54 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 04:40:55 starting 8 fuzzer processes 04:40:55 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) r6 = semget(0x2, 0x3, 0x38c) semop(r6, &(0x7f0000000580)=[{0x3, 0xb953, 0x1800}, {0x3, 0xbd98}], 0x2) r7 = semget(0x1, 0x0, 0x9) semctl$SEM_INFO(r7, 0x3, 0x13, &(0x7f00000005c0)=""/152) r8 = semget$private(0x0, 0x1, 0x501) semop(r8, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) semctl$GETVAL(r8, 0x3, 0xc, &(0x7f00000006c0)=""/159) 04:40:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000004c0)=""/69) write$snapshot(r6, &(0x7f0000000540)="1c8a6410b7389270562a9d71ef60c6a783443a178876ebc7aa7a6cc3fdb392e886e0a7c881ebe92ec8b8e9978d5ed6f44d364d8dc96abdfeee06adab4ffad7398d50ea6f5844abe68ff34afb65c475d8175525e96ffaeba47e5a5a5f1ebe2748b18a1c509028d0efe21a8e5881d4207a03df6f15a6016d6f", 0x78) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000005c0)=[0x2, 0xf3c6, 0x6306, 0x0, 0x38]) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000700)=0x1) 04:40:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000140}, 0x0) socketpair(0x8, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a49f83589377"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x823}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xde08}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair(0x3, 0x5, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x1, 0xf0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x72}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa0}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdd5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dc9e3882e935"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bea2a1652c3f"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040000) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "95fa3443a33d83db967f629271af6a15"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cee6af9582fa50353ec4b96eef25fc9b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7967bdaa5b22d39374a41521f383d312"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x5) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r11) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x9}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000015) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 04:40:55 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x550, 0x6, 0x2, 0x201, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x2}, [@nested={0x23d, 0x86, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x200}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7}, @generic="f01b1736c6105a4852fd7e479c64d6af8af0713427dc832c347a5ce71459057f5884c96cf5d89da3fb9c5e1ed645c46c3ebdfca5effd059221b4b88689dc67688084cf0d7bc13b690fecdff5e44747afcf00d898ad6472ac64810b9207cc5e4f83691fbd638ad85648272404594ee6c379ffdf7cf96971ba2057969a7d43b94cf03020f972cb4f0fbd657c3c034c451433817b224ef06b260686885043b2d4e4b11b9385e1f9735210f548361065e98377b311f12ca1e97633abd3f8114c35aac6c2a49ef2f6a1f20589354dfcdb8a27e34b81047318d970d74dc45ad5008e0d0708c3141e87231c1f8ef509", @generic="f5b3c819a410af62ee44cfc1115e6893e8a5b72c7bb45fe273fe6573405dc141aa18a028386bac868d21f8c7b332800301655db27fde24b2ae88ec39931facc9dea5456d76e557847a555c4f5b6401b9fb00ed6e3d9790b33826f4c030f4cbefc5ed6fe49f5eb10338ca1cd77004960c8f38a8a38c", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x70}, @generic="84d265e68e04a686b7442293cf8d4f2abd32fbef5b54197d67ac5fd2ba528ce1d8e3fb3043858eb566b3db3fc0b9cd3c89bc8deed6ac8132331d35c81af7642f2b154b859758cd07c26d3dbaf8985eddaa958002f4825bb845e440f2d52bd8a99223986a8fdc360e92509344b4b1accb4c33fd45f3772f007b068efe988cdb880030567fc108890a604578bcc621f02561d1f26109708543196d246d3ccbb186ba8e4721f8def242433f57f3", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x400000}]}, @generic="46a835e8545c4a9c270d987d471c0bd2c1b7d96f4d561006fc4529e292dbd6b7dfe105a6abafb8fa5636486374d4da45977faadccb69531a485ac3cdabfdac4da8927f34dfb3deb7963231cb5b172a53ccc2a22ca7412825f04207b0460f6258dbd9e88be36d9b3cca3f6cd6bc2b42e01286664d13174dec243bd8ce9089ec3e5915a0ef97a70d1e631e8834846332491057ad84bbd7ae7518f0f57727d8394fe4b27cb1b7af8f02939054e59670de7fc25eb130e040fe6bbb37351c90e5d229a492c3855dff0250a88223be10963f0338bb9afb8ce76233f9cdc41d721e280bcf3329e20c64c55f4155e7d4b66ad249dc297446b75731", @nested={0x1fa, 0x17, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x3f}, @generic="04be39e0f6cea9dbb0b0f47778e35423ac39840461b9693f531c80d07f093e115736451b4efdfb95f4d7dcabf43229bbef1b01a2359457ec57c68bf3eefff61a3638590df3818c305dd12653ba30e0c337f5604be40238a512fe27464bbd88e99571d406e617dcdb5237d218bb29f31d012c2e530bd17c765edafaf321ff7c31ab43a3f10fa35a9a6af236ef970ff1a74ea63cc543ad287317348e68621a28118a69e28e756838e0c7b4630d78c5650b1f01b839f7c0f1aa7fbb7faad7c6e0ba251af9b5d8ad380a962d97d1407e073947dffb91d777599e7512aa6688780d23fe3af037ebe80a6d20faae7feabbc4dafc0ce2108d5c56c4", @generic="d3a4eecb731c69104468da728de891b973b56f0752b5cae02905579f9c3cb92079bb92517891e804368b1c47b1614bfb7312c348950441f8a488b345e82b9142de7bf47b8908b0674ed034d993e14e0c3428d6545264d25f66a570c9a93b2f92dd2c297d37d43ef1a674c794137bcadd084bf16937a28fc70a4e4a8bb1b698ce51c298f45c701b748817d97d7a22ac838c7256df300f63dad622dafe72c4bdbef992c3b733cf73967eccf3f437d56f0f6750edfe96acc63421fb4c256323a7c6e974c5d87c590b25f311c6517b96bd15954bc65d88c7437d183d0c319c3cdf3eef7ec539dee8bdf8ec874f9f32d8c4f75de2"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}]}, 0x550}, 0x1, 0x0, 0x0, 0x48094}, 0x4050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1c8, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa7, 0x4c}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe1, 0xb, "06e72ffc9a5d128903c16ee8ab16074adf80889243c384ec53e47771beaa1d6ec6d541aea0718c687015696970cd58ae0a5c43ea1179297387ef2930bf7b8004980736fdb55b25d8d7930780cc1b38d827779af5c0821367e2daa9885e31c48e3db05591b13795c8f808cc6b348dbc98a69c8e73cfd5ff706c888524823b99afc2b766662d59770b4bba27958f43eac4b1462faead35d29626bb0691a1bfdb37536cf81652b84b77e471e56f22eb40a131813664be0af315e944ceb07a9b2547c13fd070af11ccb1c09ef02e28154128ccf2ac322911e1ac3477ada978"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5a, 0xb, "a3daa46fd42fb71db6f91b0295853afe3faf8bfd558423f1c8b8add4ec893379aa629e12f9de13758fcf6fa78f68332b6fad205a1f0802678c33c94d330b11ca70beb8ff755c94dfc08edef601a7234de2c847e0bbd5"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xd9}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7923cf8a1b65"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xcc721eee18cb4738}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20410000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x70, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "9c1e04658b9ab07732e189bef1d11cb4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1) 04:40:55 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x1, 0x16, 0x8, 0x2000, "6b2c9f80a1dc6f4b3e6018e19f8f1e46aa61f2601c14b6deda984b9cacc4a5e3"}) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x170, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_SRC={0xa4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40c8880}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x2, 0x3, 0x0, 0x0, 0x0, {0xc, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x84) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000980)=""/153) [ 52.476637] audit: type=1400 audit(1664599255.814:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:40:55 executing program 5: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {0x9, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "6e4a8c54fda9225c8c02405df5d43355977e6e4aa3eae0a5f67836a3b3e156c3cfd0e5cc6e6641cb6cb7622b1e0fdb81fda164402ff736c596f6650246437bfaea533b0d59ba65a0b3742d23097d341037b719b3e6143d600abf1e"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "593d01945fb03f8d53059a4eb2384296a27a2e06b88806e4b23c90194b629418a5babb821b7665fefa8e46da8f65e5d4ba4e2f59072bfe97ea004f7d50877900858b"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) read$snapshot(0xffffffffffffffff, &(0x7f0000000380)=""/37, 0x25) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair(0x2b, 0xf, 0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x800, 0x5, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x1c}}, 0x80) epoll_create1(0x80000) socketpair(0x25, 0x3, 0xffff8f4e, &(0x7f0000000540)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x64) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000700)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) 04:40:55 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001400)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = semget$private(0x0, 0x4, 0x11) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = semget$private(0x0, 0x1, 0x8) semctl$GETVAL(r5, 0x3, 0xc, &(0x7f0000001440)=""/32) semctl$IPC_INFO(r5, 0x1, 0x3, &(0x7f0000001480)=""/180) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:40:55 executing program 7: socketpair(0x15, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @initial, {0x9, 0x20}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x6, @random=0x2, 0x0, @void, @void, @val={0x3, 0x1, 0xa1}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb9, 0x81}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x4, 0x0, {0xc9b, 0x7fa, 0x0, 0x4}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x97, 0x20, 0x7}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x24000010) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x8c, 0x96}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x4, 0x0, {0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0x80, 0x40}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7ff}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x240040c1}, 0x804) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x72cc5fb96b714c8e}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c0c2564769a644228402f0f271807ee4"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4c96c6a64861e2eed49e6c81fe400b79"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2da0e20c8621e40a51d9f16399ab30c4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "255d21fe8afa4d3b28b3291615ca53ec"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c1b1a1695abe31da7c692c1d9aceae8e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ff5243e1a457f8bc971df652b0f6744"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000881) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004054) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0xa, 0x0, 0x201, 0x70bd25, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @u32=0x20}]}]}, 0x20}}, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000007c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r7, 0x400, 0x6, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x984}, 0x2004c881) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) [ 53.912709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.939960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.941918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.943200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.944253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.945082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.946849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.948609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.951630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.953300] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.954656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.955858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.956987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.958251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.960050] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.961046] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.962307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.964656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.966245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.968031] Bluetooth: hci4: HCI_REQ-0x0c1a [ 53.969816] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.970775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.978973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.980250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.981963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 53.984235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 53.985505] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.987944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.990295] Bluetooth: hci0: HCI_REQ-0x0c1a [ 53.991611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 53.992666] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.993730] Bluetooth: hci2: HCI_REQ-0x0c1a [ 53.994788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.001717] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.002821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.005202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.006651] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.008817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.011178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.012975] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.014246] Bluetooth: hci6: HCI_REQ-0x0c1a [ 54.015127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.020882] Bluetooth: hci1: HCI_REQ-0x0c1a [ 54.039765] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.041663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.044677] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.046939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.049691] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.052645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 54.055018] Bluetooth: hci5: HCI_REQ-0x0c1a [ 54.055933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 54.077801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 54.088991] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 54.090983] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 54.092453] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 54.096982] Bluetooth: hci7: HCI_REQ-0x0c1a [ 56.025931] Bluetooth: hci4: command 0x0409 tx timeout [ 56.027033] Bluetooth: hci6: command 0x0409 tx timeout [ 56.028008] Bluetooth: hci2: command 0x0409 tx timeout [ 56.029226] Bluetooth: hci0: command 0x0409 tx timeout [ 56.089560] Bluetooth: hci5: command 0x0409 tx timeout [ 56.090450] Bluetooth: hci3: command 0x0409 tx timeout [ 56.090578] Bluetooth: hci1: command 0x0409 tx timeout [ 56.153582] Bluetooth: hci7: command 0x0409 tx timeout [ 58.073456] Bluetooth: hci0: command 0x041b tx timeout [ 58.073483] Bluetooth: hci2: command 0x041b tx timeout [ 58.073930] Bluetooth: hci6: command 0x041b tx timeout [ 58.074452] Bluetooth: hci4: command 0x041b tx timeout [ 58.137431] Bluetooth: hci3: command 0x041b tx timeout [ 58.137896] Bluetooth: hci1: command 0x041b tx timeout [ 58.138326] Bluetooth: hci5: command 0x041b tx timeout [ 58.201482] Bluetooth: hci7: command 0x041b tx timeout [ 60.121442] Bluetooth: hci6: command 0x040f tx timeout [ 60.121924] Bluetooth: hci2: command 0x040f tx timeout [ 60.122318] Bluetooth: hci0: command 0x040f tx timeout [ 60.122845] Bluetooth: hci4: command 0x040f tx timeout [ 60.186449] Bluetooth: hci5: command 0x040f tx timeout [ 60.186855] Bluetooth: hci1: command 0x040f tx timeout [ 60.187237] Bluetooth: hci3: command 0x040f tx timeout [ 60.250399] Bluetooth: hci7: command 0x040f tx timeout [ 62.169573] Bluetooth: hci4: command 0x0419 tx timeout [ 62.170441] Bluetooth: hci0: command 0x0419 tx timeout [ 62.171156] Bluetooth: hci2: command 0x0419 tx timeout [ 62.171936] Bluetooth: hci6: command 0x0419 tx timeout [ 62.233485] Bluetooth: hci3: command 0x0419 tx timeout [ 62.234250] Bluetooth: hci1: command 0x0419 tx timeout [ 62.235045] Bluetooth: hci5: command 0x0419 tx timeout [ 62.297514] Bluetooth: hci7: command 0x0419 tx timeout 04:41:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000004c0)=""/69) write$snapshot(r6, &(0x7f0000000540)="1c8a6410b7389270562a9d71ef60c6a783443a178876ebc7aa7a6cc3fdb392e886e0a7c881ebe92ec8b8e9978d5ed6f44d364d8dc96abdfeee06adab4ffad7398d50ea6f5844abe68ff34afb65c475d8175525e96ffaeba47e5a5a5f1ebe2748b18a1c509028d0efe21a8e5881d4207a03df6f15a6016d6f", 0x78) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000005c0)=[0x2, 0xf3c6, 0x6306, 0x0, 0x38]) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000700)=0x1) 04:41:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000004c0)=""/69) write$snapshot(r6, &(0x7f0000000540)="1c8a6410b7389270562a9d71ef60c6a783443a178876ebc7aa7a6cc3fdb392e886e0a7c881ebe92ec8b8e9978d5ed6f44d364d8dc96abdfeee06adab4ffad7398d50ea6f5844abe68ff34afb65c475d8175525e96ffaeba47e5a5a5f1ebe2748b18a1c509028d0efe21a8e5881d4207a03df6f15a6016d6f", 0x78) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000005c0)=[0x2, 0xf3c6, 0x6306, 0x0, 0x38]) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000700)=0x1) 04:41:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000004c0)=""/69) write$snapshot(r6, &(0x7f0000000540)="1c8a6410b7389270562a9d71ef60c6a783443a178876ebc7aa7a6cc3fdb392e886e0a7c881ebe92ec8b8e9978d5ed6f44d364d8dc96abdfeee06adab4ffad7398d50ea6f5844abe68ff34afb65c475d8175525e96ffaeba47e5a5a5f1ebe2748b18a1c509028d0efe21a8e5881d4207a03df6f15a6016d6f", 0x78) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000005c0)=[0x2, 0xf3c6, 0x6306, 0x0, 0x38]) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000700)=0x1) 04:41:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000004c0)=""/69) write$snapshot(r6, &(0x7f0000000540)="1c8a6410b7389270562a9d71ef60c6a783443a178876ebc7aa7a6cc3fdb392e886e0a7c881ebe92ec8b8e9978d5ed6f44d364d8dc96abdfeee06adab4ffad7398d50ea6f5844abe68ff34afb65c475d8175525e96ffaeba47e5a5a5f1ebe2748b18a1c509028d0efe21a8e5881d4207a03df6f15a6016d6f", 0x78) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000005c0)=[0x2, 0xf3c6, 0x6306, 0x0, 0x38]) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:41:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000004c0)=""/69) write$snapshot(r6, &(0x7f0000000540)="1c8a6410b7389270562a9d71ef60c6a783443a178876ebc7aa7a6cc3fdb392e886e0a7c881ebe92ec8b8e9978d5ed6f44d364d8dc96abdfeee06adab4ffad7398d50ea6f5844abe68ff34afb65c475d8175525e96ffaeba47e5a5a5f1ebe2748b18a1c509028d0efe21a8e5881d4207a03df6f15a6016d6f", 0x78) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:41:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000004c0)=""/69) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:41:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:41:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:10 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x550, 0x6, 0x2, 0x201, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x2}, [@nested={0x23d, 0x86, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x200}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7}, @generic="f01b1736c6105a4852fd7e479c64d6af8af0713427dc832c347a5ce71459057f5884c96cf5d89da3fb9c5e1ed645c46c3ebdfca5effd059221b4b88689dc67688084cf0d7bc13b690fecdff5e44747afcf00d898ad6472ac64810b9207cc5e4f83691fbd638ad85648272404594ee6c379ffdf7cf96971ba2057969a7d43b94cf03020f972cb4f0fbd657c3c034c451433817b224ef06b260686885043b2d4e4b11b9385e1f9735210f548361065e98377b311f12ca1e97633abd3f8114c35aac6c2a49ef2f6a1f20589354dfcdb8a27e34b81047318d970d74dc45ad5008e0d0708c3141e87231c1f8ef509", @generic="f5b3c819a410af62ee44cfc1115e6893e8a5b72c7bb45fe273fe6573405dc141aa18a028386bac868d21f8c7b332800301655db27fde24b2ae88ec39931facc9dea5456d76e557847a555c4f5b6401b9fb00ed6e3d9790b33826f4c030f4cbefc5ed6fe49f5eb10338ca1cd77004960c8f38a8a38c", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x70}, @generic="84d265e68e04a686b7442293cf8d4f2abd32fbef5b54197d67ac5fd2ba528ce1d8e3fb3043858eb566b3db3fc0b9cd3c89bc8deed6ac8132331d35c81af7642f2b154b859758cd07c26d3dbaf8985eddaa958002f4825bb845e440f2d52bd8a99223986a8fdc360e92509344b4b1accb4c33fd45f3772f007b068efe988cdb880030567fc108890a604578bcc621f02561d1f26109708543196d246d3ccbb186ba8e4721f8def242433f57f3", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x400000}]}, @generic="46a835e8545c4a9c270d987d471c0bd2c1b7d96f4d561006fc4529e292dbd6b7dfe105a6abafb8fa5636486374d4da45977faadccb69531a485ac3cdabfdac4da8927f34dfb3deb7963231cb5b172a53ccc2a22ca7412825f04207b0460f6258dbd9e88be36d9b3cca3f6cd6bc2b42e01286664d13174dec243bd8ce9089ec3e5915a0ef97a70d1e631e8834846332491057ad84bbd7ae7518f0f57727d8394fe4b27cb1b7af8f02939054e59670de7fc25eb130e040fe6bbb37351c90e5d229a492c3855dff0250a88223be10963f0338bb9afb8ce76233f9cdc41d721e280bcf3329e20c64c55f4155e7d4b66ad249dc297446b75731", @nested={0x1fa, 0x17, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x3f}, @generic="04be39e0f6cea9dbb0b0f47778e35423ac39840461b9693f531c80d07f093e115736451b4efdfb95f4d7dcabf43229bbef1b01a2359457ec57c68bf3eefff61a3638590df3818c305dd12653ba30e0c337f5604be40238a512fe27464bbd88e99571d406e617dcdb5237d218bb29f31d012c2e530bd17c765edafaf321ff7c31ab43a3f10fa35a9a6af236ef970ff1a74ea63cc543ad287317348e68621a28118a69e28e756838e0c7b4630d78c5650b1f01b839f7c0f1aa7fbb7faad7c6e0ba251af9b5d8ad380a962d97d1407e073947dffb91d777599e7512aa6688780d23fe3af037ebe80a6d20faae7feabbc4dafc0ce2108d5c56c4", @generic="d3a4eecb731c69104468da728de891b973b56f0752b5cae02905579f9c3cb92079bb92517891e804368b1c47b1614bfb7312c348950441f8a488b345e82b9142de7bf47b8908b0674ed034d993e14e0c3428d6545264d25f66a570c9a93b2f92dd2c297d37d43ef1a674c794137bcadd084bf16937a28fc70a4e4a8bb1b698ce51c298f45c701b748817d97d7a22ac838c7256df300f63dad622dafe72c4bdbef992c3b733cf73967eccf3f437d56f0f6750edfe96acc63421fb4c256323a7c6e974c5d87c590b25f311c6517b96bd15954bc65d88c7437d183d0c319c3cdf3eef7ec539dee8bdf8ec874f9f32d8c4f75de2"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}]}, 0x550}, 0x1, 0x0, 0x0, 0x48094}, 0x4050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1c8, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa7, 0x4c}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe1, 0xb, "06e72ffc9a5d128903c16ee8ab16074adf80889243c384ec53e47771beaa1d6ec6d541aea0718c687015696970cd58ae0a5c43ea1179297387ef2930bf7b8004980736fdb55b25d8d7930780cc1b38d827779af5c0821367e2daa9885e31c48e3db05591b13795c8f808cc6b348dbc98a69c8e73cfd5ff706c888524823b99afc2b766662d59770b4bba27958f43eac4b1462faead35d29626bb0691a1bfdb37536cf81652b84b77e471e56f22eb40a131813664be0af315e944ceb07a9b2547c13fd070af11ccb1c09ef02e28154128ccf2ac322911e1ac3477ada978"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5a, 0xb, "a3daa46fd42fb71db6f91b0295853afe3faf8bfd558423f1c8b8add4ec893379aa629e12f9de13758fcf6fa78f68332b6fad205a1f0802678c33c94d330b11ca70beb8ff755c94dfc08edef601a7234de2c847e0bbd5"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xd9}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7923cf8a1b65"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xcc721eee18cb4738}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20410000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x70, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "9c1e04658b9ab07732e189bef1d11cb4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1) 04:42:10 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) r6 = semget(0x2, 0x3, 0x38c) semop(r6, &(0x7f0000000580)=[{0x3, 0xb953, 0x1800}, {0x3, 0xbd98}], 0x2) r7 = semget(0x1, 0x0, 0x9) semctl$SEM_INFO(r7, 0x3, 0x13, &(0x7f00000005c0)=""/152) r8 = semget$private(0x0, 0x1, 0x501) semop(r8, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) semctl$GETVAL(r8, 0x3, 0xc, &(0x7f00000006c0)=""/159) 04:42:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000140}, 0x0) socketpair(0x8, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a49f83589377"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x823}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xde08}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair(0x3, 0x5, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x1, 0xf0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x72}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa0}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdd5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dc9e3882e935"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bea2a1652c3f"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040000) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "95fa3443a33d83db967f629271af6a15"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cee6af9582fa50353ec4b96eef25fc9b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7967bdaa5b22d39374a41521f383d312"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x5) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r11) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x9}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000015) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 04:42:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:10 executing program 5: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {0x9, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "6e4a8c54fda9225c8c02405df5d43355977e6e4aa3eae0a5f67836a3b3e156c3cfd0e5cc6e6641cb6cb7622b1e0fdb81fda164402ff736c596f6650246437bfaea533b0d59ba65a0b3742d23097d341037b719b3e6143d600abf1e"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "593d01945fb03f8d53059a4eb2384296a27a2e06b88806e4b23c90194b629418a5babb821b7665fefa8e46da8f65e5d4ba4e2f59072bfe97ea004f7d50877900858b"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) read$snapshot(0xffffffffffffffff, &(0x7f0000000380)=""/37, 0x25) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair(0x2b, 0xf, 0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x800, 0x5, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x1c}}, 0x80) epoll_create1(0x80000) socketpair(0x25, 0x3, 0xffff8f4e, &(0x7f0000000540)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x64) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000700)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) 04:42:10 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x1, 0x16, 0x8, 0x2000, "6b2c9f80a1dc6f4b3e6018e19f8f1e46aa61f2601c14b6deda984b9cacc4a5e3"}) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x170, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_SRC={0xa4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40c8880}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x2, 0x3, 0x0, 0x0, 0x0, {0xc, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x84) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000980)=""/153) 04:42:10 executing program 7: socketpair(0x15, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @initial, {0x9, 0x20}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x6, @random=0x2, 0x0, @void, @void, @val={0x3, 0x1, 0xa1}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb9, 0x81}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x4, 0x0, {0xc9b, 0x7fa, 0x0, 0x4}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x97, 0x20, 0x7}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x24000010) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x8c, 0x96}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x4, 0x0, {0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0x80, 0x40}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7ff}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x240040c1}, 0x804) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x72cc5fb96b714c8e}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c0c2564769a644228402f0f271807ee4"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4c96c6a64861e2eed49e6c81fe400b79"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2da0e20c8621e40a51d9f16399ab30c4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "255d21fe8afa4d3b28b3291615ca53ec"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c1b1a1695abe31da7c692c1d9aceae8e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ff5243e1a457f8bc971df652b0f6744"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000881) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004054) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0xa, 0x0, 0x201, 0x70bd25, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @u32=0x20}]}]}, 0x20}}, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000007c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r7, 0x400, 0x6, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x984}, 0x2004c881) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) 04:42:10 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001400)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = semget$private(0x0, 0x4, 0x11) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = semget$private(0x0, 0x1, 0x8) semctl$GETVAL(r5, 0x3, 0xc, &(0x7f0000001440)=""/32) semctl$IPC_INFO(r5, 0x1, 0x3, &(0x7f0000001480)=""/180) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:42:11 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001400)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = semget$private(0x0, 0x4, 0x11) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = semget$private(0x0, 0x1, 0x8) semctl$GETVAL(r5, 0x3, 0xc, &(0x7f0000001440)=""/32) semctl$IPC_INFO(r5, 0x1, 0x3, &(0x7f0000001480)=""/180) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:42:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) clock_gettime(0x7, &(0x7f0000000440)) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:11 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x1, 0x16, 0x8, 0x2000, "6b2c9f80a1dc6f4b3e6018e19f8f1e46aa61f2601c14b6deda984b9cacc4a5e3"}) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x170, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_SRC={0xa4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40c8880}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x2, 0x3, 0x0, 0x0, 0x0, {0xc, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x84) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000980)=""/153) 04:42:11 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) r6 = semget(0x2, 0x3, 0x38c) semop(r6, &(0x7f0000000580)=[{0x3, 0xb953, 0x1800}, {0x3, 0xbd98}], 0x2) r7 = semget(0x1, 0x0, 0x9) semctl$SEM_INFO(r7, 0x3, 0x13, &(0x7f00000005c0)=""/152) r8 = semget$private(0x0, 0x1, 0x501) semop(r8, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) semctl$GETVAL(r8, 0x3, 0xc, &(0x7f00000006c0)=""/159) 04:42:23 executing program 7: socketpair(0x15, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @initial, {0x9, 0x20}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x6, @random=0x2, 0x0, @void, @void, @val={0x3, 0x1, 0xa1}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb9, 0x81}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x4, 0x0, {0xc9b, 0x7fa, 0x0, 0x4}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x97, 0x20, 0x7}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x24000010) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x8c, 0x96}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x4, 0x0, {0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0x80, 0x40}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7ff}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x240040c1}, 0x804) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x72cc5fb96b714c8e}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c0c2564769a644228402f0f271807ee4"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4c96c6a64861e2eed49e6c81fe400b79"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2da0e20c8621e40a51d9f16399ab30c4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "255d21fe8afa4d3b28b3291615ca53ec"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c1b1a1695abe31da7c692c1d9aceae8e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ff5243e1a457f8bc971df652b0f6744"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000881) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004054) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0xa, 0x0, 0x201, 0x70bd25, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @u32=0x20}]}]}, 0x20}}, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000007c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r7, 0x400, 0x6, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x984}, 0x2004c881) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) 04:42:23 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x550, 0x6, 0x2, 0x201, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x2}, [@nested={0x23d, 0x86, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x200}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7}, @generic="f01b1736c6105a4852fd7e479c64d6af8af0713427dc832c347a5ce71459057f5884c96cf5d89da3fb9c5e1ed645c46c3ebdfca5effd059221b4b88689dc67688084cf0d7bc13b690fecdff5e44747afcf00d898ad6472ac64810b9207cc5e4f83691fbd638ad85648272404594ee6c379ffdf7cf96971ba2057969a7d43b94cf03020f972cb4f0fbd657c3c034c451433817b224ef06b260686885043b2d4e4b11b9385e1f9735210f548361065e98377b311f12ca1e97633abd3f8114c35aac6c2a49ef2f6a1f20589354dfcdb8a27e34b81047318d970d74dc45ad5008e0d0708c3141e87231c1f8ef509", @generic="f5b3c819a410af62ee44cfc1115e6893e8a5b72c7bb45fe273fe6573405dc141aa18a028386bac868d21f8c7b332800301655db27fde24b2ae88ec39931facc9dea5456d76e557847a555c4f5b6401b9fb00ed6e3d9790b33826f4c030f4cbefc5ed6fe49f5eb10338ca1cd77004960c8f38a8a38c", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x70}, @generic="84d265e68e04a686b7442293cf8d4f2abd32fbef5b54197d67ac5fd2ba528ce1d8e3fb3043858eb566b3db3fc0b9cd3c89bc8deed6ac8132331d35c81af7642f2b154b859758cd07c26d3dbaf8985eddaa958002f4825bb845e440f2d52bd8a99223986a8fdc360e92509344b4b1accb4c33fd45f3772f007b068efe988cdb880030567fc108890a604578bcc621f02561d1f26109708543196d246d3ccbb186ba8e4721f8def242433f57f3", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x400000}]}, @generic="46a835e8545c4a9c270d987d471c0bd2c1b7d96f4d561006fc4529e292dbd6b7dfe105a6abafb8fa5636486374d4da45977faadccb69531a485ac3cdabfdac4da8927f34dfb3deb7963231cb5b172a53ccc2a22ca7412825f04207b0460f6258dbd9e88be36d9b3cca3f6cd6bc2b42e01286664d13174dec243bd8ce9089ec3e5915a0ef97a70d1e631e8834846332491057ad84bbd7ae7518f0f57727d8394fe4b27cb1b7af8f02939054e59670de7fc25eb130e040fe6bbb37351c90e5d229a492c3855dff0250a88223be10963f0338bb9afb8ce76233f9cdc41d721e280bcf3329e20c64c55f4155e7d4b66ad249dc297446b75731", @nested={0x1fa, 0x17, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x3f}, @generic="04be39e0f6cea9dbb0b0f47778e35423ac39840461b9693f531c80d07f093e115736451b4efdfb95f4d7dcabf43229bbef1b01a2359457ec57c68bf3eefff61a3638590df3818c305dd12653ba30e0c337f5604be40238a512fe27464bbd88e99571d406e617dcdb5237d218bb29f31d012c2e530bd17c765edafaf321ff7c31ab43a3f10fa35a9a6af236ef970ff1a74ea63cc543ad287317348e68621a28118a69e28e756838e0c7b4630d78c5650b1f01b839f7c0f1aa7fbb7faad7c6e0ba251af9b5d8ad380a962d97d1407e073947dffb91d777599e7512aa6688780d23fe3af037ebe80a6d20faae7feabbc4dafc0ce2108d5c56c4", @generic="d3a4eecb731c69104468da728de891b973b56f0752b5cae02905579f9c3cb92079bb92517891e804368b1c47b1614bfb7312c348950441f8a488b345e82b9142de7bf47b8908b0674ed034d993e14e0c3428d6545264d25f66a570c9a93b2f92dd2c297d37d43ef1a674c794137bcadd084bf16937a28fc70a4e4a8bb1b698ce51c298f45c701b748817d97d7a22ac838c7256df300f63dad622dafe72c4bdbef992c3b733cf73967eccf3f437d56f0f6750edfe96acc63421fb4c256323a7c6e974c5d87c590b25f311c6517b96bd15954bc65d88c7437d183d0c319c3cdf3eef7ec539dee8bdf8ec874f9f32d8c4f75de2"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}]}, 0x550}, 0x1, 0x0, 0x0, 0x48094}, 0x4050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1c8, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa7, 0x4c}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe1, 0xb, "06e72ffc9a5d128903c16ee8ab16074adf80889243c384ec53e47771beaa1d6ec6d541aea0718c687015696970cd58ae0a5c43ea1179297387ef2930bf7b8004980736fdb55b25d8d7930780cc1b38d827779af5c0821367e2daa9885e31c48e3db05591b13795c8f808cc6b348dbc98a69c8e73cfd5ff706c888524823b99afc2b766662d59770b4bba27958f43eac4b1462faead35d29626bb0691a1bfdb37536cf81652b84b77e471e56f22eb40a131813664be0af315e944ceb07a9b2547c13fd070af11ccb1c09ef02e28154128ccf2ac322911e1ac3477ada978"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5a, 0xb, "a3daa46fd42fb71db6f91b0295853afe3faf8bfd558423f1c8b8add4ec893379aa629e12f9de13758fcf6fa78f68332b6fad205a1f0802678c33c94d330b11ca70beb8ff755c94dfc08edef601a7234de2c847e0bbd5"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xd9}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7923cf8a1b65"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xcc721eee18cb4738}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20410000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x70, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "9c1e04658b9ab07732e189bef1d11cb4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1) 04:42:23 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) r6 = semget(0x2, 0x3, 0x38c) semop(r6, &(0x7f0000000580)=[{0x3, 0xb953, 0x1800}, {0x3, 0xbd98}], 0x2) r7 = semget(0x1, 0x0, 0x9) semctl$SEM_INFO(r7, 0x3, 0x13, &(0x7f00000005c0)=""/152) r8 = semget$private(0x0, 0x1, 0x501) semop(r8, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) semctl$GETVAL(r8, 0x3, 0xc, &(0x7f00000006c0)=""/159) 04:42:23 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x1, 0x16, 0x8, 0x2000, "6b2c9f80a1dc6f4b3e6018e19f8f1e46aa61f2601c14b6deda984b9cacc4a5e3"}) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x170, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_SRC={0xa4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40c8880}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x2, 0x3, 0x0, 0x0, 0x0, {0xc, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x84) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000980)=""/153) 04:42:23 executing program 5: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {0x9, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "6e4a8c54fda9225c8c02405df5d43355977e6e4aa3eae0a5f67836a3b3e156c3cfd0e5cc6e6641cb6cb7622b1e0fdb81fda164402ff736c596f6650246437bfaea533b0d59ba65a0b3742d23097d341037b719b3e6143d600abf1e"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "593d01945fb03f8d53059a4eb2384296a27a2e06b88806e4b23c90194b629418a5babb821b7665fefa8e46da8f65e5d4ba4e2f59072bfe97ea004f7d50877900858b"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) read$snapshot(0xffffffffffffffff, &(0x7f0000000380)=""/37, 0x25) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair(0x2b, 0xf, 0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x800, 0x5, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x1c}}, 0x80) epoll_create1(0x80000) socketpair(0x25, 0x3, 0xffff8f4e, &(0x7f0000000540)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x64) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000700)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) 04:42:23 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001400)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = semget$private(0x0, 0x4, 0x11) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = semget$private(0x0, 0x1, 0x8) semctl$GETVAL(r5, 0x3, 0xc, &(0x7f0000001440)=""/32) semctl$IPC_INFO(r5, 0x1, 0x3, &(0x7f0000001480)=""/180) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:42:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x989680}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000140}, 0x0) socketpair(0x8, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a49f83589377"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x823}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xde08}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair(0x3, 0x5, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x1, 0xf0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x72}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa0}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdd5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dc9e3882e935"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bea2a1652c3f"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040000) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "95fa3443a33d83db967f629271af6a15"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cee6af9582fa50353ec4b96eef25fc9b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7967bdaa5b22d39374a41521f383d312"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x5) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r11) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x9}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000015) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 04:42:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) msgctl$IPC_RMID(0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:24 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001400)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = semget$private(0x0, 0x4, 0x11) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = semget$private(0x0, 0x1, 0x8) semctl$GETVAL(r5, 0x3, 0xc, &(0x7f0000001440)=""/32) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:42:24 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) r6 = semget(0x2, 0x3, 0x38c) semop(r6, &(0x7f0000000580)=[{0x3, 0xb953, 0x1800}, {0x3, 0xbd98}], 0x2) r7 = semget(0x1, 0x0, 0x9) semctl$SEM_INFO(r7, 0x3, 0x13, &(0x7f00000005c0)=""/152) r8 = semget$private(0x0, 0x1, 0x501) semop(r8, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) 04:42:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) clock_getres(0x4, &(0x7f0000000380)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:24 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x1, 0x16, 0x8, 0x2000, "6b2c9f80a1dc6f4b3e6018e19f8f1e46aa61f2601c14b6deda984b9cacc4a5e3"}) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x170, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_SRC={0xa4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40c8880}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x2, 0x3, 0x0, 0x0, 0x0, {0xc, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x84) 04:42:24 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x550, 0x6, 0x2, 0x201, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x2}, [@nested={0x23d, 0x86, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x200}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7}, @generic="f01b1736c6105a4852fd7e479c64d6af8af0713427dc832c347a5ce71459057f5884c96cf5d89da3fb9c5e1ed645c46c3ebdfca5effd059221b4b88689dc67688084cf0d7bc13b690fecdff5e44747afcf00d898ad6472ac64810b9207cc5e4f83691fbd638ad85648272404594ee6c379ffdf7cf96971ba2057969a7d43b94cf03020f972cb4f0fbd657c3c034c451433817b224ef06b260686885043b2d4e4b11b9385e1f9735210f548361065e98377b311f12ca1e97633abd3f8114c35aac6c2a49ef2f6a1f20589354dfcdb8a27e34b81047318d970d74dc45ad5008e0d0708c3141e87231c1f8ef509", @generic="f5b3c819a410af62ee44cfc1115e6893e8a5b72c7bb45fe273fe6573405dc141aa18a028386bac868d21f8c7b332800301655db27fde24b2ae88ec39931facc9dea5456d76e557847a555c4f5b6401b9fb00ed6e3d9790b33826f4c030f4cbefc5ed6fe49f5eb10338ca1cd77004960c8f38a8a38c", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x70}, @generic="84d265e68e04a686b7442293cf8d4f2abd32fbef5b54197d67ac5fd2ba528ce1d8e3fb3043858eb566b3db3fc0b9cd3c89bc8deed6ac8132331d35c81af7642f2b154b859758cd07c26d3dbaf8985eddaa958002f4825bb845e440f2d52bd8a99223986a8fdc360e92509344b4b1accb4c33fd45f3772f007b068efe988cdb880030567fc108890a604578bcc621f02561d1f26109708543196d246d3ccbb186ba8e4721f8def242433f57f3", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x400000}]}, @generic="46a835e8545c4a9c270d987d471c0bd2c1b7d96f4d561006fc4529e292dbd6b7dfe105a6abafb8fa5636486374d4da45977faadccb69531a485ac3cdabfdac4da8927f34dfb3deb7963231cb5b172a53ccc2a22ca7412825f04207b0460f6258dbd9e88be36d9b3cca3f6cd6bc2b42e01286664d13174dec243bd8ce9089ec3e5915a0ef97a70d1e631e8834846332491057ad84bbd7ae7518f0f57727d8394fe4b27cb1b7af8f02939054e59670de7fc25eb130e040fe6bbb37351c90e5d229a492c3855dff0250a88223be10963f0338bb9afb8ce76233f9cdc41d721e280bcf3329e20c64c55f4155e7d4b66ad249dc297446b75731", @nested={0x1fa, 0x17, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x3f}, @generic="04be39e0f6cea9dbb0b0f47778e35423ac39840461b9693f531c80d07f093e115736451b4efdfb95f4d7dcabf43229bbef1b01a2359457ec57c68bf3eefff61a3638590df3818c305dd12653ba30e0c337f5604be40238a512fe27464bbd88e99571d406e617dcdb5237d218bb29f31d012c2e530bd17c765edafaf321ff7c31ab43a3f10fa35a9a6af236ef970ff1a74ea63cc543ad287317348e68621a28118a69e28e756838e0c7b4630d78c5650b1f01b839f7c0f1aa7fbb7faad7c6e0ba251af9b5d8ad380a962d97d1407e073947dffb91d777599e7512aa6688780d23fe3af037ebe80a6d20faae7feabbc4dafc0ce2108d5c56c4", @generic="d3a4eecb731c69104468da728de891b973b56f0752b5cae02905579f9c3cb92079bb92517891e804368b1c47b1614bfb7312c348950441f8a488b345e82b9142de7bf47b8908b0674ed034d993e14e0c3428d6545264d25f66a570c9a93b2f92dd2c297d37d43ef1a674c794137bcadd084bf16937a28fc70a4e4a8bb1b698ce51c298f45c701b748817d97d7a22ac838c7256df300f63dad622dafe72c4bdbef992c3b733cf73967eccf3f437d56f0f6750edfe96acc63421fb4c256323a7c6e974c5d87c590b25f311c6517b96bd15954bc65d88c7437d183d0c319c3cdf3eef7ec539dee8bdf8ec874f9f32d8c4f75de2"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}]}, 0x550}, 0x1, 0x0, 0x0, 0x48094}, 0x4050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1c8, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa7, 0x4c}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe1, 0xb, "06e72ffc9a5d128903c16ee8ab16074adf80889243c384ec53e47771beaa1d6ec6d541aea0718c687015696970cd58ae0a5c43ea1179297387ef2930bf7b8004980736fdb55b25d8d7930780cc1b38d827779af5c0821367e2daa9885e31c48e3db05591b13795c8f808cc6b348dbc98a69c8e73cfd5ff706c888524823b99afc2b766662d59770b4bba27958f43eac4b1462faead35d29626bb0691a1bfdb37536cf81652b84b77e471e56f22eb40a131813664be0af315e944ceb07a9b2547c13fd070af11ccb1c09ef02e28154128ccf2ac322911e1ac3477ada978"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5a, 0xb, "a3daa46fd42fb71db6f91b0295853afe3faf8bfd558423f1c8b8add4ec893379aa629e12f9de13758fcf6fa78f68332b6fad205a1f0802678c33c94d330b11ca70beb8ff755c94dfc08edef601a7234de2c847e0bbd5"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xd9}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7923cf8a1b65"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xcc721eee18cb4738}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20410000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x70, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "9c1e04658b9ab07732e189bef1d11cb4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1) 04:42:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) sched_rr_get_interval(0x0, &(0x7f0000000340)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:24 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001400)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = semget$private(0x0, 0x4, 0x11) semctl$IPC_RMID(r4, 0x0, 0x0) semget$private(0x0, 0x1, 0x8) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:42:37 executing program 5: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {0x9, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "6e4a8c54fda9225c8c02405df5d43355977e6e4aa3eae0a5f67836a3b3e156c3cfd0e5cc6e6641cb6cb7622b1e0fdb81fda164402ff736c596f6650246437bfaea533b0d59ba65a0b3742d23097d341037b719b3e6143d600abf1e"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "593d01945fb03f8d53059a4eb2384296a27a2e06b88806e4b23c90194b629418a5babb821b7665fefa8e46da8f65e5d4ba4e2f59072bfe97ea004f7d50877900858b"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) read$snapshot(0xffffffffffffffff, &(0x7f0000000380)=""/37, 0x25) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair(0x2b, 0xf, 0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x800, 0x5, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x1c}}, 0x80) epoll_create1(0x80000) socketpair(0x25, 0x3, 0xffff8f4e, &(0x7f0000000540)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x64) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000700)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) 04:42:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000140}, 0x0) socketpair(0x8, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a49f83589377"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x823}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xde08}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair(0x3, 0x5, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x1, 0xf0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x72}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa0}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdd5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dc9e3882e935"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bea2a1652c3f"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040000) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "95fa3443a33d83db967f629271af6a15"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cee6af9582fa50353ec4b96eef25fc9b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7967bdaa5b22d39374a41521f383d312"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x5) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r11) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x9}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000015) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 04:42:37 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001400)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = semget$private(0x0, 0x4, 0x11) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:42:37 executing program 7: socketpair(0x15, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @initial, {0x9, 0x20}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x6, @random=0x2, 0x0, @void, @void, @val={0x3, 0x1, 0xa1}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb9, 0x81}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x4, 0x0, {0xc9b, 0x7fa, 0x0, 0x4}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x97, 0x20, 0x7}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x24000010) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x8c, 0x96}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x4, 0x0, {0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0x80, 0x40}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7ff}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x240040c1}, 0x804) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x72cc5fb96b714c8e}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c0c2564769a644228402f0f271807ee4"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4c96c6a64861e2eed49e6c81fe400b79"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2da0e20c8621e40a51d9f16399ab30c4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "255d21fe8afa4d3b28b3291615ca53ec"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c1b1a1695abe31da7c692c1d9aceae8e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ff5243e1a457f8bc971df652b0f6744"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000881) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004054) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0xa, 0x0, 0x201, 0x70bd25, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @u32=0x20}]}]}, 0x20}}, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000007c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r7, 0x400, 0x6, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x984}, 0x2004c881) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) 04:42:37 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x1, 0x16, 0x8, 0x2000, "6b2c9f80a1dc6f4b3e6018e19f8f1e46aa61f2601c14b6deda984b9cacc4a5e3"}) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x170, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_SRC={0xa4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40c8880}, 0x20000000) 04:42:37 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x550, 0x6, 0x2, 0x201, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x2}, [@nested={0x23d, 0x86, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x200}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7}, @generic="f01b1736c6105a4852fd7e479c64d6af8af0713427dc832c347a5ce71459057f5884c96cf5d89da3fb9c5e1ed645c46c3ebdfca5effd059221b4b88689dc67688084cf0d7bc13b690fecdff5e44747afcf00d898ad6472ac64810b9207cc5e4f83691fbd638ad85648272404594ee6c379ffdf7cf96971ba2057969a7d43b94cf03020f972cb4f0fbd657c3c034c451433817b224ef06b260686885043b2d4e4b11b9385e1f9735210f548361065e98377b311f12ca1e97633abd3f8114c35aac6c2a49ef2f6a1f20589354dfcdb8a27e34b81047318d970d74dc45ad5008e0d0708c3141e87231c1f8ef509", @generic="f5b3c819a410af62ee44cfc1115e6893e8a5b72c7bb45fe273fe6573405dc141aa18a028386bac868d21f8c7b332800301655db27fde24b2ae88ec39931facc9dea5456d76e557847a555c4f5b6401b9fb00ed6e3d9790b33826f4c030f4cbefc5ed6fe49f5eb10338ca1cd77004960c8f38a8a38c", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x70}, @generic="84d265e68e04a686b7442293cf8d4f2abd32fbef5b54197d67ac5fd2ba528ce1d8e3fb3043858eb566b3db3fc0b9cd3c89bc8deed6ac8132331d35c81af7642f2b154b859758cd07c26d3dbaf8985eddaa958002f4825bb845e440f2d52bd8a99223986a8fdc360e92509344b4b1accb4c33fd45f3772f007b068efe988cdb880030567fc108890a604578bcc621f02561d1f26109708543196d246d3ccbb186ba8e4721f8def242433f57f3", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x400000}]}, @generic="46a835e8545c4a9c270d987d471c0bd2c1b7d96f4d561006fc4529e292dbd6b7dfe105a6abafb8fa5636486374d4da45977faadccb69531a485ac3cdabfdac4da8927f34dfb3deb7963231cb5b172a53ccc2a22ca7412825f04207b0460f6258dbd9e88be36d9b3cca3f6cd6bc2b42e01286664d13174dec243bd8ce9089ec3e5915a0ef97a70d1e631e8834846332491057ad84bbd7ae7518f0f57727d8394fe4b27cb1b7af8f02939054e59670de7fc25eb130e040fe6bbb37351c90e5d229a492c3855dff0250a88223be10963f0338bb9afb8ce76233f9cdc41d721e280bcf3329e20c64c55f4155e7d4b66ad249dc297446b75731", @nested={0x1fa, 0x17, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x3f}, @generic="04be39e0f6cea9dbb0b0f47778e35423ac39840461b9693f531c80d07f093e115736451b4efdfb95f4d7dcabf43229bbef1b01a2359457ec57c68bf3eefff61a3638590df3818c305dd12653ba30e0c337f5604be40238a512fe27464bbd88e99571d406e617dcdb5237d218bb29f31d012c2e530bd17c765edafaf321ff7c31ab43a3f10fa35a9a6af236ef970ff1a74ea63cc543ad287317348e68621a28118a69e28e756838e0c7b4630d78c5650b1f01b839f7c0f1aa7fbb7faad7c6e0ba251af9b5d8ad380a962d97d1407e073947dffb91d777599e7512aa6688780d23fe3af037ebe80a6d20faae7feabbc4dafc0ce2108d5c56c4", @generic="d3a4eecb731c69104468da728de891b973b56f0752b5cae02905579f9c3cb92079bb92517891e804368b1c47b1614bfb7312c348950441f8a488b345e82b9142de7bf47b8908b0674ed034d993e14e0c3428d6545264d25f66a570c9a93b2f92dd2c297d37d43ef1a674c794137bcadd084bf16937a28fc70a4e4a8bb1b698ce51c298f45c701b748817d97d7a22ac838c7256df300f63dad622dafe72c4bdbef992c3b733cf73967eccf3f437d56f0f6750edfe96acc63421fb4c256323a7c6e974c5d87c590b25f311c6517b96bd15954bc65d88c7437d183d0c319c3cdf3eef7ec539dee8bdf8ec874f9f32d8c4f75de2"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}]}, 0x550}, 0x1, 0x0, 0x0, 0x48094}, 0x4050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1c8, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa7, 0x4c}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe1, 0xb, "06e72ffc9a5d128903c16ee8ab16074adf80889243c384ec53e47771beaa1d6ec6d541aea0718c687015696970cd58ae0a5c43ea1179297387ef2930bf7b8004980736fdb55b25d8d7930780cc1b38d827779af5c0821367e2daa9885e31c48e3db05591b13795c8f808cc6b348dbc98a69c8e73cfd5ff706c888524823b99afc2b766662d59770b4bba27958f43eac4b1462faead35d29626bb0691a1bfdb37536cf81652b84b77e471e56f22eb40a131813664be0af315e944ceb07a9b2547c13fd070af11ccb1c09ef02e28154128ccf2ac322911e1ac3477ada978"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5a, 0xb, "a3daa46fd42fb71db6f91b0295853afe3faf8bfd558423f1c8b8add4ec893379aa629e12f9de13758fcf6fa78f68332b6fad205a1f0802678c33c94d330b11ca70beb8ff755c94dfc08edef601a7234de2c847e0bbd5"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xd9}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7923cf8a1b65"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xcc721eee18cb4738}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) 04:42:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:37 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) r6 = semget(0x2, 0x3, 0x38c) semop(r6, &(0x7f0000000580)=[{0x3, 0xb953, 0x1800}, {0x3, 0xbd98}], 0x2) r7 = semget(0x1, 0x0, 0x9) semctl$SEM_INFO(r7, 0x3, 0x13, &(0x7f00000005c0)=""/152) semop(0x0, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) 04:42:38 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001400)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) semget$private(0x0, 0x4, 0x11) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:42:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:38 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) r6 = semget(0x2, 0x3, 0x38c) semop(r6, &(0x7f0000000580)=[{0x3, 0xb953, 0x1800}, {0x3, 0xbd98}], 0x2) semget(0x1, 0x0, 0x9) semop(0x0, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) 04:42:50 executing program 7: socketpair(0x15, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @initial, {0x9, 0x20}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x6, @random=0x2, 0x0, @void, @void, @val={0x3, 0x1, 0xa1}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb9, 0x81}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x4, 0x0, {0xc9b, 0x7fa, 0x0, 0x4}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x97, 0x20, 0x7}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x24000010) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x8c, 0x96}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x4, 0x0, {0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0x80, 0x40}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7ff}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x240040c1}, 0x804) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x72cc5fb96b714c8e}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c0c2564769a644228402f0f271807ee4"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4c96c6a64861e2eed49e6c81fe400b79"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2da0e20c8621e40a51d9f16399ab30c4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "255d21fe8afa4d3b28b3291615ca53ec"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c1b1a1695abe31da7c692c1d9aceae8e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ff5243e1a457f8bc971df652b0f6744"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000881) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004054) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0xa, 0x0, 0x201, 0x70bd25, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @u32=0x20}]}]}, 0x20}}, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000007c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r7, 0x400, 0x6, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) 04:42:50 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001400)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:42:50 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) r6 = semget(0x2, 0x3, 0x38c) semop(r6, &(0x7f0000000580)=[{0x3, 0xb953, 0x1800}, {0x3, 0xbd98}], 0x2) semop(0x0, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) 04:42:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/74) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:50 executing program 5: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {0x9, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "6e4a8c54fda9225c8c02405df5d43355977e6e4aa3eae0a5f67836a3b3e156c3cfd0e5cc6e6641cb6cb7622b1e0fdb81fda164402ff736c596f6650246437bfaea533b0d59ba65a0b3742d23097d341037b719b3e6143d600abf1e"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "593d01945fb03f8d53059a4eb2384296a27a2e06b88806e4b23c90194b629418a5babb821b7665fefa8e46da8f65e5d4ba4e2f59072bfe97ea004f7d50877900858b"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) read$snapshot(0xffffffffffffffff, &(0x7f0000000380)=""/37, 0x25) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair(0x2b, 0xf, 0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x800, 0x5, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x1c}}, 0x80) epoll_create1(0x80000) socketpair(0x25, 0x3, 0xffff8f4e, &(0x7f0000000540)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x64) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000700)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) 04:42:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000140}, 0x0) socketpair(0x8, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a49f83589377"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x823}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xde08}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair(0x3, 0x5, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x1, 0xf0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x72}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa0}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdd5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dc9e3882e935"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bea2a1652c3f"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040000) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "95fa3443a33d83db967f629271af6a15"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cee6af9582fa50353ec4b96eef25fc9b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7967bdaa5b22d39374a41521f383d312"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x5) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r11) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x9}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000015) 04:42:50 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x550, 0x6, 0x2, 0x201, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x2}, [@nested={0x23d, 0x86, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x200}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7}, @generic="f01b1736c6105a4852fd7e479c64d6af8af0713427dc832c347a5ce71459057f5884c96cf5d89da3fb9c5e1ed645c46c3ebdfca5effd059221b4b88689dc67688084cf0d7bc13b690fecdff5e44747afcf00d898ad6472ac64810b9207cc5e4f83691fbd638ad85648272404594ee6c379ffdf7cf96971ba2057969a7d43b94cf03020f972cb4f0fbd657c3c034c451433817b224ef06b260686885043b2d4e4b11b9385e1f9735210f548361065e98377b311f12ca1e97633abd3f8114c35aac6c2a49ef2f6a1f20589354dfcdb8a27e34b81047318d970d74dc45ad5008e0d0708c3141e87231c1f8ef509", @generic="f5b3c819a410af62ee44cfc1115e6893e8a5b72c7bb45fe273fe6573405dc141aa18a028386bac868d21f8c7b332800301655db27fde24b2ae88ec39931facc9dea5456d76e557847a555c4f5b6401b9fb00ed6e3d9790b33826f4c030f4cbefc5ed6fe49f5eb10338ca1cd77004960c8f38a8a38c", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x70}, @generic="84d265e68e04a686b7442293cf8d4f2abd32fbef5b54197d67ac5fd2ba528ce1d8e3fb3043858eb566b3db3fc0b9cd3c89bc8deed6ac8132331d35c81af7642f2b154b859758cd07c26d3dbaf8985eddaa958002f4825bb845e440f2d52bd8a99223986a8fdc360e92509344b4b1accb4c33fd45f3772f007b068efe988cdb880030567fc108890a604578bcc621f02561d1f26109708543196d246d3ccbb186ba8e4721f8def242433f57f3", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x400000}]}, @generic="46a835e8545c4a9c270d987d471c0bd2c1b7d96f4d561006fc4529e292dbd6b7dfe105a6abafb8fa5636486374d4da45977faadccb69531a485ac3cdabfdac4da8927f34dfb3deb7963231cb5b172a53ccc2a22ca7412825f04207b0460f6258dbd9e88be36d9b3cca3f6cd6bc2b42e01286664d13174dec243bd8ce9089ec3e5915a0ef97a70d1e631e8834846332491057ad84bbd7ae7518f0f57727d8394fe4b27cb1b7af8f02939054e59670de7fc25eb130e040fe6bbb37351c90e5d229a492c3855dff0250a88223be10963f0338bb9afb8ce76233f9cdc41d721e280bcf3329e20c64c55f4155e7d4b66ad249dc297446b75731", @nested={0x1fa, 0x17, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x3f}, @generic="04be39e0f6cea9dbb0b0f47778e35423ac39840461b9693f531c80d07f093e115736451b4efdfb95f4d7dcabf43229bbef1b01a2359457ec57c68bf3eefff61a3638590df3818c305dd12653ba30e0c337f5604be40238a512fe27464bbd88e99571d406e617dcdb5237d218bb29f31d012c2e530bd17c765edafaf321ff7c31ab43a3f10fa35a9a6af236ef970ff1a74ea63cc543ad287317348e68621a28118a69e28e756838e0c7b4630d78c5650b1f01b839f7c0f1aa7fbb7faad7c6e0ba251af9b5d8ad380a962d97d1407e073947dffb91d777599e7512aa6688780d23fe3af037ebe80a6d20faae7feabbc4dafc0ce2108d5c56c4", @generic="d3a4eecb731c69104468da728de891b973b56f0752b5cae02905579f9c3cb92079bb92517891e804368b1c47b1614bfb7312c348950441f8a488b345e82b9142de7bf47b8908b0674ed034d993e14e0c3428d6545264d25f66a570c9a93b2f92dd2c297d37d43ef1a674c794137bcadd084bf16937a28fc70a4e4a8bb1b698ce51c298f45c701b748817d97d7a22ac838c7256df300f63dad622dafe72c4bdbef992c3b733cf73967eccf3f437d56f0f6750edfe96acc63421fb4c256323a7c6e974c5d87c590b25f311c6517b96bd15954bc65d88c7437d183d0c319c3cdf3eef7ec539dee8bdf8ec874f9f32d8c4f75de2"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}]}, 0x550}, 0x1, 0x0, 0x0, 0x48094}, 0x4050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1c8, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa7, 0x4c}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe1, 0xb, "06e72ffc9a5d128903c16ee8ab16074adf80889243c384ec53e47771beaa1d6ec6d541aea0718c687015696970cd58ae0a5c43ea1179297387ef2930bf7b8004980736fdb55b25d8d7930780cc1b38d827779af5c0821367e2daa9885e31c48e3db05591b13795c8f808cc6b348dbc98a69c8e73cfd5ff706c888524823b99afc2b766662d59770b4bba27958f43eac4b1462faead35d29626bb0691a1bfdb37536cf81652b84b77e471e56f22eb40a131813664be0af315e944ceb07a9b2547c13fd070af11ccb1c09ef02e28154128ccf2ac322911e1ac3477ada978"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5a, 0xb, "a3daa46fd42fb71db6f91b0295853afe3faf8bfd558423f1c8b8add4ec893379aa629e12f9de13758fcf6fa78f68332b6fad205a1f0802678c33c94d330b11ca70beb8ff755c94dfc08edef601a7234de2c847e0bbd5"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xd9}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7923cf8a1b65"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xcc721eee18cb4738}, 0x4) 04:42:50 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x1, 0x16, 0x8, 0x2000, "6b2c9f80a1dc6f4b3e6018e19f8f1e46aa61f2601c14b6deda984b9cacc4a5e3"}) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) 04:42:50 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x550, 0x6, 0x2, 0x201, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x2}, [@nested={0x23d, 0x86, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x200}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7}, @generic="f01b1736c6105a4852fd7e479c64d6af8af0713427dc832c347a5ce71459057f5884c96cf5d89da3fb9c5e1ed645c46c3ebdfca5effd059221b4b88689dc67688084cf0d7bc13b690fecdff5e44747afcf00d898ad6472ac64810b9207cc5e4f83691fbd638ad85648272404594ee6c379ffdf7cf96971ba2057969a7d43b94cf03020f972cb4f0fbd657c3c034c451433817b224ef06b260686885043b2d4e4b11b9385e1f9735210f548361065e98377b311f12ca1e97633abd3f8114c35aac6c2a49ef2f6a1f20589354dfcdb8a27e34b81047318d970d74dc45ad5008e0d0708c3141e87231c1f8ef509", @generic="f5b3c819a410af62ee44cfc1115e6893e8a5b72c7bb45fe273fe6573405dc141aa18a028386bac868d21f8c7b332800301655db27fde24b2ae88ec39931facc9dea5456d76e557847a555c4f5b6401b9fb00ed6e3d9790b33826f4c030f4cbefc5ed6fe49f5eb10338ca1cd77004960c8f38a8a38c", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x70}, @generic="84d265e68e04a686b7442293cf8d4f2abd32fbef5b54197d67ac5fd2ba528ce1d8e3fb3043858eb566b3db3fc0b9cd3c89bc8deed6ac8132331d35c81af7642f2b154b859758cd07c26d3dbaf8985eddaa958002f4825bb845e440f2d52bd8a99223986a8fdc360e92509344b4b1accb4c33fd45f3772f007b068efe988cdb880030567fc108890a604578bcc621f02561d1f26109708543196d246d3ccbb186ba8e4721f8def242433f57f3", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x400000}]}, @generic="46a835e8545c4a9c270d987d471c0bd2c1b7d96f4d561006fc4529e292dbd6b7dfe105a6abafb8fa5636486374d4da45977faadccb69531a485ac3cdabfdac4da8927f34dfb3deb7963231cb5b172a53ccc2a22ca7412825f04207b0460f6258dbd9e88be36d9b3cca3f6cd6bc2b42e01286664d13174dec243bd8ce9089ec3e5915a0ef97a70d1e631e8834846332491057ad84bbd7ae7518f0f57727d8394fe4b27cb1b7af8f02939054e59670de7fc25eb130e040fe6bbb37351c90e5d229a492c3855dff0250a88223be10963f0338bb9afb8ce76233f9cdc41d721e280bcf3329e20c64c55f4155e7d4b66ad249dc297446b75731", @nested={0x1fa, 0x17, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x3f}, @generic="04be39e0f6cea9dbb0b0f47778e35423ac39840461b9693f531c80d07f093e115736451b4efdfb95f4d7dcabf43229bbef1b01a2359457ec57c68bf3eefff61a3638590df3818c305dd12653ba30e0c337f5604be40238a512fe27464bbd88e99571d406e617dcdb5237d218bb29f31d012c2e530bd17c765edafaf321ff7c31ab43a3f10fa35a9a6af236ef970ff1a74ea63cc543ad287317348e68621a28118a69e28e756838e0c7b4630d78c5650b1f01b839f7c0f1aa7fbb7faad7c6e0ba251af9b5d8ad380a962d97d1407e073947dffb91d777599e7512aa6688780d23fe3af037ebe80a6d20faae7feabbc4dafc0ce2108d5c56c4", @generic="d3a4eecb731c69104468da728de891b973b56f0752b5cae02905579f9c3cb92079bb92517891e804368b1c47b1614bfb7312c348950441f8a488b345e82b9142de7bf47b8908b0674ed034d993e14e0c3428d6545264d25f66a570c9a93b2f92dd2c297d37d43ef1a674c794137bcadd084bf16937a28fc70a4e4a8bb1b698ce51c298f45c701b748817d97d7a22ac838c7256df300f63dad622dafe72c4bdbef992c3b733cf73967eccf3f437d56f0f6750edfe96acc63421fb4c256323a7c6e974c5d87c590b25f311c6517b96bd15954bc65d88c7437d183d0c319c3cdf3eef7ec539dee8bdf8ec874f9f32d8c4f75de2"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}]}, 0x550}, 0x1, 0x0, 0x0, 0x48094}, 0x4050) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) 04:42:50 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:42:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x12) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:42:50 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) semget(0x2, 0x3, 0x38c) semop(0x0, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) 04:42:50 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/20) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/bus/input/devices\x00', 0x0, 0x0) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) 04:42:50 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x550, 0x6, 0x2, 0x201, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x2}, [@nested={0x23d, 0x86, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x200}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7}, @generic="f01b1736c6105a4852fd7e479c64d6af8af0713427dc832c347a5ce71459057f5884c96cf5d89da3fb9c5e1ed645c46c3ebdfca5effd059221b4b88689dc67688084cf0d7bc13b690fecdff5e44747afcf00d898ad6472ac64810b9207cc5e4f83691fbd638ad85648272404594ee6c379ffdf7cf96971ba2057969a7d43b94cf03020f972cb4f0fbd657c3c034c451433817b224ef06b260686885043b2d4e4b11b9385e1f9735210f548361065e98377b311f12ca1e97633abd3f8114c35aac6c2a49ef2f6a1f20589354dfcdb8a27e34b81047318d970d74dc45ad5008e0d0708c3141e87231c1f8ef509", @generic="f5b3c819a410af62ee44cfc1115e6893e8a5b72c7bb45fe273fe6573405dc141aa18a028386bac868d21f8c7b332800301655db27fde24b2ae88ec39931facc9dea5456d76e557847a555c4f5b6401b9fb00ed6e3d9790b33826f4c030f4cbefc5ed6fe49f5eb10338ca1cd77004960c8f38a8a38c", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x70}, @generic="84d265e68e04a686b7442293cf8d4f2abd32fbef5b54197d67ac5fd2ba528ce1d8e3fb3043858eb566b3db3fc0b9cd3c89bc8deed6ac8132331d35c81af7642f2b154b859758cd07c26d3dbaf8985eddaa958002f4825bb845e440f2d52bd8a99223986a8fdc360e92509344b4b1accb4c33fd45f3772f007b068efe988cdb880030567fc108890a604578bcc621f02561d1f26109708543196d246d3ccbb186ba8e4721f8def242433f57f3", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x400000}]}, @generic="46a835e8545c4a9c270d987d471c0bd2c1b7d96f4d561006fc4529e292dbd6b7dfe105a6abafb8fa5636486374d4da45977faadccb69531a485ac3cdabfdac4da8927f34dfb3deb7963231cb5b172a53ccc2a22ca7412825f04207b0460f6258dbd9e88be36d9b3cca3f6cd6bc2b42e01286664d13174dec243bd8ce9089ec3e5915a0ef97a70d1e631e8834846332491057ad84bbd7ae7518f0f57727d8394fe4b27cb1b7af8f02939054e59670de7fc25eb130e040fe6bbb37351c90e5d229a492c3855dff0250a88223be10963f0338bb9afb8ce76233f9cdc41d721e280bcf3329e20c64c55f4155e7d4b66ad249dc297446b75731", @nested={0x1fa, 0x17, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x3f}, @generic="04be39e0f6cea9dbb0b0f47778e35423ac39840461b9693f531c80d07f093e115736451b4efdfb95f4d7dcabf43229bbef1b01a2359457ec57c68bf3eefff61a3638590df3818c305dd12653ba30e0c337f5604be40238a512fe27464bbd88e99571d406e617dcdb5237d218bb29f31d012c2e530bd17c765edafaf321ff7c31ab43a3f10fa35a9a6af236ef970ff1a74ea63cc543ad287317348e68621a28118a69e28e756838e0c7b4630d78c5650b1f01b839f7c0f1aa7fbb7faad7c6e0ba251af9b5d8ad380a962d97d1407e073947dffb91d777599e7512aa6688780d23fe3af037ebe80a6d20faae7feabbc4dafc0ce2108d5c56c4", @generic="d3a4eecb731c69104468da728de891b973b56f0752b5cae02905579f9c3cb92079bb92517891e804368b1c47b1614bfb7312c348950441f8a488b345e82b9142de7bf47b8908b0674ed034d993e14e0c3428d6545264d25f66a570c9a93b2f92dd2c297d37d43ef1a674c794137bcadd084bf16937a28fc70a4e4a8bb1b698ce51c298f45c701b748817d97d7a22ac838c7256df300f63dad622dafe72c4bdbef992c3b733cf73967eccf3f437d56f0f6750edfe96acc63421fb4c256323a7c6e974c5d87c590b25f311c6517b96bd15954bc65d88c7437d183d0c319c3cdf3eef7ec539dee8bdf8ec874f9f32d8c4f75de2"]}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}]}, 0x550}, 0x1, 0x0, 0x0, 0x48094}, 0x4050) 04:42:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000140}, 0x0) socketpair(0x8, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a49f83589377"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x823}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xde08}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair(0x3, 0x5, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x1, 0xf0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x72}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa0}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdd5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dc9e3882e935"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bea2a1652c3f"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040000) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "95fa3443a33d83db967f629271af6a15"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cee6af9582fa50353ec4b96eef25fc9b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7967bdaa5b22d39374a41521f383d312"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x9}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000015) [ 179.609467] Bluetooth: hci5: command 0x0406 tx timeout [ 179.609617] Bluetooth: hci4: command 0x0406 tx timeout [ 179.610058] Bluetooth: hci0: command 0x0406 tx timeout [ 179.611032] Bluetooth: hci2: command 0x0406 tx timeout [ 179.611580] Bluetooth: hci6: command 0x0406 tx timeout [ 179.612475] Bluetooth: hci1: command 0x0406 tx timeout [ 179.612982] Bluetooth: hci3: command 0x0406 tx timeout [ 179.613864] Bluetooth: hci7: command 0x0406 tx timeout [ 180.121399] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 180.122151] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.122675] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.123399] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 180.124074] Call Trace: [ 180.124286] [ 180.124601] __schedule+0x893/0x2470 [ 180.124884] ? io_schedule_timeout+0x150/0x150 [ 180.125711] ? do_raw_spin_lock+0x121/0x260 [ 180.126021] ? rwlock_bug.part.0+0x90/0x90 [ 180.126688] schedule+0xda/0x1b0 [ 180.126937] rescuer_thread+0x851/0xdb0 [ 180.127226] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.127603] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.127954] ? lockdep_hardirqs_on+0x79/0x100 [ 180.128269] ? worker_thread+0x1260/0x1260 [ 180.128594] kthread+0x2ed/0x3a0 [ 180.128840] ? kthread_complete_and_exit+0x40/0x40 [ 180.129186] ret_from_fork+0x22/0x30 [ 180.129492] [ 180.129662] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 180.130094] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.130479] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.131002] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 180.131579] Call Trace: [ 180.131758] [ 180.131925] __schedule+0x893/0x2470 [ 180.132192] ? io_schedule_timeout+0x150/0x150 [ 180.132542] ? do_raw_spin_lock+0x121/0x260 [ 180.132847] ? rwlock_bug.part.0+0x90/0x90 [ 180.133149] schedule+0xda/0x1b0 [ 180.133418] rescuer_thread+0x851/0xdb0 [ 180.133701] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.134049] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.134423] ? lockdep_hardirqs_on+0x79/0x100 [ 180.134755] ? worker_thread+0x1260/0x1260 [ 180.135056] kthread+0x2ed/0x3a0 [ 180.135299] ? kthread_complete_and_exit+0x40/0x40 [ 180.135663] ret_from_fork+0x22/0x30 [ 180.135946] [ 180.136111] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 180.136579] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.136935] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.137465] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 180.138022] Call Trace: [ 180.138201] [ 180.138390] __schedule+0x893/0x2470 [ 180.138677] ? io_schedule_timeout+0x150/0x150 [ 180.138995] ? do_raw_spin_lock+0x121/0x260 [ 180.139297] ? rwlock_bug.part.0+0x90/0x90 [ 180.139626] schedule+0xda/0x1b0 [ 180.139872] rescuer_thread+0x851/0xdb0 [ 180.140157] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.140536] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.140887] ? lockdep_hardirqs_on+0x79/0x100 [ 180.141203] ? worker_thread+0x1260/0x1260 [ 180.141530] kthread+0x2ed/0x3a0 [ 180.141772] ? kthread_complete_and_exit+0x40/0x40 [ 180.142113] ret_from_fork+0x22/0x30 [ 180.142408] [ 180.142579] INFO: task netns:6 blocked for more than 143 seconds. [ 180.142996] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.143409] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.143994] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 180.144646] Call Trace: [ 180.144846] [ 180.145026] __schedule+0x893/0x2470 [ 180.145322] ? io_schedule_timeout+0x150/0x150 [ 180.145702] ? do_raw_spin_lock+0x121/0x260 [ 180.146039] ? rwlock_bug.part.0+0x90/0x90 [ 180.146402] schedule+0xda/0x1b0 [ 180.146685] rescuer_thread+0x851/0xdb0 [ 180.146998] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.147406] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.147799] ? lockdep_hardirqs_on+0x79/0x100 [ 180.148157] ? worker_thread+0x1260/0x1260 [ 180.148513] kthread+0x2ed/0x3a0 [ 180.148781] ? kthread_complete_and_exit+0x40/0x40 [ 180.149159] ret_from_fork+0x22/0x30 [ 180.149485] [ 180.149670] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 180.150161] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.150594] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.151182] task:kworker/0:0H state:I stack:27496 pid:8 ppid:2 flags:0x00004000 [ 180.151832] Workqueue: 0x0 (kblockd) [ 180.152129] Call Trace: [ 180.152334] [ 180.152544] __schedule+0x893/0x2470 [ 180.152848] ? io_schedule_timeout+0x150/0x150 [ 180.153218] schedule+0xda/0x1b0 [ 180.153517] worker_thread+0x15f/0x1260 [ 180.153848] ? process_one_work+0x16a0/0x16a0 [ 180.154200] kthread+0x2ed/0x3a0 [ 180.154493] ? kthread_complete_and_exit+0x40/0x40 [ 180.154894] ret_from_fork+0x22/0x30 [ 180.155198] [ 180.155409] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 180.155922] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.156330] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.156933] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 180.157584] Call Trace: [ 180.157785] [ 180.157964] __schedule+0x893/0x2470 [ 180.158259] ? io_schedule_timeout+0x150/0x150 [ 180.158658] ? do_raw_spin_lock+0x121/0x260 [ 180.159002] ? rwlock_bug.part.0+0x90/0x90 [ 180.159338] schedule+0xda/0x1b0 [ 180.159637] rescuer_thread+0x851/0xdb0 [ 180.159949] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.160340] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.160759] ? lockdep_hardirqs_on+0x79/0x100 [ 180.161118] ? worker_thread+0x1260/0x1260 [ 180.161473] kthread+0x2ed/0x3a0 [ 180.161743] ? kthread_complete_and_exit+0x40/0x40 [ 180.162123] ret_from_fork+0x22/0x30 [ 180.162452] [ 180.162636] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 180.163182] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.163608] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.164184] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 180.164830] Call Trace: [ 180.165028] [ 180.165210] __schedule+0x893/0x2470 [ 180.165535] ? io_schedule_timeout+0x150/0x150 [ 180.165903] ? mark_held_locks+0x9e/0xe0 [ 180.166228] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.166638] schedule+0xda/0x1b0 [ 180.166931] rcu_tasks_one_gp+0x3db/0xc10 [ 180.167273] rcu_tasks_kthread+0x80/0xa0 [ 180.167619] ? rcu_tasks_postscan+0x10/0x10 [ 180.167956] kthread+0x2ed/0x3a0 [ 180.168225] ? kthread_complete_and_exit+0x40/0x40 [ 180.168634] ret_from_fork+0x22/0x30 [ 180.168937] [ 180.169121] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 180.169645] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.170048] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.170656] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 180.171297] Workqueue: 0x0 (rcu_gp) [ 180.171612] Call Trace: [ 180.171814] [ 180.171992] __schedule+0x893/0x2470 [ 180.172293] ? io_schedule_timeout+0x150/0x150 [ 180.172684] schedule+0xda/0x1b0 [ 180.172956] worker_thread+0x15f/0x1260 [ 180.173283] ? process_one_work+0x16a0/0x16a0 [ 180.173659] kthread+0x2ed/0x3a0 [ 180.173931] ? kthread_complete_and_exit+0x40/0x40 [ 180.174309] ret_from_fork+0x22/0x30 [ 180.174640] [ 180.174843] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 180.175345] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.175766] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.176337] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 180.177002] Workqueue: 0x0 (events_highpri) [ 180.177336] Call Trace: [ 180.177561] [ 180.177743] __schedule+0x893/0x2470 [ 180.178042] ? io_schedule_timeout+0x150/0x150 [ 180.178428] schedule+0xda/0x1b0 [ 180.178711] worker_thread+0x15f/0x1260 [ 180.179034] ? process_one_work+0x16a0/0x16a0 [ 180.179412] kthread+0x2ed/0x3a0 [ 180.179683] ? kthread_complete_and_exit+0x40/0x40 [ 180.180062] ret_from_fork+0x22/0x30 [ 180.180392] [ 180.180576] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 180.181079] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.181506] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.182087] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 180.182752] Call Trace: [ 180.182956] [ 180.183138] __schedule+0x893/0x2470 [ 180.183468] ? io_schedule_timeout+0x150/0x150 [ 180.183822] ? do_raw_spin_lock+0x121/0x260 [ 180.184159] ? rwlock_bug.part.0+0x90/0x90 [ 180.184516] schedule+0xda/0x1b0 [ 180.184787] rescuer_thread+0x851/0xdb0 [ 180.185098] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.185509] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.185896] ? lockdep_hardirqs_on+0x79/0x100 [ 180.186245] ? worker_thread+0x1260/0x1260 [ 180.186621] kthread+0x2ed/0x3a0 [ 180.186904] ? kthread_complete_and_exit+0x40/0x40 [ 180.187284] ret_from_fork+0x22/0x30 [ 180.187623] [ 180.187864] [ 180.187864] Showing all locks held in the system: [ 180.188308] 1 lock held by rcu_tasks_kthre/11: [ 180.188640] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 180.189309] 1 lock held by khungtaskd/25: [ 180.189614] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 180.190240] 1 lock held by systemd-journal/111: [ 180.190581] 1 lock held by in:imklog/187: [ 180.190873] #0: ffff88800ec88868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 180.191480] 3 locks held by rs:main Q:Reg/188: [ 180.191797] 2 locks held by syz-executor/4165: [ 180.192109] [ 180.192231] ============================================= [ 180.192231] 04:43:04 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000013c0)=""/51) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:43:04 executing program 7: socketpair(0x15, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @initial, {0x9, 0x20}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x6, @random=0x2, 0x0, @void, @void, @val={0x3, 0x1, 0xa1}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb9, 0x81}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x4, 0x0, {0xc9b, 0x7fa, 0x0, 0x4}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x97, 0x20, 0x7}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x24000010) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x14, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x8c, 0x96}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x4, 0x0, {0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0x80, 0x40}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7ff}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x240040c1}, 0x804) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x72cc5fb96b714c8e}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c0c2564769a644228402f0f271807ee4"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4c96c6a64861e2eed49e6c81fe400b79"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2da0e20c8621e40a51d9f16399ab30c4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "255d21fe8afa4d3b28b3291615ca53ec"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c1b1a1695abe31da7c692c1d9aceae8e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ff5243e1a457f8bc971df652b0f6744"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000881) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x16}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004054) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0xa, 0x0, 0x201, 0x70bd25, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @u32=0x20}]}]}, 0x20}}, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000007c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) 04:43:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/89) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:43:04 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000480)=""/20) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) 04:43:04 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) 04:43:04 executing program 5: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {0x9, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "6e4a8c54fda9225c8c02405df5d43355977e6e4aa3eae0a5f67836a3b3e156c3cfd0e5cc6e6641cb6cb7622b1e0fdb81fda164402ff736c596f6650246437bfaea533b0d59ba65a0b3742d23097d341037b719b3e6143d600abf1e"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "593d01945fb03f8d53059a4eb2384296a27a2e06b88806e4b23c90194b629418a5babb821b7665fefa8e46da8f65e5d4ba4e2f59072bfe97ea004f7d50877900858b"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) read$snapshot(0xffffffffffffffff, &(0x7f0000000380)=""/37, 0x25) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair(0x2b, 0xf, 0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x800, 0x5, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x1c}}, 0x80) epoll_create1(0x80000) socketpair(0x25, 0x3, 0xffff8f4e, &(0x7f0000000540)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x64) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) 04:43:04 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) semget(0x2, 0x3, 0x38c) semop(0x0, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) 04:43:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000140}, 0x0) socketpair(0x8, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a49f83589377"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x823}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xde08}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair(0x3, 0x5, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x1, 0xf0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x72}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa0}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdd5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dc9e3882e935"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bea2a1652c3f"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040000) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "95fa3443a33d83db967f629271af6a15"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cee6af9582fa50353ec4b96eef25fc9b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7967bdaa5b22d39374a41521f383d312"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x9}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000015) 04:43:04 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) semget(0x2, 0x3, 0x38c) semop(0x0, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) 04:43:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x20000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x3, 0x2, 0x9}, {{0x77359400}, 0x1, 0x2, 0x80}, {{}, 0x11, 0x401, 0x1f}, {{}, 0x5, 0x7, 0x8}, {{r1, r2/1000+10000}, 0x0, 0x9, 0x7ff}, {{}, 0x16, 0x7, 0x7f}, {{0x77359400}, 0x4, 0x87d1, 0xafee}, {{r3, r4/1000+60000}, 0x14, 0xffff, 0x101}], 0xc0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000008) 04:43:04 executing program 4: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/243) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/197) r0 = msgget$private(0x0, 0x208) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/241) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/105) r1 = msgget$private(0x0, 0x5) r2 = getgid() r3 = getgid() r4 = getpgrp(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0xee00, r2, 0xee00, r3, 0x123, 0x7}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7, 0x40000000000, 0x2, 0x1ff, 0x20, 0xffffffffffffffff, r4}) r5 = getpgrp(r4) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, 0xffffffffffffffff, r3, 0xee00, r3, 0x1, 0x9882}, 0x0, 0x0, 0x1, 0x80, 0x7, 0x6, 0x800, 0x101, 0x101, 0x6, r4, r5}) msgsnd(r1, &(0x7f0000000540)={0x0, "9eda38637b744f406b697b1f0d6bf03698539e470fe68e1328bc173aec830dcb213ea11746cf50eeac7032f2102cc8388ffa315ab6807d1c6ad187df586606333d01878a3040eb2705f7139983c5c057725c675347bc508aca3fee08935f4b62b1bb9254be1b8af4f83e5a55f258e141d6532e2a5c186c0fe22e76f474b91e926323362caf6627036509263bee99d6b013ae8ec55386e3a06f3f8cad62e28bd7f31dbb5f54a5f7f98d903becc51a881be3ccd5eda1402721eecad56706ce75b80c804dbddc24aa0bcc6c85697303882a23c580a1b36c2e6a8e4513f9df10eb3621f6240cee814ba890be2a19fc3d8e6fb5515554d46af303"}, 0x100, 0x0) 04:43:04 executing program 2: socketpair(0x1f, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc493d3b2b13e1924}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x86, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x9, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xded3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0200900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) 04:43:04 executing program 6: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000040)={0x3, "4d93c08e51bd48bdbbccb81f84a9c3985b4290ce168d691a5f45765ad89dbc093cf4574e21c3796fdf5a5fa9e9f3832c"}, 0x38, 0x25bbe40dfe348642) r0 = msgget$private(0x0, 0x1) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/227) msgsnd(0xffffffffffffffff, &(0x7f0000000180)={0x1, "e88f630ab64840d14fcc4d33fc1c636d21855b1635a6ad4306e2ea6337c456b5f965ffc6e87a91547be401afdd0df640291992eff3db098ce06abe090a6aafea1945dccd0146b0acce94a9cb61e1e7fe5485f03d330064e4fe5565bfab27613c77f473052f77dcc2b40a775fa76bfd4cf97cda9dba6050f4ce9d3cff3207524ced7464beecae728eba2efcad64f1bf639dc411b6a791f474b608c1dcfdfa0619d9979b79dbc1da3c3d44ce97cf2733d4e1c45ea18be78e13cb749346"}, 0xc4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000280)=""/4096) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001280)=""/141) r1 = msgget$private(0x0, 0x9e) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000001340)=""/14) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001380)=""/24) r2 = semget(0x0, 0x0, 0x40) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000001540)=0xe838000) 04:43:05 executing program 5: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {0x9, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "6e4a8c54fda9225c8c02405df5d43355977e6e4aa3eae0a5f67836a3b3e156c3cfd0e5cc6e6641cb6cb7622b1e0fdb81fda164402ff736c596f6650246437bfaea533b0d59ba65a0b3742d23097d341037b719b3e6143d600abf1e"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "593d01945fb03f8d53059a4eb2384296a27a2e06b88806e4b23c90194b629418a5babb821b7665fefa8e46da8f65e5d4ba4e2f59072bfe97ea004f7d50877900858b"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) read$snapshot(0xffffffffffffffff, &(0x7f0000000380)=""/37, 0x25) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair(0x2b, 0xf, 0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x800, 0x5, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x1c}}, 0x80) epoll_create1(0x80000) socketpair(0x25, 0x3, 0xffff8f4e, &(0x7f0000000540)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) 04:43:05 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/183) r0 = semget$private(0x0, 0x3, 0x9) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/3) r1 = semget(0x3, 0x1, 0x100) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000100)=""/151) r2 = semget(0x2, 0x0, 0x1) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000001c0)=""/186) r3 = semget$private(0x0, 0x9, 0xd2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000280)=[{0x4, 0x100, 0x1800}, {0x4, 0x4e37, 0x800}, {0x2, 0x5, 0x1000}], 0x3, &(0x7f0000000300)={r4, r5+10000000}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000340)=""/195) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000440)=""/227) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000540)=""/63) semop(0x0, &(0x7f0000000580)=[{0x3, 0xb953, 0x1800}, {0x3, 0xbd98}], 0x2) semop(0x0, &(0x7f0000000680)=[{0x2, 0x1000, 0x1000}, {0x1, 0x7, 0x1000}], 0x2) VM DIAGNOSIS: 04:43:03 Registers: info registers vcpu 0 RAX=00000000000000ba RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88800d619ac0 RSI=ffffffff81477339 RDI=0000000000000001 RBP=ffff8880187eff48 RSP=ffff8880187eff40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff8880187eff58 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8424eb5b RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f20ed10c900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f20ec4fdf30 CR3=000000000ea88000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 5837fe9dc1c91f32 00000000000ae618 YMM01=0000000000000000 0000000000000000 e1bfbd328c7ced91 b549f3f0e8587068 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 375afdebbf381c81 0000000000122a10 YMM04=0000000000000000 0000000000000000 a5de080a65805eb9 0000000000135ca8 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 d577cc7baeb4698e 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000200000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f20ec55f7b0 CR3=000000001d4d4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 e1bfbd328c7ced91 b549f3f0e8587068 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 375afdebbf381c81 0000000000122a10 YMM04=0000000000000000 0000000000000000 32cf797a6b83891f 0000000000135790 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 d577cc7baeb4698e 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000200000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000