Warning: Permanently added '[localhost]:47160' (ECDSA) to the list of known hosts. 2022/10/01 05:44:29 fuzzer started 2022/10/01 05:44:29 dialing manager at localhost:35095 syzkaller login: [ 44.555504] cgroup: Unknown subsys name 'net' [ 44.719572] cgroup: Unknown subsys name 'rlimit' 2022/10/01 05:44:44 syscalls: 215 2022/10/01 05:44:44 code coverage: enabled 2022/10/01 05:44:44 comparison tracing: enabled 2022/10/01 05:44:44 extra coverage: enabled 2022/10/01 05:44:44 setuid sandbox: enabled 2022/10/01 05:44:44 namespace sandbox: enabled 2022/10/01 05:44:44 Android sandbox: enabled 2022/10/01 05:44:44 fault injection: enabled 2022/10/01 05:44:44 leak checking: enabled 2022/10/01 05:44:44 net packet injection: enabled 2022/10/01 05:44:44 net device setup: enabled 2022/10/01 05:44:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 05:44:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 05:44:44 USB emulation: enabled 2022/10/01 05:44:44 hci packet injection: enabled 2022/10/01 05:44:44 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 05:44:44 802.15.4 emulation: enabled 2022/10/01 05:44:44 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 05:44:46 starting 8 fuzzer processes 05:44:46 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000240)={0xbf8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x88, 0xd, 0x0, 0x1, [{0x81, 0x0, "7d7932ed2763733f60cf83d85d05202f63d8cd01e5fb4d4ab2dc35f9a684a86dca2531ee6159d18aee8a3002460bc9ae4aab2b304e1546fcfb1931e1eecca4bc17b44a35ee888001588053e71b86f5de48e9aaa50c17ead62af7d3f14f778fb52b12625488ecc8b5cfe48a72e5b68e5bbebc04ad47f41c582234efd39e"}]}, @NL80211_NAN_FUNC_SRF={0x78, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3a98}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf, 0xb, "986debe04d3ff69f7c8422"}]}, @NL80211_ATTR_NAN_FUNC={0x298, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SRF={0x280, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x694, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x590, 0xd, 0x0, 0x1, [{0xb5, 0x0, "096ae68a1443a213ee7672dda2279ef572581158814856d9b8ac73521dc6e3c9a5aa3cf9ac7b4e81317b981300a6e6bbc5663cd85aebb195f0edc91b936e9aa514feb16785321f22a8e07cd2c30a94080b5b931c7b2b770a37964e2a0d56a043d7a2c06f5fe4bc20eeef08d68fd08a74560182fe8badaf2e92129d649424eacd7b3d2a41b419850fd29dc2f094361fab750b6be25ed4941bd7e8844a52ea74caa13b66a13d576baf6794b8e9f9f3b09e6d"}, {0xe0, 0x0, "3f10526d21141ab2c17630ac007aa0ef92c93026b9b95263762c37079e53e21c6aa7e83f6d21dd860f03701037621034fa79e7abb8292da350cde2ef36cedf0aa4b7eab15014f4098b146056678213bbd5b40a94b799c84cddac46b4fd3760cc749c6268f09c0d511c244ec8ff54a0103159eaeff0482aa2624381a73642ded7b22326f03e7d2815e0ea9258380348f748caa051f4851d4f0adef9233c3d6bc7fe342037df87b4cbc3960e99ca6ca12fd5421cf28f4831f858c59a1c86deb73d3d7021368d52ed6ca9a3932b8936c8049eee0d38d7faebe86fb6bc8d"}, {0x84, 0x0, "7cc7bf552cb378a1d70ac7e9a1d98c3fbbf0fc645a192799b961a705dc54010ad357fe6fa62e40c3a1fc5685d1ec06537919e67ddebd6a01271e96cb6e0da41c6c3eb6f9b80f71248f0fc6e3e2ad6450f794c4ce970be19598ca6b8e6a425ace1454e2438257a4a3137ea4b8fc6efa379e53734fdd5866df8b8dc1b1e22c622f"}, {0x6a, 0x0, "55b8a471f6f862db6c9d9ac98628ef5ea51377301ca3e79f22375109071ff38c289a95ea8486e8b9e740860b8e7eb62f2215dab757f05071a67836eaee506df1b48e001349dfad50800edbedaa931581af52c036ef20f14cb4f8098dee8f44ac0e15c1fe6fd6"}, {0xc3, 0x0, "6febb9498ef8d3286f0acf03e3227a9a8edcd6546a68858d83b56ef5516c962a295d449118364780ad329de364cc509676523e2771b0ba6b715c221765c11022f8c260d5ff77b9b41aa27f54117f9b35e68bb74a1102a8377c6548d77f8792b4ee0a00a68eef2f1c999a7ba941b6427f28df180e20827fab36d4300ccbc1ad0936a80ccc3c750843105b80be1bd9ad0a890b74886a8f1add0f378d3c52d2be2c5f68ca48fac9cbe4dc79944c44f8d7458308f349cce4b417e7415306f7d41c"}, {0x4d, 0x0, "2130796877dabb54c7c38cf771bcdf92aa39ae2a3a0dbe72642c7c2d407fa6e9363d913a46c747160d1df5ab3d559b2f22d2cc770ffeee74925ce651f47ddfd76f4f715843a5a619f5"}, {0x64, 0x0, "293772a4d9bebac843d34bdb6a443be0d05b71b9726486a6f1ac60186bca4b613ccb45e4f9de8e46fd0a8594a193b268e187586a097f058de300cfa3fe81432f50b2c36c215d48452cb51d161d8a421e62b135f9715ff40930834e87080e7bae"}, {0x95, 0x0, "062761841c82cdf5fd6f24437327481b390dded90d61cdcb80613518b3fb7d39a94066e051ab222c262470895346d49041fca602fc49f7ee2a6a156182586cee5bf4a25c76f9a848ced947d68a54ad7a4de253cfbd4851a231041bf842a1c6d38de61c92b8c2c2fb2a4be40bbceb111839b8fcbfa19ec75cbe3dd0270c3feee103313f2a2283abb8be316644f9d53649fc"}, {0x9a, 0x0, "caaef05813716b000ae45bddc98e5f01369117b86516595a887e9015aa19b479c41255338b4dc10f00ba85ad6653422c6ef45874de76bd7b98a530ceae3849be7d9d2f8241ad8e956d2c07efdca41659d5626d6cfd78deab97949167174910d897b0ac661872cd19bb87f41463ff81f0e4b2316bc03f7762a1863e39c544e8e9d3636c4fae4cb523e2b48c952ff63fce72efc443c10a"}, {0x57, 0x0, "4cc0bbf1d0465712b1dbba9a55ee0c0da7457e8183dbabdd346bbcf072878988f66f4b9d2c3c2770adf255f70dd459b12113609b7ef55bd9d911e734b8a90ae4e867dbae9170cc8436bf6c754c05ee28714638"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xdc, 0xd, 0x0, 0x1, [{0xd7, 0x0, "98f7c09209b2b99ed41d7de1f6f153d4da7583ffa03b014df47d615f221932ae0f0e998f470fb52fbd23cba6a5cf91ac61191ddd06c66fac95f59a2165ff49ce9635eb8284554f59abea95eb42dbeb8c3773e3878c1f0e9a060f5f9a5baefd93a88b855c5c7f158537cfc97c8a6716d53135a4202c62b91a792fc5e2ccf333f39374ce844c127a997975d807eed09931148cf094c74e0116d7c8cd098be9268b949816f6038eb0e97a8bce6b22399795f1657d40280e678ffb20c1684a76bc0ef2c4e2b1f1534a4ac8b886d0be96f0f4bf12b2"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffa}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f039d5afe59"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4a}, @NL80211_NAN_SRF_BF={0x103, 0x2, "7817010c18e14b98f309e3d0d944a268154bba95559528a51dcd1a28c162a3393bf5f7d0b27cb8aee4ef907301156bfa725f6459fd970f77d9f983e34111cd74ee483cce8fb423db0a65071d028d4dc3be818e4719bae95783bfcb124c345196be8f899b453a5f316c721f6518dd7a91e3894d6fb89a37b2a3e1a6ac1bbb63651559b8b2bbbd55e7ca0bfbb77d41c8752d6274a1cf8f8946e2a78960f4b4a396863aee33580eb97e1909ef97e345a00a06ba89cc28d147cbaf5a68a157eaee2f4cf5c65cb43ebdc98e78fdf9184c5c37ac7668c13fd5d6bcd895bdd91909f843e4a923f78adfbe90ead112a86353efc05376e251e4a3ee385354a2e8c0d3b4"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0xbf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a85fe7c16333e9a4f54e2db7bc0ae689"}]}, 0x30}}, 0x814) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x821}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40801) syz_genetlink_get_family_id$nbd(&(0x7f0000001300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x14000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r1, 0x309, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x8811) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x16c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x36, 0x6, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0xc, 0x24, 0x2, 0x36, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x9, 0x18, 0x4, 0x90, 0x1b, 0x36, 0xb, 0x30, 0x30, 0x36, 0x3, 0x4, 0x1, 0x1, 0x3, 0xc, 0x6c]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x16, 0x1b, 0x48, 0x48, 0x30, 0x30, 0xc, 0x5, 0x4, 0x3, 0x5, 0x17eb35718dd86b60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x3, 0x2, 0x5, 0x6, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x24, 0x24, 0x2, 0x48, 0x6, 0xc, 0x9ca729b95f655b8, 0x1d, 0xb]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x2}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x3, 0x24, 0x30, 0x1b, 0x1, 0x36, 0xd, 0x4, 0x2, 0x6c, 0x48, 0x18, 0xb, 0x1, 0x30, 0x12, 0x2a, 0x4, 0x2, 0x24, 0x1, 0x4, 0x2, 0x6c, 0x6, 0x18, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x401, 0x40, 0xc0, 0x7, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x7, 0x8, 0x1af1, 0x994, 0x0, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x30, 0x30, 0x1b, 0x16, 0x36, 0x2, 0xb, 0x16, 0x30, 0x1b, 0x60, 0x1, 0x3, 0xc, 0x9, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4c11) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x53}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 05:44:46 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000840)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000880)={0x400, 0x7, 0x4, 0x401, 0x10, "e581c5737837134a"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x553}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1f}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004000) 05:44:46 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x480c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8004) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r2) waitid(0x2, 0x0, &(0x7f0000000480), 0x1000000, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0xa, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10008091) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "e524353652c9"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4686551461"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "970f59d95b1dc93b"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x400c8d1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff) write$char_usb(r5, &(0x7f0000000880)="9f3ed689fad56ea3450f4ac881e775d845d5216b77b65b3a44b09999e3a911bb5144d3ef1dc4b5368b262b8713ba5eb00b31031c163d961697927995264c33e11c87f7b9859697e9cd62f0a3e92f7bb615917d37b146bc0d806837740364e1263d995e18cc56b95d6ed79e058bef8e78805d324746e3045125400a00e6fafd73dadbb68ca3fc1c77a501093b2dfc937aa9dab0b5483eebcb5397c505dcc83ef6", 0xa0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x1) 05:44:46 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000300)) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x821) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000440)={0x74, 0x648f, 0x23, 0x2, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) [ 60.454405] audit: type=1400 audit(1664603086.280:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:44:46 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x4, 0x5, 0x91f, 0x2, 0x16, "df01be747a735905"}) ioctl$TCSBRKP(r2, 0x5425, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000540)=""/4096) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001540)) 05:44:46 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048080}, 0x40010) r6 = socket(0xb, 0x80000, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000001}, 0x4080) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x55, 0x46}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x50) ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000000cc0)={0x7, 0x3, 0x9, 0x8, 0x80000000, 0x3b}) 05:44:46 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200081}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31e918551fddb0de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="17f1f28f2ebfbb050d57450e608e69e9bf1c3260794345e36648e6d257365fde"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10109437ae2d965d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60d845cad494b3f54abfda9768bce987bc6b6437cd5038b8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d04540b4e7255a453fdada1134d7ad8"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15c597e75549bc6b5fe7c2d1b2e47e4da5fc80ab19e12133f00285d3413ff721"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95c4fde80794cd896bfe641d896f21eeecc1b609a9978087e9d6ff845ef8fafd"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a94ad7ad2dff7792d8f9bf83d49f0ab1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d33981c8b2c404d151b5ff9a5f7d642cc355cc9be53552258c23d50b420d5a5d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2649c9e7d1fd9bc740300d102e5ebc23565d00714cbfc6040de70f577e693568"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f9c0c2241e13f16567c7a09c5655ab95ef24ff696af8e3d311060521d55c90d"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x89}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x5, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8, 0x800, 0x7, 0x0, 0x6, 0x200, 0x9, 0x10001, 0x421e486e]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2541, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0xa6801, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x64, 0x1, 0xcc2b, 0x3, 0x5, 0x89, 0x0, 0x2]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4050) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 05:44:46 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000e80)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000f00)) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000f40)) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000f80)) [ 61.755506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.757449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.759456] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.760951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.763188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.764857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.768115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.769546] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.771110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.775724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.777343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.779675] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.780982] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.782744] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.784192] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.799416] Bluetooth: hci2: HCI_REQ-0x0c1a [ 61.831472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.840224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.844141] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.846648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.865401] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.868346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.870969] Bluetooth: hci1: HCI_REQ-0x0c1a [ 61.879104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.890114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.899382] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.901316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.903304] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.903542] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.905150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.907956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.909839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.914030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.914059] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.918657] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.920694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.922851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.924117] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.926984] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.929277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.933312] Bluetooth: hci3: HCI_REQ-0x0c1a [ 61.946243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.950246] Bluetooth: hci6: HCI_REQ-0x0c1a [ 61.951754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.972990] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.974458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.020296] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.023820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.038260] Bluetooth: hci5: HCI_REQ-0x0c1a [ 63.831423] Bluetooth: hci0: command 0x0409 tx timeout [ 63.831496] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 63.833245] Bluetooth: hci2: command 0x0409 tx timeout [ 63.895415] Bluetooth: hci1: command 0x0409 tx timeout [ 63.960116] Bluetooth: hci6: command 0x0409 tx timeout [ 63.961172] Bluetooth: hci3: command 0x0409 tx timeout [ 64.022989] Bluetooth: hci7: command 0x0409 tx timeout [ 64.087002] Bluetooth: hci5: command 0x0409 tx timeout [ 65.879121] Bluetooth: hci0: command 0x041b tx timeout [ 65.879959] Bluetooth: hci2: command 0x041b tx timeout [ 65.942988] Bluetooth: hci1: command 0x041b tx timeout [ 66.007017] Bluetooth: hci3: command 0x041b tx timeout [ 66.007708] Bluetooth: hci6: command 0x041b tx timeout [ 66.071020] Bluetooth: hci7: command 0x041b tx timeout [ 66.135014] Bluetooth: hci5: command 0x041b tx timeout [ 67.927057] Bluetooth: hci2: command 0x040f tx timeout [ 67.927075] Bluetooth: hci0: command 0x040f tx timeout [ 67.991086] Bluetooth: hci1: command 0x040f tx timeout [ 68.055074] Bluetooth: hci6: command 0x040f tx timeout [ 68.055491] Bluetooth: hci3: command 0x040f tx timeout [ 68.119011] Bluetooth: hci7: command 0x040f tx timeout [ 68.182966] Bluetooth: hci5: command 0x040f tx timeout [ 68.822959] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 69.975358] Bluetooth: hci2: command 0x0419 tx timeout [ 69.975983] Bluetooth: hci0: command 0x0419 tx timeout [ 70.039065] Bluetooth: hci1: command 0x0419 tx timeout [ 70.103532] Bluetooth: hci3: command 0x0419 tx timeout [ 70.103546] Bluetooth: hci6: command 0x0419 tx timeout [ 70.167945] Bluetooth: hci7: command 0x0419 tx timeout [ 70.231540] Bluetooth: hci5: command 0x0419 tx timeout [ 73.304011] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 75.697424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.706505] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.708398] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.715152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.719481] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.721700] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.739403] Bluetooth: hci4: HCI_REQ-0x0c1a [ 77.782997] Bluetooth: hci4: command 0x0409 tx timeout [ 79.830952] Bluetooth: hci4: command 0x041b tx timeout [ 81.878929] Bluetooth: hci4: command 0x040f tx timeout [ 83.927035] Bluetooth: hci4: command 0x0419 tx timeout 05:45:40 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000300)) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x821) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000440)={0x74, 0x648f, 0x23, 0x2, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:45:40 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200081}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31e918551fddb0de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="17f1f28f2ebfbb050d57450e608e69e9bf1c3260794345e36648e6d257365fde"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10109437ae2d965d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60d845cad494b3f54abfda9768bce987bc6b6437cd5038b8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d04540b4e7255a453fdada1134d7ad8"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15c597e75549bc6b5fe7c2d1b2e47e4da5fc80ab19e12133f00285d3413ff721"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95c4fde80794cd896bfe641d896f21eeecc1b609a9978087e9d6ff845ef8fafd"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a94ad7ad2dff7792d8f9bf83d49f0ab1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d33981c8b2c404d151b5ff9a5f7d642cc355cc9be53552258c23d50b420d5a5d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2649c9e7d1fd9bc740300d102e5ebc23565d00714cbfc6040de70f577e693568"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f9c0c2241e13f16567c7a09c5655ab95ef24ff696af8e3d311060521d55c90d"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x89}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x5, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8, 0x800, 0x7, 0x0, 0x6, 0x200, 0x9, 0x10001, 0x421e486e]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2541, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0xa6801, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x64, 0x1, 0xcc2b, 0x3, 0x5, 0x89, 0x0, 0x2]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4050) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 05:45:40 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000300)) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x821) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000440)={0x74, 0x648f, 0x23, 0x2, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:45:41 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200081}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31e918551fddb0de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="17f1f28f2ebfbb050d57450e608e69e9bf1c3260794345e36648e6d257365fde"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10109437ae2d965d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60d845cad494b3f54abfda9768bce987bc6b6437cd5038b8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d04540b4e7255a453fdada1134d7ad8"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15c597e75549bc6b5fe7c2d1b2e47e4da5fc80ab19e12133f00285d3413ff721"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95c4fde80794cd896bfe641d896f21eeecc1b609a9978087e9d6ff845ef8fafd"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a94ad7ad2dff7792d8f9bf83d49f0ab1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d33981c8b2c404d151b5ff9a5f7d642cc355cc9be53552258c23d50b420d5a5d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2649c9e7d1fd9bc740300d102e5ebc23565d00714cbfc6040de70f577e693568"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f9c0c2241e13f16567c7a09c5655ab95ef24ff696af8e3d311060521d55c90d"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x89}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x5, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8, 0x800, 0x7, 0x0, 0x6, 0x200, 0x9, 0x10001, 0x421e486e]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2541, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0xa6801, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x64, 0x1, 0xcc2b, 0x3, 0x5, 0x89, 0x0, 0x2]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4050) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 05:45:41 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000300)) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x821) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000440)={0x74, 0x648f, 0x23, 0x2, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:45:41 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000300)) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x821) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:45:41 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048080}, 0x40010) r6 = socket(0xb, 0x80000, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000001}, 0x4080) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x55, 0x46}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x50) ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000000cc0)={0x7, 0x3, 0x9, 0x8, 0x80000000, 0x3b}) 05:45:41 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000300)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:45:58 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000840)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000880)={0x400, 0x7, 0x4, 0x401, 0x10, "e581c5737837134a"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x553}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1f}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004000) 05:45:58 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x4, 0x5, 0x91f, 0x2, 0x16, "df01be747a735905"}) ioctl$TCSBRKP(r2, 0x5425, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000540)=""/4096) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001540)) 05:45:58 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000240)={0xbf8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x88, 0xd, 0x0, 0x1, [{0x81, 0x0, "7d7932ed2763733f60cf83d85d05202f63d8cd01e5fb4d4ab2dc35f9a684a86dca2531ee6159d18aee8a3002460bc9ae4aab2b304e1546fcfb1931e1eecca4bc17b44a35ee888001588053e71b86f5de48e9aaa50c17ead62af7d3f14f778fb52b12625488ecc8b5cfe48a72e5b68e5bbebc04ad47f41c582234efd39e"}]}, @NL80211_NAN_FUNC_SRF={0x78, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3a98}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf, 0xb, "986debe04d3ff69f7c8422"}]}, @NL80211_ATTR_NAN_FUNC={0x298, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SRF={0x280, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x694, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x590, 0xd, 0x0, 0x1, [{0xb5, 0x0, "096ae68a1443a213ee7672dda2279ef572581158814856d9b8ac73521dc6e3c9a5aa3cf9ac7b4e81317b981300a6e6bbc5663cd85aebb195f0edc91b936e9aa514feb16785321f22a8e07cd2c30a94080b5b931c7b2b770a37964e2a0d56a043d7a2c06f5fe4bc20eeef08d68fd08a74560182fe8badaf2e92129d649424eacd7b3d2a41b419850fd29dc2f094361fab750b6be25ed4941bd7e8844a52ea74caa13b66a13d576baf6794b8e9f9f3b09e6d"}, {0xe0, 0x0, "3f10526d21141ab2c17630ac007aa0ef92c93026b9b95263762c37079e53e21c6aa7e83f6d21dd860f03701037621034fa79e7abb8292da350cde2ef36cedf0aa4b7eab15014f4098b146056678213bbd5b40a94b799c84cddac46b4fd3760cc749c6268f09c0d511c244ec8ff54a0103159eaeff0482aa2624381a73642ded7b22326f03e7d2815e0ea9258380348f748caa051f4851d4f0adef9233c3d6bc7fe342037df87b4cbc3960e99ca6ca12fd5421cf28f4831f858c59a1c86deb73d3d7021368d52ed6ca9a3932b8936c8049eee0d38d7faebe86fb6bc8d"}, {0x84, 0x0, "7cc7bf552cb378a1d70ac7e9a1d98c3fbbf0fc645a192799b961a705dc54010ad357fe6fa62e40c3a1fc5685d1ec06537919e67ddebd6a01271e96cb6e0da41c6c3eb6f9b80f71248f0fc6e3e2ad6450f794c4ce970be19598ca6b8e6a425ace1454e2438257a4a3137ea4b8fc6efa379e53734fdd5866df8b8dc1b1e22c622f"}, {0x6a, 0x0, "55b8a471f6f862db6c9d9ac98628ef5ea51377301ca3e79f22375109071ff38c289a95ea8486e8b9e740860b8e7eb62f2215dab757f05071a67836eaee506df1b48e001349dfad50800edbedaa931581af52c036ef20f14cb4f8098dee8f44ac0e15c1fe6fd6"}, {0xc3, 0x0, "6febb9498ef8d3286f0acf03e3227a9a8edcd6546a68858d83b56ef5516c962a295d449118364780ad329de364cc509676523e2771b0ba6b715c221765c11022f8c260d5ff77b9b41aa27f54117f9b35e68bb74a1102a8377c6548d77f8792b4ee0a00a68eef2f1c999a7ba941b6427f28df180e20827fab36d4300ccbc1ad0936a80ccc3c750843105b80be1bd9ad0a890b74886a8f1add0f378d3c52d2be2c5f68ca48fac9cbe4dc79944c44f8d7458308f349cce4b417e7415306f7d41c"}, {0x4d, 0x0, "2130796877dabb54c7c38cf771bcdf92aa39ae2a3a0dbe72642c7c2d407fa6e9363d913a46c747160d1df5ab3d559b2f22d2cc770ffeee74925ce651f47ddfd76f4f715843a5a619f5"}, {0x64, 0x0, "293772a4d9bebac843d34bdb6a443be0d05b71b9726486a6f1ac60186bca4b613ccb45e4f9de8e46fd0a8594a193b268e187586a097f058de300cfa3fe81432f50b2c36c215d48452cb51d161d8a421e62b135f9715ff40930834e87080e7bae"}, {0x95, 0x0, "062761841c82cdf5fd6f24437327481b390dded90d61cdcb80613518b3fb7d39a94066e051ab222c262470895346d49041fca602fc49f7ee2a6a156182586cee5bf4a25c76f9a848ced947d68a54ad7a4de253cfbd4851a231041bf842a1c6d38de61c92b8c2c2fb2a4be40bbceb111839b8fcbfa19ec75cbe3dd0270c3feee103313f2a2283abb8be316644f9d53649fc"}, {0x9a, 0x0, "caaef05813716b000ae45bddc98e5f01369117b86516595a887e9015aa19b479c41255338b4dc10f00ba85ad6653422c6ef45874de76bd7b98a530ceae3849be7d9d2f8241ad8e956d2c07efdca41659d5626d6cfd78deab97949167174910d897b0ac661872cd19bb87f41463ff81f0e4b2316bc03f7762a1863e39c544e8e9d3636c4fae4cb523e2b48c952ff63fce72efc443c10a"}, {0x57, 0x0, "4cc0bbf1d0465712b1dbba9a55ee0c0da7457e8183dbabdd346bbcf072878988f66f4b9d2c3c2770adf255f70dd459b12113609b7ef55bd9d911e734b8a90ae4e867dbae9170cc8436bf6c754c05ee28714638"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xdc, 0xd, 0x0, 0x1, [{0xd7, 0x0, "98f7c09209b2b99ed41d7de1f6f153d4da7583ffa03b014df47d615f221932ae0f0e998f470fb52fbd23cba6a5cf91ac61191ddd06c66fac95f59a2165ff49ce9635eb8284554f59abea95eb42dbeb8c3773e3878c1f0e9a060f5f9a5baefd93a88b855c5c7f158537cfc97c8a6716d53135a4202c62b91a792fc5e2ccf333f39374ce844c127a997975d807eed09931148cf094c74e0116d7c8cd098be9268b949816f6038eb0e97a8bce6b22399795f1657d40280e678ffb20c1684a76bc0ef2c4e2b1f1534a4ac8b886d0be96f0f4bf12b2"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffa}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f039d5afe59"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4a}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0xbf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a85fe7c16333e9a4f54e2db7bc0ae689"}]}, 0x30}}, 0x814) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x821}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40801) syz_genetlink_get_family_id$nbd(&(0x7f0000001300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x14000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r1, 0x309, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x8811) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x16c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x36, 0x6, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0xc, 0x24, 0x2, 0x36, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x9, 0x18, 0x4, 0x90, 0x1b, 0x36, 0xb, 0x30, 0x30, 0x36, 0x3, 0x4, 0x1, 0x1, 0x3, 0xc, 0x6c]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x16, 0x1b, 0x48, 0x48, 0x30, 0x30, 0xc, 0x5, 0x4, 0x3, 0x5, 0x17eb35718dd86b60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x3, 0x2, 0x5, 0x6, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x24, 0x24, 0x2, 0x48, 0x6, 0xc, 0x9ca729b95f655b8, 0x1d, 0xb]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x2}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x3, 0x24, 0x30, 0x1b, 0x1, 0x36, 0xd, 0x4, 0x2, 0x6c, 0x48, 0x18, 0xb, 0x1, 0x30, 0x12, 0x2a, 0x4, 0x2, 0x24, 0x1, 0x4, 0x2, 0x6c, 0x6, 0x18, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x401, 0x40, 0xc0, 0x7, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x7, 0x8, 0x1af1, 0x994, 0x0, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x30, 0x30, 0x1b, 0x16, 0x36, 0x2, 0xb, 0x16, 0x30, 0x1b, 0x60, 0x1, 0x3, 0xc, 0x9, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4c11) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x53}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 05:45:58 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000e80)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000f00)) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000f40)) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000f80)) 05:45:58 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:45:58 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x480c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8004) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r2) waitid(0x2, 0x0, &(0x7f0000000480), 0x1000000, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0xa, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10008091) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "e524353652c9"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4686551461"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "970f59d95b1dc93b"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x400c8d1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff) write$char_usb(r5, &(0x7f0000000880)="9f3ed689fad56ea3450f4ac881e775d845d5216b77b65b3a44b09999e3a911bb5144d3ef1dc4b5368b262b8713ba5eb00b31031c163d961697927995264c33e11c87f7b9859697e9cd62f0a3e92f7bb615917d37b146bc0d806837740364e1263d995e18cc56b95d6ed79e058bef8e78805d324746e3045125400a00e6fafd73dadbb68ca3fc1c77a501093b2dfc937aa9dab0b5483eebcb5397c505dcc83ef6", 0xa0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x1) 05:45:58 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200081}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31e918551fddb0de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="17f1f28f2ebfbb050d57450e608e69e9bf1c3260794345e36648e6d257365fde"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10109437ae2d965d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60d845cad494b3f54abfda9768bce987bc6b6437cd5038b8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d04540b4e7255a453fdada1134d7ad8"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15c597e75549bc6b5fe7c2d1b2e47e4da5fc80ab19e12133f00285d3413ff721"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95c4fde80794cd896bfe641d896f21eeecc1b609a9978087e9d6ff845ef8fafd"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a94ad7ad2dff7792d8f9bf83d49f0ab1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d33981c8b2c404d151b5ff9a5f7d642cc355cc9be53552258c23d50b420d5a5d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2649c9e7d1fd9bc740300d102e5ebc23565d00714cbfc6040de70f577e693568"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f9c0c2241e13f16567c7a09c5655ab95ef24ff696af8e3d311060521d55c90d"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x89}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x5, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8, 0x800, 0x7, 0x0, 0x6, 0x200, 0x9, 0x10001, 0x421e486e]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2541, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0xa6801, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x64, 0x1, 0xcc2b, 0x3, 0x5, 0x89, 0x0, 0x2]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4050) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 05:45:58 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048080}, 0x40010) r6 = socket(0xb, 0x80000, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000001}, 0x4080) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x55, 0x46}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x50) ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000000cc0)={0x7, 0x3, 0x9, 0x8, 0x80000000, 0x3b}) 05:46:11 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000240)={0xbf8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x88, 0xd, 0x0, 0x1, [{0x81, 0x0, "7d7932ed2763733f60cf83d85d05202f63d8cd01e5fb4d4ab2dc35f9a684a86dca2531ee6159d18aee8a3002460bc9ae4aab2b304e1546fcfb1931e1eecca4bc17b44a35ee888001588053e71b86f5de48e9aaa50c17ead62af7d3f14f778fb52b12625488ecc8b5cfe48a72e5b68e5bbebc04ad47f41c582234efd39e"}]}, @NL80211_NAN_FUNC_SRF={0x78, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3a98}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf, 0xb, "986debe04d3ff69f7c8422"}]}, @NL80211_ATTR_NAN_FUNC={0x298, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SRF={0x280, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "d2c66f9d5c180a6106bc01bc9b44540f3d8b0342cc14fe8ffe0ae208b902058d6fd885b4a9cb11baf8f906ea01245644e41d48de58b300479e4916ddd9181ed588b4ca79f03fdea5c55c86544bccef128d10355467f7b8ecb769c2e36bb85f52dd35f62d6b26d5257bd5cfd5ae459706ca75b3c4b368a896dbee4547d0f05ee83ecfd1a3763a09930fbda94f4e65a8661f6e92042cda7485d3ff561fc119e38edc445981338cecdb8f2ae9030e89c6fb7d32df4a9919dafb97ca2d77ffc3b0c1c8c69f1a2df99c899d8c4472d6ff78605b7ba94e736b5b8513aebcef579449b2addd353dcd54e9c6876d08062613f7541ea0cd9641d7ad34049ce070f28740"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x694, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x590, 0xd, 0x0, 0x1, [{0xb5, 0x0, "096ae68a1443a213ee7672dda2279ef572581158814856d9b8ac73521dc6e3c9a5aa3cf9ac7b4e81317b981300a6e6bbc5663cd85aebb195f0edc91b936e9aa514feb16785321f22a8e07cd2c30a94080b5b931c7b2b770a37964e2a0d56a043d7a2c06f5fe4bc20eeef08d68fd08a74560182fe8badaf2e92129d649424eacd7b3d2a41b419850fd29dc2f094361fab750b6be25ed4941bd7e8844a52ea74caa13b66a13d576baf6794b8e9f9f3b09e6d"}, {0xe0, 0x0, "3f10526d21141ab2c17630ac007aa0ef92c93026b9b95263762c37079e53e21c6aa7e83f6d21dd860f03701037621034fa79e7abb8292da350cde2ef36cedf0aa4b7eab15014f4098b146056678213bbd5b40a94b799c84cddac46b4fd3760cc749c6268f09c0d511c244ec8ff54a0103159eaeff0482aa2624381a73642ded7b22326f03e7d2815e0ea9258380348f748caa051f4851d4f0adef9233c3d6bc7fe342037df87b4cbc3960e99ca6ca12fd5421cf28f4831f858c59a1c86deb73d3d7021368d52ed6ca9a3932b8936c8049eee0d38d7faebe86fb6bc8d"}, {0x84, 0x0, "7cc7bf552cb378a1d70ac7e9a1d98c3fbbf0fc645a192799b961a705dc54010ad357fe6fa62e40c3a1fc5685d1ec06537919e67ddebd6a01271e96cb6e0da41c6c3eb6f9b80f71248f0fc6e3e2ad6450f794c4ce970be19598ca6b8e6a425ace1454e2438257a4a3137ea4b8fc6efa379e53734fdd5866df8b8dc1b1e22c622f"}, {0x6a, 0x0, "55b8a471f6f862db6c9d9ac98628ef5ea51377301ca3e79f22375109071ff38c289a95ea8486e8b9e740860b8e7eb62f2215dab757f05071a67836eaee506df1b48e001349dfad50800edbedaa931581af52c036ef20f14cb4f8098dee8f44ac0e15c1fe6fd6"}, {0xc3, 0x0, "6febb9498ef8d3286f0acf03e3227a9a8edcd6546a68858d83b56ef5516c962a295d449118364780ad329de364cc509676523e2771b0ba6b715c221765c11022f8c260d5ff77b9b41aa27f54117f9b35e68bb74a1102a8377c6548d77f8792b4ee0a00a68eef2f1c999a7ba941b6427f28df180e20827fab36d4300ccbc1ad0936a80ccc3c750843105b80be1bd9ad0a890b74886a8f1add0f378d3c52d2be2c5f68ca48fac9cbe4dc79944c44f8d7458308f349cce4b417e7415306f7d41c"}, {0x4d, 0x0, "2130796877dabb54c7c38cf771bcdf92aa39ae2a3a0dbe72642c7c2d407fa6e9363d913a46c747160d1df5ab3d559b2f22d2cc770ffeee74925ce651f47ddfd76f4f715843a5a619f5"}, {0x64, 0x0, "293772a4d9bebac843d34bdb6a443be0d05b71b9726486a6f1ac60186bca4b613ccb45e4f9de8e46fd0a8594a193b268e187586a097f058de300cfa3fe81432f50b2c36c215d48452cb51d161d8a421e62b135f9715ff40930834e87080e7bae"}, {0x95, 0x0, "062761841c82cdf5fd6f24437327481b390dded90d61cdcb80613518b3fb7d39a94066e051ab222c262470895346d49041fca602fc49f7ee2a6a156182586cee5bf4a25c76f9a848ced947d68a54ad7a4de253cfbd4851a231041bf842a1c6d38de61c92b8c2c2fb2a4be40bbceb111839b8fcbfa19ec75cbe3dd0270c3feee103313f2a2283abb8be316644f9d53649fc"}, {0x9a, 0x0, "caaef05813716b000ae45bddc98e5f01369117b86516595a887e9015aa19b479c41255338b4dc10f00ba85ad6653422c6ef45874de76bd7b98a530ceae3849be7d9d2f8241ad8e956d2c07efdca41659d5626d6cfd78deab97949167174910d897b0ac661872cd19bb87f41463ff81f0e4b2316bc03f7762a1863e39c544e8e9d3636c4fae4cb523e2b48c952ff63fce72efc443c10a"}, {0x57, 0x0, "4cc0bbf1d0465712b1dbba9a55ee0c0da7457e8183dbabdd346bbcf072878988f66f4b9d2c3c2770adf255f70dd459b12113609b7ef55bd9d911e734b8a90ae4e867dbae9170cc8436bf6c754c05ee28714638"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xdc, 0xd, 0x0, 0x1, [{0xd7, 0x0, "98f7c09209b2b99ed41d7de1f6f153d4da7583ffa03b014df47d615f221932ae0f0e998f470fb52fbd23cba6a5cf91ac61191ddd06c66fac95f59a2165ff49ce9635eb8284554f59abea95eb42dbeb8c3773e3878c1f0e9a060f5f9a5baefd93a88b855c5c7f158537cfc97c8a6716d53135a4202c62b91a792fc5e2ccf333f39374ce844c127a997975d807eed09931148cf094c74e0116d7c8cd098be9268b949816f6038eb0e97a8bce6b22399795f1657d40280e678ffb20c1684a76bc0ef2c4e2b1f1534a4ac8b886d0be96f0f4bf12b2"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffa}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f039d5afe59"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4a}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0xbf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a85fe7c16333e9a4f54e2db7bc0ae689"}]}, 0x30}}, 0x814) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x821}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40801) syz_genetlink_get_family_id$nbd(&(0x7f0000001300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x14000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r1, 0x309, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x8811) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x16c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x36, 0x6, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0xc, 0x24, 0x2, 0x36, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x9, 0x18, 0x4, 0x90, 0x1b, 0x36, 0xb, 0x30, 0x30, 0x36, 0x3, 0x4, 0x1, 0x1, 0x3, 0xc, 0x6c]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x16, 0x1b, 0x48, 0x48, 0x30, 0x30, 0xc, 0x5, 0x4, 0x3, 0x5, 0x17eb35718dd86b60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x3, 0x2, 0x5, 0x6, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x24, 0x24, 0x2, 0x48, 0x6, 0xc, 0x9ca729b95f655b8, 0x1d, 0xb]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x2}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x3, 0x24, 0x30, 0x1b, 0x1, 0x36, 0xd, 0x4, 0x2, 0x6c, 0x48, 0x18, 0xb, 0x1, 0x30, 0x12, 0x2a, 0x4, 0x2, 0x24, 0x1, 0x4, 0x2, 0x6c, 0x6, 0x18, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x401, 0x40, 0xc0, 0x7, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x7, 0x8, 0x1af1, 0x994, 0x0, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x30, 0x30, 0x1b, 0x16, 0x36, 0x2, 0xb, 0x16, 0x30, 0x1b, 0x60, 0x1, 0x3, 0xc, 0x9, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4c11) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x53}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 05:46:11 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:11 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200081}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31e918551fddb0de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="17f1f28f2ebfbb050d57450e608e69e9bf1c3260794345e36648e6d257365fde"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10109437ae2d965d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60d845cad494b3f54abfda9768bce987bc6b6437cd5038b8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d04540b4e7255a453fdada1134d7ad8"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15c597e75549bc6b5fe7c2d1b2e47e4da5fc80ab19e12133f00285d3413ff721"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95c4fde80794cd896bfe641d896f21eeecc1b609a9978087e9d6ff845ef8fafd"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a94ad7ad2dff7792d8f9bf83d49f0ab1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d33981c8b2c404d151b5ff9a5f7d642cc355cc9be53552258c23d50b420d5a5d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2649c9e7d1fd9bc740300d102e5ebc23565d00714cbfc6040de70f577e693568"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f9c0c2241e13f16567c7a09c5655ab95ef24ff696af8e3d311060521d55c90d"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x89}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x5, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8, 0x800, 0x7, 0x0, 0x6, 0x200, 0x9, 0x10001, 0x421e486e]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2541, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0xa6801, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x64, 0x1, 0xcc2b, 0x3, 0x5, 0x89, 0x0, 0x2]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4050) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 05:46:11 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000e80)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000f00)) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000f40)) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000f80)) 05:46:11 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x4, 0x5, 0x91f, 0x2, 0x16, "df01be747a735905"}) ioctl$TCSBRKP(r2, 0x5425, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000540)=""/4096) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001540)) 05:46:11 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x480c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8004) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r2) waitid(0x2, 0x0, &(0x7f0000000480), 0x1000000, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0xa, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10008091) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "e524353652c9"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4686551461"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "970f59d95b1dc93b"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x400c8d1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff) write$char_usb(r5, &(0x7f0000000880)="9f3ed689fad56ea3450f4ac881e775d845d5216b77b65b3a44b09999e3a911bb5144d3ef1dc4b5368b262b8713ba5eb00b31031c163d961697927995264c33e11c87f7b9859697e9cd62f0a3e92f7bb615917d37b146bc0d806837740364e1263d995e18cc56b95d6ed79e058bef8e78805d324746e3045125400a00e6fafd73dadbb68ca3fc1c77a501093b2dfc937aa9dab0b5483eebcb5397c505dcc83ef6", 0xa0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x1) 05:46:11 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048080}, 0x40010) r6 = socket(0xb, 0x80000, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000001}, 0x4080) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x55, 0x46}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x50) ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000000cc0)={0x7, 0x3, 0x9, 0x8, 0x80000000, 0x3b}) 05:46:11 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000840)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000880)={0x400, 0x7, 0x4, 0x401, 0x10, "e581c5737837134a"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x553}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1f}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004000) 05:46:11 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:24 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200081}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31e918551fddb0de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="17f1f28f2ebfbb050d57450e608e69e9bf1c3260794345e36648e6d257365fde"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10109437ae2d965d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60d845cad494b3f54abfda9768bce987bc6b6437cd5038b8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d04540b4e7255a453fdada1134d7ad8"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15c597e75549bc6b5fe7c2d1b2e47e4da5fc80ab19e12133f00285d3413ff721"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95c4fde80794cd896bfe641d896f21eeecc1b609a9978087e9d6ff845ef8fafd"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a94ad7ad2dff7792d8f9bf83d49f0ab1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d33981c8b2c404d151b5ff9a5f7d642cc355cc9be53552258c23d50b420d5a5d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2649c9e7d1fd9bc740300d102e5ebc23565d00714cbfc6040de70f577e693568"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f9c0c2241e13f16567c7a09c5655ab95ef24ff696af8e3d311060521d55c90d"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x89}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x5, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8, 0x800, 0x7, 0x0, 0x6, 0x200, 0x9, 0x10001, 0x421e486e]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2541, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0xa6801, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x64, 0x1, 0xcc2b, 0x3, 0x5, 0x89, 0x0, 0x2]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4050) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 05:46:24 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:24 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000e80)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000f00)) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000f40)) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000f80)) 05:46:24 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000240)={0xbf8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x88, 0xd, 0x0, 0x1, [{0x81, 0x0, "7d7932ed2763733f60cf83d85d05202f63d8cd01e5fb4d4ab2dc35f9a684a86dca2531ee6159d18aee8a3002460bc9ae4aab2b304e1546fcfb1931e1eecca4bc17b44a35ee888001588053e71b86f5de48e9aaa50c17ead62af7d3f14f778fb52b12625488ecc8b5cfe48a72e5b68e5bbebc04ad47f41c582234efd39e"}]}, @NL80211_NAN_FUNC_SRF={0x78, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3a98}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf, 0xb, "986debe04d3ff69f7c8422"}]}, @NL80211_ATTR_NAN_FUNC={0x298, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SRF={0x280, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x694, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x590, 0xd, 0x0, 0x1, [{0xb5, 0x0, "096ae68a1443a213ee7672dda2279ef572581158814856d9b8ac73521dc6e3c9a5aa3cf9ac7b4e81317b981300a6e6bbc5663cd85aebb195f0edc91b936e9aa514feb16785321f22a8e07cd2c30a94080b5b931c7b2b770a37964e2a0d56a043d7a2c06f5fe4bc20eeef08d68fd08a74560182fe8badaf2e92129d649424eacd7b3d2a41b419850fd29dc2f094361fab750b6be25ed4941bd7e8844a52ea74caa13b66a13d576baf6794b8e9f9f3b09e6d"}, {0xe0, 0x0, "3f10526d21141ab2c17630ac007aa0ef92c93026b9b95263762c37079e53e21c6aa7e83f6d21dd860f03701037621034fa79e7abb8292da350cde2ef36cedf0aa4b7eab15014f4098b146056678213bbd5b40a94b799c84cddac46b4fd3760cc749c6268f09c0d511c244ec8ff54a0103159eaeff0482aa2624381a73642ded7b22326f03e7d2815e0ea9258380348f748caa051f4851d4f0adef9233c3d6bc7fe342037df87b4cbc3960e99ca6ca12fd5421cf28f4831f858c59a1c86deb73d3d7021368d52ed6ca9a3932b8936c8049eee0d38d7faebe86fb6bc8d"}, {0x84, 0x0, "7cc7bf552cb378a1d70ac7e9a1d98c3fbbf0fc645a192799b961a705dc54010ad357fe6fa62e40c3a1fc5685d1ec06537919e67ddebd6a01271e96cb6e0da41c6c3eb6f9b80f71248f0fc6e3e2ad6450f794c4ce970be19598ca6b8e6a425ace1454e2438257a4a3137ea4b8fc6efa379e53734fdd5866df8b8dc1b1e22c622f"}, {0x6a, 0x0, "55b8a471f6f862db6c9d9ac98628ef5ea51377301ca3e79f22375109071ff38c289a95ea8486e8b9e740860b8e7eb62f2215dab757f05071a67836eaee506df1b48e001349dfad50800edbedaa931581af52c036ef20f14cb4f8098dee8f44ac0e15c1fe6fd6"}, {0xc3, 0x0, "6febb9498ef8d3286f0acf03e3227a9a8edcd6546a68858d83b56ef5516c962a295d449118364780ad329de364cc509676523e2771b0ba6b715c221765c11022f8c260d5ff77b9b41aa27f54117f9b35e68bb74a1102a8377c6548d77f8792b4ee0a00a68eef2f1c999a7ba941b6427f28df180e20827fab36d4300ccbc1ad0936a80ccc3c750843105b80be1bd9ad0a890b74886a8f1add0f378d3c52d2be2c5f68ca48fac9cbe4dc79944c44f8d7458308f349cce4b417e7415306f7d41c"}, {0x4d, 0x0, "2130796877dabb54c7c38cf771bcdf92aa39ae2a3a0dbe72642c7c2d407fa6e9363d913a46c747160d1df5ab3d559b2f22d2cc770ffeee74925ce651f47ddfd76f4f715843a5a619f5"}, {0x64, 0x0, "293772a4d9bebac843d34bdb6a443be0d05b71b9726486a6f1ac60186bca4b613ccb45e4f9de8e46fd0a8594a193b268e187586a097f058de300cfa3fe81432f50b2c36c215d48452cb51d161d8a421e62b135f9715ff40930834e87080e7bae"}, {0x95, 0x0, "062761841c82cdf5fd6f24437327481b390dded90d61cdcb80613518b3fb7d39a94066e051ab222c262470895346d49041fca602fc49f7ee2a6a156182586cee5bf4a25c76f9a848ced947d68a54ad7a4de253cfbd4851a231041bf842a1c6d38de61c92b8c2c2fb2a4be40bbceb111839b8fcbfa19ec75cbe3dd0270c3feee103313f2a2283abb8be316644f9d53649fc"}, {0x9a, 0x0, "caaef05813716b000ae45bddc98e5f01369117b86516595a887e9015aa19b479c41255338b4dc10f00ba85ad6653422c6ef45874de76bd7b98a530ceae3849be7d9d2f8241ad8e956d2c07efdca41659d5626d6cfd78deab97949167174910d897b0ac661872cd19bb87f41463ff81f0e4b2316bc03f7762a1863e39c544e8e9d3636c4fae4cb523e2b48c952ff63fce72efc443c10a"}, {0x57, 0x0, "4cc0bbf1d0465712b1dbba9a55ee0c0da7457e8183dbabdd346bbcf072878988f66f4b9d2c3c2770adf255f70dd459b12113609b7ef55bd9d911e734b8a90ae4e867dbae9170cc8436bf6c754c05ee28714638"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xdc, 0xd, 0x0, 0x1, [{0xd7, 0x0, "98f7c09209b2b99ed41d7de1f6f153d4da7583ffa03b014df47d615f221932ae0f0e998f470fb52fbd23cba6a5cf91ac61191ddd06c66fac95f59a2165ff49ce9635eb8284554f59abea95eb42dbeb8c3773e3878c1f0e9a060f5f9a5baefd93a88b855c5c7f158537cfc97c8a6716d53135a4202c62b91a792fc5e2ccf333f39374ce844c127a997975d807eed09931148cf094c74e0116d7c8cd098be9268b949816f6038eb0e97a8bce6b22399795f1657d40280e678ffb20c1684a76bc0ef2c4e2b1f1534a4ac8b886d0be96f0f4bf12b2"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffa}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f039d5afe59"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4a}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0xbf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a85fe7c16333e9a4f54e2db7bc0ae689"}]}, 0x30}}, 0x814) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x821}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40801) syz_genetlink_get_family_id$nbd(&(0x7f0000001300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x14000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r1, 0x309, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x8811) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x16c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x36, 0x6, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0xc, 0x24, 0x2, 0x36, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x9, 0x18, 0x4, 0x90, 0x1b, 0x36, 0xb, 0x30, 0x30, 0x36, 0x3, 0x4, 0x1, 0x1, 0x3, 0xc, 0x6c]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x16, 0x1b, 0x48, 0x48, 0x30, 0x30, 0xc, 0x5, 0x4, 0x3, 0x5, 0x17eb35718dd86b60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x3, 0x2, 0x5, 0x6, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x24, 0x24, 0x2, 0x48, 0x6, 0xc, 0x9ca729b95f655b8, 0x1d, 0xb]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x2}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x3, 0x24, 0x30, 0x1b, 0x1, 0x36, 0xd, 0x4, 0x2, 0x6c, 0x48, 0x18, 0xb, 0x1, 0x30, 0x12, 0x2a, 0x4, 0x2, 0x24, 0x1, 0x4, 0x2, 0x6c, 0x6, 0x18, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x401, 0x40, 0xc0, 0x7, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x7, 0x8, 0x1af1, 0x994, 0x0, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x30, 0x30, 0x1b, 0x16, 0x36, 0x2, 0xb, 0x16, 0x30, 0x1b, 0x60, 0x1, 0x3, 0xc, 0x9, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4c11) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x53}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 05:46:24 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000840)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000880)={0x400, 0x7, 0x4, 0x401, 0x10, "e581c5737837134a"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x553}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1f}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004000) 05:46:24 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x4, 0x5, 0x91f, 0x2, 0x16, "df01be747a735905"}) ioctl$TCSBRKP(r2, 0x5425, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000540)=""/4096) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001540)) 05:46:24 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048080}, 0x40010) r6 = socket(0xb, 0x80000, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000001}, 0x4080) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x55, 0x46}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x50) 05:46:24 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x480c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8004) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r2) waitid(0x2, 0x0, &(0x7f0000000480), 0x1000000, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0xa, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10008091) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "e524353652c9"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4686551461"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "970f59d95b1dc93b"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x400c8d1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff) write$char_usb(r5, &(0x7f0000000880)="9f3ed689fad56ea3450f4ac881e775d845d5216b77b65b3a44b09999e3a911bb5144d3ef1dc4b5368b262b8713ba5eb00b31031c163d961697927995264c33e11c87f7b9859697e9cd62f0a3e92f7bb615917d37b146bc0d806837740364e1263d995e18cc56b95d6ed79e058bef8e78805d324746e3045125400a00e6fafd73dadbb68ca3fc1c77a501093b2dfc937aa9dab0b5483eebcb5397c505dcc83ef6", 0xa0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x1) 05:46:24 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x4, 0x5, 0x91f, 0x2, 0x16, "df01be747a735905"}) ioctl$TCSBRKP(r2, 0x5425, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000540)=""/4096) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000001540)) 05:46:24 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000280)) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:24 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000840)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000880)={0x400, 0x7, 0x4, 0x401, 0x10, "e581c5737837134a"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x553}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1) 05:46:24 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x4, 0x5, 0x91f, 0x2, 0x16, "df01be747a735905"}) ioctl$TCSBRKP(r2, 0x5425, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000540)=""/4096) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000001540)) 05:46:24 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000e80)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000f00)) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000f40)) 05:46:24 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048080}, 0x40010) r6 = socket(0xb, 0x80000, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000001}, 0x4080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) 05:46:24 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200081}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31e918551fddb0de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="17f1f28f2ebfbb050d57450e608e69e9bf1c3260794345e36648e6d257365fde"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10109437ae2d965d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60d845cad494b3f54abfda9768bce987bc6b6437cd5038b8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d04540b4e7255a453fdada1134d7ad8"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15c597e75549bc6b5fe7c2d1b2e47e4da5fc80ab19e12133f00285d3413ff721"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95c4fde80794cd896bfe641d896f21eeecc1b609a9978087e9d6ff845ef8fafd"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a94ad7ad2dff7792d8f9bf83d49f0ab1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d33981c8b2c404d151b5ff9a5f7d642cc355cc9be53552258c23d50b420d5a5d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2649c9e7d1fd9bc740300d102e5ebc23565d00714cbfc6040de70f577e693568"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f9c0c2241e13f16567c7a09c5655ab95ef24ff696af8e3d311060521d55c90d"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x89}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x5, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8, 0x800, 0x7, 0x0, 0x6, 0x200, 0x9, 0x10001, 0x421e486e]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2541, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0xa6801, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x64, 0x1, 0xcc2b, 0x3, 0x5, 0x89, 0x0, 0x2]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4050) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 05:46:24 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x480c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8004) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r2) waitid(0x2, 0x0, &(0x7f0000000480), 0x1000000, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0xa, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10008091) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "e524353652c9"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4686551461"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "970f59d95b1dc93b"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x400c8d1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff) write$char_usb(r5, &(0x7f0000000880)="9f3ed689fad56ea3450f4ac881e775d845d5216b77b65b3a44b09999e3a911bb5144d3ef1dc4b5368b262b8713ba5eb00b31031c163d961697927995264c33e11c87f7b9859697e9cd62f0a3e92f7bb615917d37b146bc0d806837740364e1263d995e18cc56b95d6ed79e058bef8e78805d324746e3045125400a00e6fafd73dadbb68ca3fc1c77a501093b2dfc937aa9dab0b5483eebcb5397c505dcc83ef6", 0xa0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:46:24 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000840)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000880)={0x400, 0x7, 0x4, 0x401, 0x10, "e581c5737837134a"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) 05:46:24 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x4, 0x5, 0x91f, 0x2, 0x16, "df01be747a735905"}) ioctl$TCSBRKP(r2, 0x5425, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000540)=""/4096) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000001540)) 05:46:24 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000840)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000880)={0x400, 0x7, 0x4, 0x401, 0x10, "e581c5737837134a"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) 05:46:24 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000240)={0xbf8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x88, 0xd, 0x0, 0x1, [{0x81, 0x0, "7d7932ed2763733f60cf83d85d05202f63d8cd01e5fb4d4ab2dc35f9a684a86dca2531ee6159d18aee8a3002460bc9ae4aab2b304e1546fcfb1931e1eecca4bc17b44a35ee888001588053e71b86f5de48e9aaa50c17ead62af7d3f14f778fb52b12625488ecc8b5cfe48a72e5b68e5bbebc04ad47f41c582234efd39e"}]}, @NL80211_NAN_FUNC_SRF={0x78, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3a98}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf, 0xb, "986debe04d3ff69f7c8422"}]}, @NL80211_ATTR_NAN_FUNC={0x298, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SRF={0x280, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x694, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x590, 0xd, 0x0, 0x1, [{0xb5, 0x0, "096ae68a1443a213ee7672dda2279ef572581158814856d9b8ac73521dc6e3c9a5aa3cf9ac7b4e81317b981300a6e6bbc5663cd85aebb195f0edc91b936e9aa514feb16785321f22a8e07cd2c30a94080b5b931c7b2b770a37964e2a0d56a043d7a2c06f5fe4bc20eeef08d68fd08a74560182fe8badaf2e92129d649424eacd7b3d2a41b419850fd29dc2f094361fab750b6be25ed4941bd7e8844a52ea74caa13b66a13d576baf6794b8e9f9f3b09e6d"}, {0xe0, 0x0, "3f10526d21141ab2c17630ac007aa0ef92c93026b9b95263762c37079e53e21c6aa7e83f6d21dd860f03701037621034fa79e7abb8292da350cde2ef36cedf0aa4b7eab15014f4098b146056678213bbd5b40a94b799c84cddac46b4fd3760cc749c6268f09c0d511c244ec8ff54a0103159eaeff0482aa2624381a73642ded7b22326f03e7d2815e0ea9258380348f748caa051f4851d4f0adef9233c3d6bc7fe342037df87b4cbc3960e99ca6ca12fd5421cf28f4831f858c59a1c86deb73d3d7021368d52ed6ca9a3932b8936c8049eee0d38d7faebe86fb6bc8d"}, {0x84, 0x0, "7cc7bf552cb378a1d70ac7e9a1d98c3fbbf0fc645a192799b961a705dc54010ad357fe6fa62e40c3a1fc5685d1ec06537919e67ddebd6a01271e96cb6e0da41c6c3eb6f9b80f71248f0fc6e3e2ad6450f794c4ce970be19598ca6b8e6a425ace1454e2438257a4a3137ea4b8fc6efa379e53734fdd5866df8b8dc1b1e22c622f"}, {0x6a, 0x0, "55b8a471f6f862db6c9d9ac98628ef5ea51377301ca3e79f22375109071ff38c289a95ea8486e8b9e740860b8e7eb62f2215dab757f05071a67836eaee506df1b48e001349dfad50800edbedaa931581af52c036ef20f14cb4f8098dee8f44ac0e15c1fe6fd6"}, {0xc3, 0x0, "6febb9498ef8d3286f0acf03e3227a9a8edcd6546a68858d83b56ef5516c962a295d449118364780ad329de364cc509676523e2771b0ba6b715c221765c11022f8c260d5ff77b9b41aa27f54117f9b35e68bb74a1102a8377c6548d77f8792b4ee0a00a68eef2f1c999a7ba941b6427f28df180e20827fab36d4300ccbc1ad0936a80ccc3c750843105b80be1bd9ad0a890b74886a8f1add0f378d3c52d2be2c5f68ca48fac9cbe4dc79944c44f8d7458308f349cce4b417e7415306f7d41c"}, {0x4d, 0x0, "2130796877dabb54c7c38cf771bcdf92aa39ae2a3a0dbe72642c7c2d407fa6e9363d913a46c747160d1df5ab3d559b2f22d2cc770ffeee74925ce651f47ddfd76f4f715843a5a619f5"}, {0x64, 0x0, "293772a4d9bebac843d34bdb6a443be0d05b71b9726486a6f1ac60186bca4b613ccb45e4f9de8e46fd0a8594a193b268e187586a097f058de300cfa3fe81432f50b2c36c215d48452cb51d161d8a421e62b135f9715ff40930834e87080e7bae"}, {0x95, 0x0, "062761841c82cdf5fd6f24437327481b390dded90d61cdcb80613518b3fb7d39a94066e051ab222c262470895346d49041fca602fc49f7ee2a6a156182586cee5bf4a25c76f9a848ced947d68a54ad7a4de253cfbd4851a231041bf842a1c6d38de61c92b8c2c2fb2a4be40bbceb111839b8fcbfa19ec75cbe3dd0270c3feee103313f2a2283abb8be316644f9d53649fc"}, {0x9a, 0x0, "caaef05813716b000ae45bddc98e5f01369117b86516595a887e9015aa19b479c41255338b4dc10f00ba85ad6653422c6ef45874de76bd7b98a530ceae3849be7d9d2f8241ad8e956d2c07efdca41659d5626d6cfd78deab97949167174910d897b0ac661872cd19bb87f41463ff81f0e4b2316bc03f7762a1863e39c544e8e9d3636c4fae4cb523e2b48c952ff63fce72efc443c10a"}, {0x57, 0x0, "4cc0bbf1d0465712b1dbba9a55ee0c0da7457e8183dbabdd346bbcf072878988f66f4b9d2c3c2770adf255f70dd459b12113609b7ef55bd9d911e734b8a90ae4e867dbae9170cc8436bf6c754c05ee28714638"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xdc, 0xd, 0x0, 0x1, [{0xd7, 0x0, "98f7c09209b2b99ed41d7de1f6f153d4da7583ffa03b014df47d615f221932ae0f0e998f470fb52fbd23cba6a5cf91ac61191ddd06c66fac95f59a2165ff49ce9635eb8284554f59abea95eb42dbeb8c3773e3878c1f0e9a060f5f9a5baefd93a88b855c5c7f158537cfc97c8a6716d53135a4202c62b91a792fc5e2ccf333f39374ce844c127a997975d807eed09931148cf094c74e0116d7c8cd098be9268b949816f6038eb0e97a8bce6b22399795f1657d40280e678ffb20c1684a76bc0ef2c4e2b1f1534a4ac8b886d0be96f0f4bf12b2"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffa}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f039d5afe59"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4a}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0xbf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a85fe7c16333e9a4f54e2db7bc0ae689"}]}, 0x30}}, 0x814) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x821}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40801) syz_genetlink_get_family_id$nbd(&(0x7f0000001300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x14000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r1, 0x309, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x8811) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x16c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x36, 0x6, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0xc, 0x24, 0x2, 0x36, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x9, 0x18, 0x4, 0x90, 0x1b, 0x36, 0xb, 0x30, 0x30, 0x36, 0x3, 0x4, 0x1, 0x1, 0x3, 0xc, 0x6c]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x16, 0x1b, 0x48, 0x48, 0x30, 0x30, 0xc, 0x5, 0x4, 0x3, 0x5, 0x17eb35718dd86b60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x3, 0x2, 0x5, 0x6, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x24, 0x24, 0x2, 0x48, 0x6, 0xc, 0x9ca729b95f655b8, 0x1d, 0xb]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x2}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x3, 0x24, 0x30, 0x1b, 0x1, 0x36, 0xd, 0x4, 0x2, 0x6c, 0x48, 0x18, 0xb, 0x1, 0x30, 0x12, 0x2a, 0x4, 0x2, 0x24, 0x1, 0x4, 0x2, 0x6c, 0x6, 0x18, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x401, 0x40, 0xc0, 0x7, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x7, 0x8, 0x1af1, 0x994, 0x0, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x30, 0x30, 0x1b, 0x16, 0x36, 0x2, 0xb, 0x16, 0x30, 0x1b, 0x60, 0x1, 0x3, 0xc, 0x9, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4c11) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x53}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 05:46:24 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000e80)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000f00)) 05:46:24 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:24 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x4, 0x5, 0x91f, 0x2, 0x16, "df01be747a735905"}) ioctl$TCSBRKP(r2, 0x5425, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001540)) 05:46:24 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000840)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) 05:46:24 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048080}, 0x40010) socket(0xb, 0x80000, 0x8001) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) 05:46:24 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x9) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:24 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x4, 0x5, 0x91f, 0x2, 0x16, "df01be747a735905"}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001540)) 05:46:24 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) 05:46:24 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000e80)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) 05:46:24 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:36 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x480c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8004) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r2) waitid(0x2, 0x0, &(0x7f0000000480), 0x1000000, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0xa, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10008091) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "e524353652c9"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4686551461"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "970f59d95b1dc93b"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x400c8d1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff) write$char_usb(r5, &(0x7f0000000880)="9f3ed689fad56ea3450f4ac881e775d845d5216b77b65b3a44b09999e3a911bb5144d3ef1dc4b5368b262b8713ba5eb00b31031c163d961697927995264c33e11c87f7b9859697e9cd62f0a3e92f7bb615917d37b146bc0d806837740364e1263d995e18cc56b95d6ed79e058bef8e78805d324746e3045125400a00e6fafd73dadbb68ca3fc1c77a501093b2dfc937aa9dab0b5483eebcb5397c505dcc83ef6", 0xa0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) 05:46:36 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000240)={0xbf8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x88, 0xd, 0x0, 0x1, [{0x81, 0x0, "7d7932ed2763733f60cf83d85d05202f63d8cd01e5fb4d4ab2dc35f9a684a86dca2531ee6159d18aee8a3002460bc9ae4aab2b304e1546fcfb1931e1eecca4bc17b44a35ee888001588053e71b86f5de48e9aaa50c17ead62af7d3f14f778fb52b12625488ecc8b5cfe48a72e5b68e5bbebc04ad47f41c582234efd39e"}]}, @NL80211_NAN_FUNC_SRF={0x78, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3a98}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf, 0xb, "986debe04d3ff69f7c8422"}]}, @NL80211_ATTR_NAN_FUNC={0x298, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SRF={0x280, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "625ccfddec4d1e02d237e61cffadea76cd111451c932c255f721e9ce40e8c4e50ca0d1249fa334c99df580dccb7079059280d16e295d2869956f095b3b865f40b3e1452d851024154ddedd8a1cd894d18466417d2cd782da95aaf20aa5c34d6ac137c88bb4f2885482903a99a35b976ec3c08ac692b19fa5bf248b65ce7addee612882276d8451599a169ff52473858b7d267d045aac87194473e87bbcbb5d333eb5b93ce07254a1343e34691aea835b561806fd49fd3f0df1942ce2a5d30af429076f5def68f6c99e87ff553a58e5bc2f17e6279c7efa251b833284caf293e9ad4fae3a95ab9350d6b831fa4e79792a30aef4855956a642488fe902113644"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x694, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x590, 0xd, 0x0, 0x1, [{0xb5, 0x0, "096ae68a1443a213ee7672dda2279ef572581158814856d9b8ac73521dc6e3c9a5aa3cf9ac7b4e81317b981300a6e6bbc5663cd85aebb195f0edc91b936e9aa514feb16785321f22a8e07cd2c30a94080b5b931c7b2b770a37964e2a0d56a043d7a2c06f5fe4bc20eeef08d68fd08a74560182fe8badaf2e92129d649424eacd7b3d2a41b419850fd29dc2f094361fab750b6be25ed4941bd7e8844a52ea74caa13b66a13d576baf6794b8e9f9f3b09e6d"}, {0xe0, 0x0, "3f10526d21141ab2c17630ac007aa0ef92c93026b9b95263762c37079e53e21c6aa7e83f6d21dd860f03701037621034fa79e7abb8292da350cde2ef36cedf0aa4b7eab15014f4098b146056678213bbd5b40a94b799c84cddac46b4fd3760cc749c6268f09c0d511c244ec8ff54a0103159eaeff0482aa2624381a73642ded7b22326f03e7d2815e0ea9258380348f748caa051f4851d4f0adef9233c3d6bc7fe342037df87b4cbc3960e99ca6ca12fd5421cf28f4831f858c59a1c86deb73d3d7021368d52ed6ca9a3932b8936c8049eee0d38d7faebe86fb6bc8d"}, {0x84, 0x0, "7cc7bf552cb378a1d70ac7e9a1d98c3fbbf0fc645a192799b961a705dc54010ad357fe6fa62e40c3a1fc5685d1ec06537919e67ddebd6a01271e96cb6e0da41c6c3eb6f9b80f71248f0fc6e3e2ad6450f794c4ce970be19598ca6b8e6a425ace1454e2438257a4a3137ea4b8fc6efa379e53734fdd5866df8b8dc1b1e22c622f"}, {0x6a, 0x0, "55b8a471f6f862db6c9d9ac98628ef5ea51377301ca3e79f22375109071ff38c289a95ea8486e8b9e740860b8e7eb62f2215dab757f05071a67836eaee506df1b48e001349dfad50800edbedaa931581af52c036ef20f14cb4f8098dee8f44ac0e15c1fe6fd6"}, {0xc3, 0x0, "6febb9498ef8d3286f0acf03e3227a9a8edcd6546a68858d83b56ef5516c962a295d449118364780ad329de364cc509676523e2771b0ba6b715c221765c11022f8c260d5ff77b9b41aa27f54117f9b35e68bb74a1102a8377c6548d77f8792b4ee0a00a68eef2f1c999a7ba941b6427f28df180e20827fab36d4300ccbc1ad0936a80ccc3c750843105b80be1bd9ad0a890b74886a8f1add0f378d3c52d2be2c5f68ca48fac9cbe4dc79944c44f8d7458308f349cce4b417e7415306f7d41c"}, {0x4d, 0x0, "2130796877dabb54c7c38cf771bcdf92aa39ae2a3a0dbe72642c7c2d407fa6e9363d913a46c747160d1df5ab3d559b2f22d2cc770ffeee74925ce651f47ddfd76f4f715843a5a619f5"}, {0x64, 0x0, "293772a4d9bebac843d34bdb6a443be0d05b71b9726486a6f1ac60186bca4b613ccb45e4f9de8e46fd0a8594a193b268e187586a097f058de300cfa3fe81432f50b2c36c215d48452cb51d161d8a421e62b135f9715ff40930834e87080e7bae"}, {0x95, 0x0, "062761841c82cdf5fd6f24437327481b390dded90d61cdcb80613518b3fb7d39a94066e051ab222c262470895346d49041fca602fc49f7ee2a6a156182586cee5bf4a25c76f9a848ced947d68a54ad7a4de253cfbd4851a231041bf842a1c6d38de61c92b8c2c2fb2a4be40bbceb111839b8fcbfa19ec75cbe3dd0270c3feee103313f2a2283abb8be316644f9d53649fc"}, {0x9a, 0x0, "caaef05813716b000ae45bddc98e5f01369117b86516595a887e9015aa19b479c41255338b4dc10f00ba85ad6653422c6ef45874de76bd7b98a530ceae3849be7d9d2f8241ad8e956d2c07efdca41659d5626d6cfd78deab97949167174910d897b0ac661872cd19bb87f41463ff81f0e4b2316bc03f7762a1863e39c544e8e9d3636c4fae4cb523e2b48c952ff63fce72efc443c10a"}, {0x57, 0x0, "4cc0bbf1d0465712b1dbba9a55ee0c0da7457e8183dbabdd346bbcf072878988f66f4b9d2c3c2770adf255f70dd459b12113609b7ef55bd9d911e734b8a90ae4e867dbae9170cc8436bf6c754c05ee28714638"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xdc, 0xd, 0x0, 0x1, [{0xd7, 0x0, "98f7c09209b2b99ed41d7de1f6f153d4da7583ffa03b014df47d615f221932ae0f0e998f470fb52fbd23cba6a5cf91ac61191ddd06c66fac95f59a2165ff49ce9635eb8284554f59abea95eb42dbeb8c3773e3878c1f0e9a060f5f9a5baefd93a88b855c5c7f158537cfc97c8a6716d53135a4202c62b91a792fc5e2ccf333f39374ce844c127a997975d807eed09931148cf094c74e0116d7c8cd098be9268b949816f6038eb0e97a8bce6b22399795f1657d40280e678ffb20c1684a76bc0ef2c4e2b1f1534a4ac8b886d0be96f0f4bf12b2"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffa}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f039d5afe59"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4a}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0xbf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a85fe7c16333e9a4f54e2db7bc0ae689"}]}, 0x30}}, 0x814) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x821}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40801) syz_genetlink_get_family_id$nbd(&(0x7f0000001300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x14000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r1, 0x309, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x8811) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x16c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x36, 0x6, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0xc, 0x24, 0x2, 0x36, 0x2, 0xb]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x9, 0x18, 0x4, 0x90, 0x1b, 0x36, 0xb, 0x30, 0x30, 0x36, 0x3, 0x4, 0x1, 0x1, 0x3, 0xc, 0x6c]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x16, 0x1b, 0x48, 0x48, 0x30, 0x30, 0xc, 0x5, 0x4, 0x3, 0x5, 0x17eb35718dd86b60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x3, 0x2, 0x5, 0x6, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x24, 0x24, 0x2, 0x48, 0x6, 0xc, 0x9ca729b95f655b8, 0x1d, 0xb]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x2}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x3, 0x24, 0x30, 0x1b, 0x1, 0x36, 0xd, 0x4, 0x2, 0x6c, 0x48, 0x18, 0xb, 0x1, 0x30, 0x12, 0x2a, 0x4, 0x2, 0x24, 0x1, 0x4, 0x2, 0x6c, 0x6, 0x18, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x401, 0x40, 0xc0, 0x7, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x7, 0x8, 0x1af1, 0x994, 0x0, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x30, 0x30, 0x1b, 0x16, 0x36, 0x2, 0xb, 0x16, 0x30, 0x1b, 0x60, 0x1, 0x3, 0xc, 0x9, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x4}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4c11) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x53}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 05:46:36 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000e80)) 05:46:36 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001540)) 05:46:36 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:36 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) 05:46:36 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200081}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31e918551fddb0de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="17f1f28f2ebfbb050d57450e608e69e9bf1c3260794345e36648e6d257365fde"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10109437ae2d965d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60d845cad494b3f54abfda9768bce987bc6b6437cd5038b8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d04540b4e7255a453fdada1134d7ad8"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15c597e75549bc6b5fe7c2d1b2e47e4da5fc80ab19e12133f00285d3413ff721"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95c4fde80794cd896bfe641d896f21eeecc1b609a9978087e9d6ff845ef8fafd"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a94ad7ad2dff7792d8f9bf83d49f0ab1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d33981c8b2c404d151b5ff9a5f7d642cc355cc9be53552258c23d50b420d5a5d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2649c9e7d1fd9bc740300d102e5ebc23565d00714cbfc6040de70f577e693568"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f9c0c2241e13f16567c7a09c5655ab95ef24ff696af8e3d311060521d55c90d"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x89}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x5, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8, 0x800, 0x7, 0x0, 0x6, 0x200, 0x9, 0x10001, 0x421e486e]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2541, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0xa6801, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x64, 0x1, 0xcc2b, 0x3, 0x5, 0x89, 0x0, 0x2]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4050) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 05:46:36 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x11) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048080}, 0x40010) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) 05:46:36 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:36 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x11) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) 05:46:36 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000001540)) 05:46:36 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000e80)) 05:46:36 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) ioctl$KDDISABIO(r0, 0x4b37) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) 05:46:36 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r2, 0x4b35, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:36 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0xcd4, 0x2, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0x75, [@loopback, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3c, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x27, 0xb7, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @broadcast, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x4, [{@multicast1, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xda, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@remote, 0xffffff19}, {@private=0xa010102, 0x3}, {@empty, 0x1}, {@local, 0x3}, {@remote, 0x80000001}, {@loopback, 0x71d}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101}]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x8, "783050308edb"}, {0x2, 0x6, "240bec42"}, {0x0, 0x3, "17"}]}]}}}}}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) 05:46:36 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000001540)) 05:46:36 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000240)={0xbf8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x88, 0xd, 0x0, 0x1, [{0x81, 0x0, "7d7932ed2763733f60cf83d85d05202f63d8cd01e5fb4d4ab2dc35f9a684a86dca2531ee6159d18aee8a3002460bc9ae4aab2b304e1546fcfb1931e1eecca4bc17b44a35ee888001588053e71b86f5de48e9aaa50c17ead62af7d3f14f778fb52b12625488ecc8b5cfe48a72e5b68e5bbebc04ad47f41c582234efd39e"}]}, @NL80211_NAN_FUNC_SRF={0x78, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3a98}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf, 0xb, "986debe04d3ff69f7c8422"}]}, @NL80211_ATTR_NAN_FUNC={0x298, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SRF={0x280, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "625ccfddec4d1e02d237e61cffadea76cd111451c932c255f721e9ce40e8c4e50ca0d1249fa334c99df580dccb7079059280d16e295d2869956f095b3b865f40b3e1452d851024154ddedd8a1cd894d18466417d2cd782da95aaf20aa5c34d6ac137c88bb4f2885482903a99a35b976ec3c08ac692b19fa5bf248b65ce7addee612882276d8451599a169ff52473858b7d267d045aac87194473e87bbcbb5d333eb5b93ce07254a1343e34691aea835b561806fd49fd3f0df1942ce2a5d30af429076f5def68f6c99e87ff553a58e5bc2f17e6279c7efa251b833284caf293e9ad4fae3a95ab9350d6b831fa4e79792a30aef4855956a642488fe902113644"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x694, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x590, 0xd, 0x0, 0x1, [{0xb5, 0x0, "096ae68a1443a213ee7672dda2279ef572581158814856d9b8ac73521dc6e3c9a5aa3cf9ac7b4e81317b981300a6e6bbc5663cd85aebb195f0edc91b936e9aa514feb16785321f22a8e07cd2c30a94080b5b931c7b2b770a37964e2a0d56a043d7a2c06f5fe4bc20eeef08d68fd08a74560182fe8badaf2e92129d649424eacd7b3d2a41b419850fd29dc2f094361fab750b6be25ed4941bd7e8844a52ea74caa13b66a13d576baf6794b8e9f9f3b09e6d"}, {0xe0, 0x0, "3f10526d21141ab2c17630ac007aa0ef92c93026b9b95263762c37079e53e21c6aa7e83f6d21dd860f03701037621034fa79e7abb8292da350cde2ef36cedf0aa4b7eab15014f4098b146056678213bbd5b40a94b799c84cddac46b4fd3760cc749c6268f09c0d511c244ec8ff54a0103159eaeff0482aa2624381a73642ded7b22326f03e7d2815e0ea9258380348f748caa051f4851d4f0adef9233c3d6bc7fe342037df87b4cbc3960e99ca6ca12fd5421cf28f4831f858c59a1c86deb73d3d7021368d52ed6ca9a3932b8936c8049eee0d38d7faebe86fb6bc8d"}, {0x84, 0x0, "7cc7bf552cb378a1d70ac7e9a1d98c3fbbf0fc645a192799b961a705dc54010ad357fe6fa62e40c3a1fc5685d1ec06537919e67ddebd6a01271e96cb6e0da41c6c3eb6f9b80f71248f0fc6e3e2ad6450f794c4ce970be19598ca6b8e6a425ace1454e2438257a4a3137ea4b8fc6efa379e53734fdd5866df8b8dc1b1e22c622f"}, {0x6a, 0x0, "55b8a471f6f862db6c9d9ac98628ef5ea51377301ca3e79f22375109071ff38c289a95ea8486e8b9e740860b8e7eb62f2215dab757f05071a67836eaee506df1b48e001349dfad50800edbedaa931581af52c036ef20f14cb4f8098dee8f44ac0e15c1fe6fd6"}, {0xc3, 0x0, "6febb9498ef8d3286f0acf03e3227a9a8edcd6546a68858d83b56ef5516c962a295d449118364780ad329de364cc509676523e2771b0ba6b715c221765c11022f8c260d5ff77b9b41aa27f54117f9b35e68bb74a1102a8377c6548d77f8792b4ee0a00a68eef2f1c999a7ba941b6427f28df180e20827fab36d4300ccbc1ad0936a80ccc3c750843105b80be1bd9ad0a890b74886a8f1add0f378d3c52d2be2c5f68ca48fac9cbe4dc79944c44f8d7458308f349cce4b417e7415306f7d41c"}, {0x4d, 0x0, "2130796877dabb54c7c38cf771bcdf92aa39ae2a3a0dbe72642c7c2d407fa6e9363d913a46c747160d1df5ab3d559b2f22d2cc770ffeee74925ce651f47ddfd76f4f715843a5a619f5"}, {0x64, 0x0, "293772a4d9bebac843d34bdb6a443be0d05b71b9726486a6f1ac60186bca4b613ccb45e4f9de8e46fd0a8594a193b268e187586a097f058de300cfa3fe81432f50b2c36c215d48452cb51d161d8a421e62b135f9715ff40930834e87080e7bae"}, {0x95, 0x0, "062761841c82cdf5fd6f24437327481b390dded90d61cdcb80613518b3fb7d39a94066e051ab222c262470895346d49041fca602fc49f7ee2a6a156182586cee5bf4a25c76f9a848ced947d68a54ad7a4de253cfbd4851a231041bf842a1c6d38de61c92b8c2c2fb2a4be40bbceb111839b8fcbfa19ec75cbe3dd0270c3feee103313f2a2283abb8be316644f9d53649fc"}, {0x9a, 0x0, "caaef05813716b000ae45bddc98e5f01369117b86516595a887e9015aa19b479c41255338b4dc10f00ba85ad6653422c6ef45874de76bd7b98a530ceae3849be7d9d2f8241ad8e956d2c07efdca41659d5626d6cfd78deab97949167174910d897b0ac661872cd19bb87f41463ff81f0e4b2316bc03f7762a1863e39c544e8e9d3636c4fae4cb523e2b48c952ff63fce72efc443c10a"}, {0x57, 0x0, "4cc0bbf1d0465712b1dbba9a55ee0c0da7457e8183dbabdd346bbcf072878988f66f4b9d2c3c2770adf255f70dd459b12113609b7ef55bd9d911e734b8a90ae4e867dbae9170cc8436bf6c754c05ee28714638"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xdc, 0xd, 0x0, 0x1, [{0xd7, 0x0, "98f7c09209b2b99ed41d7de1f6f153d4da7583ffa03b014df47d615f221932ae0f0e998f470fb52fbd23cba6a5cf91ac61191ddd06c66fac95f59a2165ff49ce9635eb8284554f59abea95eb42dbeb8c3773e3878c1f0e9a060f5f9a5baefd93a88b855c5c7f158537cfc97c8a6716d53135a4202c62b91a792fc5e2ccf333f39374ce844c127a997975d807eed09931148cf094c74e0116d7c8cd098be9268b949816f6038eb0e97a8bce6b22399795f1657d40280e678ffb20c1684a76bc0ef2c4e2b1f1534a4ac8b886d0be96f0f4bf12b2"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffa}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f039d5afe59"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4a}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0xbf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a85fe7c16333e9a4f54e2db7bc0ae689"}]}, 0x30}}, 0x814) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x821}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40801) syz_genetlink_get_family_id$nbd(&(0x7f0000001300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x14000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r1, 0x309, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x8811) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x53}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 05:46:50 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x4, 0x1, "87c273dd8d773169501dcf2e364c2975e2218f92f9d837f5dbf93deb63ff11df547fa729a3aee4bf0fce1ec01297f0addb5cd1f948685ac70e7b7bb7c35fb6cc835646459105afe674e545fb8dfc6321cac4c6af40ec81b916e9ec336d75680007233975e4f2a8"}, 0x77) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x3, 0x1, 0xc, 0x3, 0x1c0, &(0x7f0000000240)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0xffff, 0x6, 0x0, 0x1f, 0x16, "3fbe254ccd441079"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) 05:46:50 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x480c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8004) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r1) waitid(0x2, 0x0, &(0x7f0000000480), 0x1000000, &(0x7f0000000500)) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r2, 0xa, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10008091) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "e524353652c9"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4686551461"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "970f59d95b1dc93b"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x400c8d1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r3) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff) write$char_usb(r4, &(0x7f0000000880)="9f3ed689fad56ea3450f4ac881e775d845d5216b77b65b3a44b09999e3a911bb5144d3ef1dc4b5368b262b8713ba5eb00b31031c163d961697927995264c33e11c87f7b9859697e9cd62f0a3e92f7bb615917d37b146bc0d806837740364e1263d995e18cc56b95d6ed79e058bef8e78805d324746e3045125400a00e6fafd73dadbb68ca3fc1c77a501093b2dfc937aa9dab0b5483eebcb5397c505dcc83ef6", 0xa0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) 05:46:50 executing program 4: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0x2b2) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "e8cad1dabf778688a6e3b0b25edd078ffaaa6652e8ad5239efef88ada0c0803e8fb0930591fa7705faf8a9d61f07a5785dd785d92a66deecd2f9e03b97487370c32418bc15ce9a0b911bea071c330527cf1e8b9ca8f18006eeb9a4762e9e9b98c31a32f5f2d99414bb75e9d5b47feafa8e1d158162be1e8f56cf27b69be9a21cfeec5816398a8b95313df35f4f0e4911ef8f9f80cf67fd6d830851465779ec09acff95db0b4d2a36d9ed041b38a0a41faa2de6aec1f14d98e10e105cbf7324884520a957aa766d631e8a014224c20f593e7f5de2f69a27e3b6a285080d1c0fb8b584a157a9615511aa62"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "45e44463ab4672186f048578717b8400169b9df914aed955db9aaa808533f4a79e6920e4dbbde7b969a876efa957f867493b15b42a7c6030a6267d28a1fb3f5abb53115509b79435a9db292b64b0abb886a3a1d2be84f7b59544d5e28c8992a9882bd050584cf1901527168a1a344daea04ed0e84f4e9c5d534c54b7b736300d51c584fff9dab50842968ff88d6c9f3d1e9188fcdc4bd99fd05e5c8010bb5d0758969b8af9755aea65"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x51bd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb7ab}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1040, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000380)={0x401, 0x1, 0x7, 0xfff, 0x16, "dfbd6317f86419e6"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/82) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000001540)) 05:46:50 executing program 7: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x5, 0x15, 0x7d}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x1e, 0x0, 0x190, &(0x7f0000000440)}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x1, 0x0, 0x1c, 0x4, 0x15, &(0x7f0000000880)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a2040, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000d00)) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000dc0)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000e00)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000e40)={0xc3c4, 0x0, 0x0, 0x4, 0x3f, 0x4}) ioctl$TIOCCBRK(r1, 0x5428) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000e80)) 05:46:50 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x3, 0x10001, 0xffffffe0, 0x5, 0x2, "f962d0ef57a897715a6b6e7e491cfc54fd3231", 0x4b7ad830, 0x1}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfc00, 0xfa2a, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x408200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3ff, 0x0, 0x6b, 0x1, 0x16, "ffebe981c1602b75"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000001c0)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x26000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x210800, 0x0) 05:46:50 executing program 5: sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x24048010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x80) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x4008890) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x20202, 0x0) 05:46:50 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000240)={0xbf8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x130, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x88, 0xd, 0x0, 0x1, [{0x81, 0x0, "7d7932ed2763733f60cf83d85d05202f63d8cd01e5fb4d4ab2dc35f9a684a86dca2531ee6159d18aee8a3002460bc9ae4aab2b304e1546fcfb1931e1eecca4bc17b44a35ee888001588053e71b86f5de48e9aaa50c17ead62af7d3f14f778fb52b12625488ecc8b5cfe48a72e5b68e5bbebc04ad47f41c582234efd39e"}]}, @NL80211_NAN_FUNC_SRF={0x78, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3a98}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf, 0xb, "986debe04d3ff69f7c8422"}]}, @NL80211_ATTR_NAN_FUNC={0x298, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SRF={0x280, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "625ccfddec4d1e02d237e61cffadea76cd111451c932c255f721e9ce40e8c4e50ca0d1249fa334c99df580dccb7079059280d16e295d2869956f095b3b865f40b3e1452d851024154ddedd8a1cd894d18466417d2cd782da95aaf20aa5c34d6ac137c88bb4f2885482903a99a35b976ec3c08ac692b19fa5bf248b65ce7addee612882276d8451599a169ff52473858b7d267d045aac87194473e87bbcbb5d333eb5b93ce07254a1343e34691aea835b561806fd49fd3f0df1942ce2a5d30af429076f5def68f6c99e87ff553a58e5bc2f17e6279c7efa251b833284caf293e9ad4fae3a95ab9350d6b831fa4e79792a30aef4855956a642488fe902113644"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x694, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x590, 0xd, 0x0, 0x1, [{0xb5, 0x0, "096ae68a1443a213ee7672dda2279ef572581158814856d9b8ac73521dc6e3c9a5aa3cf9ac7b4e81317b981300a6e6bbc5663cd85aebb195f0edc91b936e9aa514feb16785321f22a8e07cd2c30a94080b5b931c7b2b770a37964e2a0d56a043d7a2c06f5fe4bc20eeef08d68fd08a74560182fe8badaf2e92129d649424eacd7b3d2a41b419850fd29dc2f094361fab750b6be25ed4941bd7e8844a52ea74caa13b66a13d576baf6794b8e9f9f3b09e6d"}, {0xe0, 0x0, "3f10526d21141ab2c17630ac007aa0ef92c93026b9b95263762c37079e53e21c6aa7e83f6d21dd860f03701037621034fa79e7abb8292da350cde2ef36cedf0aa4b7eab15014f4098b146056678213bbd5b40a94b799c84cddac46b4fd3760cc749c6268f09c0d511c244ec8ff54a0103159eaeff0482aa2624381a73642ded7b22326f03e7d2815e0ea9258380348f748caa051f4851d4f0adef9233c3d6bc7fe342037df87b4cbc3960e99ca6ca12fd5421cf28f4831f858c59a1c86deb73d3d7021368d52ed6ca9a3932b8936c8049eee0d38d7faebe86fb6bc8d"}, {0x84, 0x0, "7cc7bf552cb378a1d70ac7e9a1d98c3fbbf0fc645a192799b961a705dc54010ad357fe6fa62e40c3a1fc5685d1ec06537919e67ddebd6a01271e96cb6e0da41c6c3eb6f9b80f71248f0fc6e3e2ad6450f794c4ce970be19598ca6b8e6a425ace1454e2438257a4a3137ea4b8fc6efa379e53734fdd5866df8b8dc1b1e22c622f"}, {0x6a, 0x0, "55b8a471f6f862db6c9d9ac98628ef5ea51377301ca3e79f22375109071ff38c289a95ea8486e8b9e740860b8e7eb62f2215dab757f05071a67836eaee506df1b48e001349dfad50800edbedaa931581af52c036ef20f14cb4f8098dee8f44ac0e15c1fe6fd6"}, {0xc3, 0x0, "6febb9498ef8d3286f0acf03e3227a9a8edcd6546a68858d83b56ef5516c962a295d449118364780ad329de364cc509676523e2771b0ba6b715c221765c11022f8c260d5ff77b9b41aa27f54117f9b35e68bb74a1102a8377c6548d77f8792b4ee0a00a68eef2f1c999a7ba941b6427f28df180e20827fab36d4300ccbc1ad0936a80ccc3c750843105b80be1bd9ad0a890b74886a8f1add0f378d3c52d2be2c5f68ca48fac9cbe4dc79944c44f8d7458308f349cce4b417e7415306f7d41c"}, {0x4d, 0x0, "2130796877dabb54c7c38cf771bcdf92aa39ae2a3a0dbe72642c7c2d407fa6e9363d913a46c747160d1df5ab3d559b2f22d2cc770ffeee74925ce651f47ddfd76f4f715843a5a619f5"}, {0x64, 0x0, "293772a4d9bebac843d34bdb6a443be0d05b71b9726486a6f1ac60186bca4b613ccb45e4f9de8e46fd0a8594a193b268e187586a097f058de300cfa3fe81432f50b2c36c215d48452cb51d161d8a421e62b135f9715ff40930834e87080e7bae"}, {0x95, 0x0, "062761841c82cdf5fd6f24437327481b390dded90d61cdcb80613518b3fb7d39a94066e051ab222c262470895346d49041fca602fc49f7ee2a6a156182586cee5bf4a25c76f9a848ced947d68a54ad7a4de253cfbd4851a231041bf842a1c6d38de61c92b8c2c2fb2a4be40bbceb111839b8fcbfa19ec75cbe3dd0270c3feee103313f2a2283abb8be316644f9d53649fc"}, {0x9a, 0x0, "caaef05813716b000ae45bddc98e5f01369117b86516595a887e9015aa19b479c41255338b4dc10f00ba85ad6653422c6ef45874de76bd7b98a530ceae3849be7d9d2f8241ad8e956d2c07efdca41659d5626d6cfd78deab97949167174910d897b0ac661872cd19bb87f41463ff81f0e4b2316bc03f7762a1863e39c544e8e9d3636c4fae4cb523e2b48c952ff63fce72efc443c10a"}, {0x57, 0x0, "4cc0bbf1d0465712b1dbba9a55ee0c0da7457e8183dbabdd346bbcf072878988f66f4b9d2c3c2770adf255f70dd459b12113609b7ef55bd9d911e734b8a90ae4e867dbae9170cc8436bf6c754c05ee28714638"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xdc, 0xd, 0x0, 0x1, [{0xd7, 0x0, "98f7c09209b2b99ed41d7de1f6f153d4da7583ffa03b014df47d615f221932ae0f0e998f470fb52fbd23cba6a5cf91ac61191ddd06c66fac95f59a2165ff49ce9635eb8284554f59abea95eb42dbeb8c3773e3878c1f0e9a060f5f9a5baefd93a88b855c5c7f158537cfc97c8a6716d53135a4202c62b91a792fc5e2ccf333f39374ce844c127a997975d807eed09931148cf094c74e0116d7c8cd098be9268b949816f6038eb0e97a8bce6b22399795f1657d40280e678ffb20c1684a76bc0ef2c4e2b1f1534a4ac8b886d0be96f0f4bf12b2"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffa}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f039d5afe59"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4a}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0xbf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a85fe7c16333e9a4f54e2db7bc0ae689"}]}, 0x30}}, 0x814) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x201, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x821}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40801) syz_genetlink_get_family_id$nbd(&(0x7f0000001300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x14000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2f}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x53}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 05:46:50 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200081}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31e918551fddb0de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="17f1f28f2ebfbb050d57450e608e69e9bf1c3260794345e36648e6d257365fde"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10109437ae2d965d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60d845cad494b3f54abfda9768bce987bc6b6437cd5038b8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d04540b4e7255a453fdada1134d7ad8"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="15c597e75549bc6b5fe7c2d1b2e47e4da5fc80ab19e12133f00285d3413ff721"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95c4fde80794cd896bfe641d896f21eeecc1b609a9978087e9d6ff845ef8fafd"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a94ad7ad2dff7792d8f9bf83d49f0ab1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d33981c8b2c404d151b5ff9a5f7d642cc355cc9be53552258c23d50b420d5a5d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2649c9e7d1fd9bc740300d102e5ebc23565d00714cbfc6040de70f577e693568"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f9c0c2241e13f16567c7a09c5655ab95ef24ff696af8e3d311060521d55c90d"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x89}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe8, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x5, 0x7, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8, 0x800, 0x7, 0x0, 0x6, 0x200, 0x9, 0x10001, 0x421e486e]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2541, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0xa6801, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x64, 0x1, 0xcc2b, 0x3, 0x5, 0x89, 0x0, 0x2]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4050) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44800) [ 187.863105] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.863165] Bluetooth: hci1: command 0x0406 tx timeout [ 187.864121] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.865148] Bluetooth: hci3: command 0x0406 tx timeout [ 187.865828] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.866809] Bluetooth: hci2: command 0x0406 tx timeout [ 187.869047] task:rcu_gp state:I [ 187.870640] Bluetooth: hci0: command 0x0406 tx timeout [ 187.871406] stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.872594] Bluetooth: hci7: command 0x0406 tx timeout [ 187.873463] Call Trace: [ 187.873475] [ 187.873493] __schedule+0x893/0x2470 [ 187.874673] Bluetooth: hci6: command 0x0406 tx timeout [ 187.875030] ? io_schedule_timeout+0x150/0x150 [ 187.875548] Bluetooth: hci5: command 0x0406 tx timeout [ 187.876049] ? do_raw_spin_lock+0x121/0x260 [ 187.879262] ? rwlock_bug.part.0+0x90/0x90 [ 187.879940] schedule+0xda/0x1b0 [ 187.880460] rescuer_thread+0x851/0xdb0 [ 187.881064] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.881809] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.882559] ? lockdep_hardirqs_on+0x79/0x100 [ 187.883228] ? worker_thread+0x1260/0x1260 [ 187.883901] kthread+0x2ed/0x3a0 [ 187.884402] ? kthread_complete_and_exit+0x40/0x40 [ 187.885143] ret_from_fork+0x22/0x30 [ 187.885746] [ 187.886112] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.887049] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.887813] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.888909] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.890137] Call Trace: [ 187.890523] [ 187.890855] __schedule+0x893/0x2470 [ 187.891456] ? io_schedule_timeout+0x150/0x150 [ 187.892142] ? do_raw_spin_lock+0x121/0x260 [ 187.892778] ? rwlock_bug.part.0+0x90/0x90 [ 187.893424] schedule+0xda/0x1b0 [ 187.893973] rescuer_thread+0x851/0xdb0 [ 187.894558] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.895291] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.896097] ? lockdep_hardirqs_on+0x79/0x100 [ 187.896813] ? worker_thread+0x1260/0x1260 [ 187.897500] kthread+0x2ed/0x3a0 [ 187.898025] ? kthread_complete_and_exit+0x40/0x40 [ 187.898734] ret_from_fork+0x22/0x30 [ 187.899319] [ 187.899674] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.900664] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.901432] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.902535] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.903723] Call Trace: [ 187.904108] [ 187.904463] __schedule+0x893/0x2470 [ 187.905098] ? io_schedule_timeout+0x150/0x150 [ 187.905787] ? do_raw_spin_lock+0x121/0x260 [ 187.906448] ? rwlock_bug.part.0+0x90/0x90 [ 187.907100] schedule+0xda/0x1b0 [ 187.907627] rescuer_thread+0x851/0xdb0 [ 187.908218] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.909022] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.909781] ? lockdep_hardirqs_on+0x79/0x100 [ 187.910482] ? worker_thread+0x1260/0x1260 [ 187.911136] kthread+0x2ed/0x3a0 [ 187.911643] ? kthread_complete_and_exit+0x40/0x40 [ 187.912364] ret_from_fork+0x22/0x30 [ 187.913012] [ 187.913338] INFO: task netns:6 blocked for more than 143 seconds. [ 187.914255] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.915036] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.916122] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.917352] Call Trace: [ 187.917764] [ 187.918138] __schedule+0x893/0x2470 [ 187.918700] ? io_schedule_timeout+0x150/0x150 [ 187.919365] ? do_raw_spin_lock+0x121/0x260 [ 187.920045] ? rwlock_bug.part.0+0x90/0x90 [ 187.920727] schedule+0xda/0x1b0 [ 187.921256] rescuer_thread+0x851/0xdb0 [ 187.921861] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.922615] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.923361] ? lockdep_hardirqs_on+0x79/0x100 [ 187.924066] ? worker_thread+0x1260/0x1260 [ 187.924732] kthread+0x2ed/0x3a0 [ 187.925251] ? kthread_complete_and_exit+0x40/0x40 [ 187.926037] ret_from_fork+0x22/0x30 [ 187.926608] [ 187.926984] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.927945] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.928730] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.929857] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 187.931097] Workqueue: 0x0 (kblockd) [ 187.931666] Call Trace: [ 187.932062] [ 187.932390] __schedule+0x893/0x2470 [ 187.933016] ? io_schedule_timeout+0x150/0x150 [ 187.933720] schedule+0xda/0x1b0 [ 187.934266] worker_thread+0x15f/0x1260 [ 187.934859] ? process_one_work+0x16a0/0x16a0 [ 187.935541] kthread+0x2ed/0x3a0 [ 187.936057] ? kthread_complete_and_exit+0x40/0x40 [ 187.936807] ret_from_fork+0x22/0x30 [ 187.937412] [ 187.937785] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.938760] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.939533] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.940633] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.941847] Call Trace: [ 187.942226] [ 187.942568] __schedule+0x893/0x2470 [ 187.943126] ? io_schedule_timeout+0x150/0x150 [ 187.943788] ? do_raw_spin_lock+0x121/0x260 [ 187.944455] ? rwlock_bug.part.0+0x90/0x90 [ 187.945103] schedule+0xda/0x1b0 [ 187.945626] rescuer_thread+0x851/0xdb0 [ 187.946226] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.946974] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.947692] ? lockdep_hardirqs_on+0x79/0x100 [ 187.948365] ? worker_thread+0x1260/0x1260 [ 187.949003] kthread+0x2ed/0x3a0 [ 187.949510] ? kthread_complete_and_exit+0x40/0x40 [ 187.950221] ret_from_fork+0x22/0x30 [ 187.950778] [ 187.951156] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.952149] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.952908] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.954000] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.955171] Call Trace: [ 187.955553] [ 187.955919] __schedule+0x893/0x2470 [ 187.956472] ? io_schedule_timeout+0x150/0x150 [ 187.957142] ? mark_held_locks+0x9e/0xe0 [ 187.957754] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.958500] schedule+0xda/0x1b0 [ 187.959019] rcu_tasks_one_gp+0x3db/0xc10 [ 187.959652] rcu_tasks_kthread+0x80/0xa0 [ 187.960249] ? rcu_tasks_postscan+0x10/0x10 [ 187.960914] kthread+0x2ed/0x3a0 [ 187.961392] ? kthread_complete_and_exit+0x40/0x40 [ 187.962124] ret_from_fork+0x22/0x30 [ 187.962669] [ 187.963023] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.963995] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.964722] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.965803] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.966963] Workqueue: 0x0 (events_highpri) [ 187.967604] Call Trace: [ 187.968003] [ 187.968327] __schedule+0x893/0x2470 [ 187.969043] ? io_schedule_timeout+0x150/0x150 [ 187.970032] schedule+0xda/0x1b0 [ 187.970700] worker_thread+0x15f/0x1260 [ 187.971562] ? process_one_work+0x16a0/0x16a0 [ 187.972491] kthread+0x2ed/0x3a0 [ 187.973188] ? kthread_complete_and_exit+0x40/0x40 [ 187.974193] ret_from_fork+0x22/0x30 [ 187.974795] [ 188.035917] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 188.036830] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.037565] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.038563] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 188.039645] Call Trace: [ 188.040010] [ 188.040312] __schedule+0x893/0x2470 [ 188.040836] ? io_schedule_timeout+0x150/0x150 [ 188.041507] ? do_raw_spin_lock+0x121/0x260 [ 188.042096] ? rwlock_bug.part.0+0x90/0x90 [ 188.042660] schedule+0xda/0x1b0 [ 188.043142] rescuer_thread+0x851/0xdb0 [ 188.043685] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.044355] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.045047] ? lockdep_hardirqs_on+0x79/0x100 [ 188.045668] ? worker_thread+0x1260/0x1260 [ 188.046274] kthread+0x2ed/0x3a0 [ 188.046744] ? kthread_complete_and_exit+0x40/0x40 [ 188.047443] ret_from_fork+0x22/0x30 [ 188.048005] [ 188.048324] INFO: task kblockd:31 blocked for more than 143 seconds. [ 188.049188] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.049921] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.050940] task:kblockd state:I stack:30176 pid:31 ppid:2 flags:0x00004000 [ 188.052054] Call Trace: [ 188.052396] [ 188.052722] __schedule+0x893/0x2470 [ 188.053281] ? io_schedule_timeout+0x150/0x150 [ 188.053960] ? do_raw_spin_lock+0x121/0x260 [ 188.054560] ? rwlock_bug.part.0+0x90/0x90 [ 188.055167] schedule+0xda/0x1b0 [ 188.055643] rescuer_thread+0x851/0xdb0 [ 188.056208] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.056917] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.057601] ? lockdep_hardirqs_on+0x79/0x100 [ 188.058221] ? worker_thread+0x1260/0x1260 [ 188.058808] kthread+0x2ed/0x3a0 [ 188.059295] ? kthread_complete_and_exit+0x40/0x40 [ 188.059995] ret_from_fork+0x22/0x30 [ 188.060544] [ 188.060942] [ 188.060942] Showing all locks held in the system: [ 188.061749] 1 lock held by rcu_tasks_kthre/11: [ 188.062358] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 188.063673] 1 lock held by khungtaskd/25: [ 188.064229] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 188.065446] 1 lock held by in:imklog/188: [ 188.066020] 2 locks held by syz-executor/4274: [ 188.066614] [ 188.066839] ============================================= [ 188.066839] VM DIAGNOSIS: 05:46:54 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902fa18 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001 R12=0000000000000061 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc059e8080 CR3=0000000009a5a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4156a4ea00000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803617f768 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f94d1f41330 CR3=0000000010286000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffff00 ffffff0000000000 YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403 YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 000000323d524f4e 494d00373d524f4a YMM05=0000000000000000 0000000000000000 3d5145534b534944 006b7369643d4550 YMM06=0000000000000000 0000000000000000 3d454d414e564544 00303d444955555f YMM07=0000000000000000 0000000000000000 5953425553003270 6f6f6c2f6b636f6c YMM08=0000000000000000 0000000000000000 49006d756e203c20 69000a313a56000a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000