Warning: Permanently added '[localhost]:57043' (ECDSA) to the list of known hosts. 2022/10/01 18:53:01 fuzzer started 2022/10/01 18:53:02 dialing manager at localhost:35095 syzkaller login: [ 37.084607] cgroup: Unknown subsys name 'net' [ 37.177614] cgroup: Unknown subsys name 'rlimit' 2022/10/01 18:53:16 syscalls: 203 2022/10/01 18:53:16 code coverage: enabled 2022/10/01 18:53:16 comparison tracing: enabled 2022/10/01 18:53:16 extra coverage: enabled 2022/10/01 18:53:16 setuid sandbox: enabled 2022/10/01 18:53:16 namespace sandbox: enabled 2022/10/01 18:53:16 Android sandbox: enabled 2022/10/01 18:53:16 fault injection: enabled 2022/10/01 18:53:16 leak checking: enabled 2022/10/01 18:53:16 net packet injection: enabled 2022/10/01 18:53:16 net device setup: enabled 2022/10/01 18:53:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 18:53:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 18:53:16 USB emulation: enabled 2022/10/01 18:53:16 hci packet injection: enabled 2022/10/01 18:53:16 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 18:53:16 802.15.4 emulation: enabled 2022/10/01 18:53:16 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 18:53:18 starting 8 fuzzer processes 18:53:18 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xede00}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 18:53:18 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xff, 0x800, 0x2, @private1, @remote, 0x20, 0x1, 0x0, 0x1}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:53:18 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) inotify_init() ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x20e000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000800)) 18:53:18 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x6}, 0x20, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x178, 0x0, &(0x7f0000000200)={0x2, 0x77, {0x0, 0xc, 0x2d, "a0423f4f2648b4980ef6023d2899c507d25e1ab66daf757b57de9c71d4f67e8c4d7f9e6ee652f749cfa633c58d", 0x3d, "94f948e202a98b9bd41717da8573b428d6dd9d7297573f33b5652c1f49634f262d0533f82f1c29ade30f1d56aad16ca150ac2bc9b65707fd9203394f0f"}, 0x63, "3e26b04fd21a13e0a5560fc59cbe685b4e2cb1b31037b2a2e941f654b6355fbde3a38979e76fb481e53df9d5dc101a4b02b8c355a1418548b974b4b2bbb2d26bcfea89cd6054c52fc7b71ac94de849ee6f14d7cca4afe99e608ce59703372fc471f785"}, 0xe6}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000003c0)={0x6, 0x7fffffff, 0x1}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4890) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x20, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0x6, 0xfffffffd}}) recvfrom(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x2080, &(0x7f0000001680)=@xdp={0x2c, 0x1b, r1}, 0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001700)=[0xffffffffffffffff], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001840)={0x9, 0x3, 0xb7, &(0x7f0000001780)="acc4082808b47a34bb438e294224f6eb850a60fc212a72c80b4dcf1d6dd3b8c933096880452228a5ec31c8703501fd62b8afba27fbcbf3630c113f10f8245b291fd7b1a1dcdba4bfccdd42c5861be228390c9b60950454a6c218e8740ce96d4f31fab922f987019a9761739d508c52f3981bd6255432d5c05e474686d9586382bf690f0683e8a73fa3e65cab259aa635999f8c0dc5c50a4058219e55dc4fae3b527c690b7d6c3db0e8b73a0e87a060803f216f155a7612"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r4, &(0x7f0000001880)=""/79, 0x4f, 0x10100, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000001900)=0x58) r5 = creat(&(0x7f0000001940)='./file0\x00', 0xaa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2e997daa1128"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x1}}]}, 0x58}}, 0x2008c104) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001c80)={&(0x7f0000001b80), 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\'\x7f+#\xe4/\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6gre0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) 18:53:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1074, r0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x480000, 0x8}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x1032, 0x2a, [@measure_req={0x26, 0x1003, {0x8, 0xa0, 0x0, "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"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xf4}}, @mic={0x8c, 0x18, {0x7f8, "fc0627d73b69", @long="edcabfd3aac7609e3cb26e617ca5aa41"}}, @chsw_timing={0x68, 0x4, {0x3, 0xfd6b}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x1074}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x2a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x40) socketpair(0x1e, 0xa, 0xb79b, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1fcbfa11, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x809}, 0x48404) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, r0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="49ece44f6ccb"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8804) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x20000, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xc0, r0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x5, 0x6}, {0x2, 0x4}, {0xf7, 0x1}, {0xe4, 0x1}, {0x2, 0x7}, {0x5}, {0x1f, 0x4}, {0x96, 0x6}, {0x0, 0x7}, {0x8, 0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x62, 0x3}], "cbc272cca2d23add"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x74, 0x4}], "c132f4cd40fe2558"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xff, 0x2}, {0x5}, {0x2, 0x5}, {0x2, 0x2}, {0xc3, 0x6}, {0x40, 0x7}, {0x1b}, {0x2, 0x6}, {0xf7, 0x5}, {0x7}, {0x3f}, {0x81, 0x6}, {0x80, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x40, 0x4}, {0x43}, {0x40, 0x6}, {0x1, 0x4}], "5546b285ec2c00dd"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x4}, {0xe0, 0x4}, {0x67, 0x5}, {0x6, 0x1}, {0x8, 0x3}, {0xd, 0x6}, {0xb9, 0x3}], "ab12d5200523ad52"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "7495ef304507f6f0"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xff}, {0x5, 0x7}, {0x8, 0x3}], "fcb7d8f791667e7e"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x4000880) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x58, r0, 0x504, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x84) getpeername(r8, &(0x7f0000001b40)=@nl, &(0x7f0000001bc0)=0x80) recvfrom(r4, &(0x7f0000001c00)=""/151, 0x97, 0x40, &(0x7f0000001cc0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x80) 18:53:18 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x1000, 0x0, 0x9, 0x80}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x206000, 0x0) write$char_usb(r1, &(0x7f0000000100)="44d1d33b4faee3ef4fada1782f0f4cdc43684c54f96adb4bbacd2540735dbbe7cf4e9d2ccb91579e64053de78190f6136e0b6c02fbee", 0x36) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x800400, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000200)) copy_file_range(r1, &(0x7f0000000240)=0x9, r3, &(0x7f0000000280)=0x4, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe60, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = signalfd4(r1, &(0x7f0000000440)={[0x400]}, 0x8, 0x0) process_mrelease(r5, 0x0) r6 = accept(r0, &(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000580)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000005c0)) socketpair(0x21, 0x3, 0x4, &(0x7f0000000600)) 18:53:18 executing program 6: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7fff, 0x400a00) r1 = socket(0x3, 0x80000, 0x3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x5, 0x7fffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x78, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x794}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5c05a63245d3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x20}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket(0xf, 0x4, 0x1ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x3, 0x75) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) pipe2(&(0x7f00000004c0), 0x5000) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000500)={0x7, 0x5e88, 0x796, 0x4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x810, r4, 0x0) [ 52.661494] audit: type=1400 audit(1664650398.450:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:53:18 executing program 7: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "b5a92b5e9bbfec22ce9de8e8bc343d5b08c668c769d85c5f90c66bd0ed38d0fbfe595684c6544c5677f7cefe0397494ab71ec017ee9f8bf76414ddc05ac1f626", "fcbe39dadb849f7ddaa150d789d1d4e0f5be1231a918c1453e23919be10860b9dfb2d6e69b6c8f65dbe48e896c237b20e5782183f3842e882a1555ef84458332", "edba52a8bef79a14ea6affb7e0d1b80b716861e378b3aa293b08596844e40b65", [0x5, 0x1ff]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff8, 0xff, 0x5, 0x100}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000480)) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000500)={0x7, 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000540)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) read$char_usb(r3, &(0x7f00000005c0)=""/57, 0x39) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pidfd_getfd(r2, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) [ 53.875903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.877508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.879333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.880612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.882570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.884253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.885388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.887290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.888575] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.890271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.894823] Bluetooth: hci0: HCI_REQ-0x0c1a [ 53.910922] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.912542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.918816] Bluetooth: hci1: HCI_REQ-0x0c1a [ 53.920162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.946404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.957170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.965018] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.982970] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.985146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.996612] Bluetooth: hci2: HCI_REQ-0x0c1a [ 54.046313] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.048159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 54.050280] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 54.051343] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.054793] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 54.056023] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.057534] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.062275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.069488] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 54.073051] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 54.079049] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.080584] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 54.082567] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.086347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.091245] Bluetooth: hci7: HCI_REQ-0x0c1a [ 54.092033] Bluetooth: hci6: HCI_REQ-0x0c1a [ 54.171360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.172376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.192376] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.193875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.214789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.215779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.217070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.242964] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.243973] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.244938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.254849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.255822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.256780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.270534] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.272826] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.272982] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.275647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.280212] Bluetooth: hci4: HCI_REQ-0x0c1a [ 54.330831] Bluetooth: hci5: HCI_REQ-0x0c1a [ 55.951104] Bluetooth: hci0: command 0x0409 tx timeout [ 55.951115] Bluetooth: hci1: command 0x0409 tx timeout [ 56.014862] Bluetooth: hci2: command 0x0409 tx timeout [ 56.142881] Bluetooth: hci6: command 0x0409 tx timeout [ 56.142898] Bluetooth: hci7: command 0x0409 tx timeout [ 56.334776] Bluetooth: hci3: command 0x0409 tx timeout [ 56.335408] Bluetooth: hci4: command 0x0409 tx timeout [ 56.398774] Bluetooth: hci5: command 0x0409 tx timeout [ 57.998923] Bluetooth: hci0: command 0x041b tx timeout [ 57.999778] Bluetooth: hci1: command 0x041b tx timeout [ 58.062811] Bluetooth: hci2: command 0x041b tx timeout [ 58.190790] Bluetooth: hci6: command 0x041b tx timeout [ 58.191610] Bluetooth: hci7: command 0x041b tx timeout [ 58.382828] Bluetooth: hci4: command 0x041b tx timeout [ 58.383637] Bluetooth: hci3: command 0x041b tx timeout [ 58.446787] Bluetooth: hci5: command 0x041b tx timeout [ 60.047814] Bluetooth: hci1: command 0x040f tx timeout [ 60.048274] Bluetooth: hci0: command 0x040f tx timeout [ 60.111744] Bluetooth: hci2: command 0x040f tx timeout [ 60.239778] Bluetooth: hci7: command 0x040f tx timeout [ 60.240234] Bluetooth: hci6: command 0x040f tx timeout [ 60.431806] Bluetooth: hci3: command 0x040f tx timeout [ 60.432262] Bluetooth: hci4: command 0x040f tx timeout [ 60.494799] Bluetooth: hci5: command 0x040f tx timeout [ 62.095798] Bluetooth: hci0: command 0x0419 tx timeout [ 62.096269] Bluetooth: hci1: command 0x0419 tx timeout [ 62.158757] Bluetooth: hci2: command 0x0419 tx timeout [ 62.286767] Bluetooth: hci6: command 0x0419 tx timeout [ 62.287231] Bluetooth: hci7: command 0x0419 tx timeout [ 62.479795] Bluetooth: hci4: command 0x0419 tx timeout [ 62.480265] Bluetooth: hci3: command 0x0419 tx timeout [ 62.543799] Bluetooth: hci5: command 0x0419 tx timeout 18:54:14 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xff, 0x800, 0x2, @private1, @remote, 0x20, 0x1, 0x0, 0x1}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:54:14 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x6}, 0x20, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x178, 0x0, &(0x7f0000000200)={0x2, 0x77, {0x0, 0xc, 0x2d, "a0423f4f2648b4980ef6023d2899c507d25e1ab66daf757b57de9c71d4f67e8c4d7f9e6ee652f749cfa633c58d", 0x3d, "94f948e202a98b9bd41717da8573b428d6dd9d7297573f33b5652c1f49634f262d0533f82f1c29ade30f1d56aad16ca150ac2bc9b65707fd9203394f0f"}, 0x63, "3e26b04fd21a13e0a5560fc59cbe685b4e2cb1b31037b2a2e941f654b6355fbde3a38979e76fb481e53df9d5dc101a4b02b8c355a1418548b974b4b2bbb2d26bcfea89cd6054c52fc7b71ac94de849ee6f14d7cca4afe99e608ce59703372fc471f785"}, 0xe6}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000003c0)={0x6, 0x7fffffff, 0x1}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4890) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x20, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0x6, 0xfffffffd}}) recvfrom(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x2080, &(0x7f0000001680)=@xdp={0x2c, 0x1b, r1}, 0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001700)=[0xffffffffffffffff], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001840)={0x9, 0x3, 0xb7, &(0x7f0000001780)="acc4082808b47a34bb438e294224f6eb850a60fc212a72c80b4dcf1d6dd3b8c933096880452228a5ec31c8703501fd62b8afba27fbcbf3630c113f10f8245b291fd7b1a1dcdba4bfccdd42c5861be228390c9b60950454a6c218e8740ce96d4f31fab922f987019a9761739d508c52f3981bd6255432d5c05e474686d9586382bf690f0683e8a73fa3e65cab259aa635999f8c0dc5c50a4058219e55dc4fae3b527c690b7d6c3db0e8b73a0e87a060803f216f155a7612"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r4, &(0x7f0000001880)=""/79, 0x4f, 0x10100, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000001900)=0x58) r5 = creat(&(0x7f0000001940)='./file0\x00', 0xaa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2e997daa1128"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x1}}]}, 0x58}}, 0x2008c104) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001c80)={&(0x7f0000001b80), 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\'\x7f+#\xe4/\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6gre0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) 18:54:14 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xff, 0x800, 0x2, @private1, @remote, 0x20, 0x1, 0x0, 0x1}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:54:15 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xff, 0x800, 0x2, @private1, @remote, 0x20, 0x1, 0x0, 0x1}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:54:15 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xff, 0x800, 0x2, @private1, @remote, 0x20, 0x1, 0x0, 0x1}}) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:54:15 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xff, 0x800, 0x2, @private1, @remote, 0x20, 0x1, 0x0, 0x1}}) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:54:15 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x6}, 0x20, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x178, 0x0, &(0x7f0000000200)={0x2, 0x77, {0x0, 0xc, 0x2d, "a0423f4f2648b4980ef6023d2899c507d25e1ab66daf757b57de9c71d4f67e8c4d7f9e6ee652f749cfa633c58d", 0x3d, "94f948e202a98b9bd41717da8573b428d6dd9d7297573f33b5652c1f49634f262d0533f82f1c29ade30f1d56aad16ca150ac2bc9b65707fd9203394f0f"}, 0x63, "3e26b04fd21a13e0a5560fc59cbe685b4e2cb1b31037b2a2e941f654b6355fbde3a38979e76fb481e53df9d5dc101a4b02b8c355a1418548b974b4b2bbb2d26bcfea89cd6054c52fc7b71ac94de849ee6f14d7cca4afe99e608ce59703372fc471f785"}, 0xe6}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000003c0)={0x6, 0x7fffffff, 0x1}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4890) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x20, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0x6, 0xfffffffd}}) recvfrom(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x2080, &(0x7f0000001680)=@xdp={0x2c, 0x1b, r1}, 0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001700)=[0xffffffffffffffff], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001840)={0x9, 0x3, 0xb7, &(0x7f0000001780)="acc4082808b47a34bb438e294224f6eb850a60fc212a72c80b4dcf1d6dd3b8c933096880452228a5ec31c8703501fd62b8afba27fbcbf3630c113f10f8245b291fd7b1a1dcdba4bfccdd42c5861be228390c9b60950454a6c218e8740ce96d4f31fab922f987019a9761739d508c52f3981bd6255432d5c05e474686d9586382bf690f0683e8a73fa3e65cab259aa635999f8c0dc5c50a4058219e55dc4fae3b527c690b7d6c3db0e8b73a0e87a060803f216f155a7612"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r4, &(0x7f0000001880)=""/79, 0x4f, 0x10100, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000001900)=0x58) r5 = creat(&(0x7f0000001940)='./file0\x00', 0xaa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2e997daa1128"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x1}}]}, 0x58}}, 0x2008c104) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001c80)={&(0x7f0000001b80), 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\'\x7f+#\xe4/\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6gre0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) 18:54:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1074, r0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x480000, 0x8}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x1032, 0x2a, [@measure_req={0x26, 0x1003, {0x8, 0xa0, 0x0, "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"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xf4}}, @mic={0x8c, 0x18, {0x7f8, "fc0627d73b69", @long="edcabfd3aac7609e3cb26e617ca5aa41"}}, @chsw_timing={0x68, 0x4, {0x3, 0xfd6b}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x1074}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x2a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x40) socketpair(0x1e, 0xa, 0xb79b, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1fcbfa11, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x809}, 0x48404) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, r0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="49ece44f6ccb"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8804) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x20000, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xc0, r0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x5, 0x6}, {0x2, 0x4}, {0xf7, 0x1}, {0xe4, 0x1}, {0x2, 0x7}, {0x5}, {0x1f, 0x4}, {0x96, 0x6}, {0x0, 0x7}, {0x8, 0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x62, 0x3}], "cbc272cca2d23add"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x74, 0x4}], "c132f4cd40fe2558"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xff, 0x2}, {0x5}, {0x2, 0x5}, {0x2, 0x2}, {0xc3, 0x6}, {0x40, 0x7}, {0x1b}, {0x2, 0x6}, {0xf7, 0x5}, {0x7}, {0x3f}, {0x81, 0x6}, {0x80, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x40, 0x4}, {0x43}, {0x40, 0x6}, {0x1, 0x4}], "5546b285ec2c00dd"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x4}, {0xe0, 0x4}, {0x67, 0x5}, {0x6, 0x1}, {0x8, 0x3}, {0xd, 0x6}, {0xb9, 0x3}], "ab12d5200523ad52"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "7495ef304507f6f0"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xff}, {0x5, 0x7}, {0x8, 0x3}], "fcb7d8f791667e7e"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x4000880) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x58, r0, 0x504, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x84) getpeername(r8, &(0x7f0000001b40)=@nl, &(0x7f0000001bc0)=0x80) recvfrom(r4, &(0x7f0000001c00)=""/151, 0x97, 0x40, &(0x7f0000001cc0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x80) [ 115.165184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.174252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.178214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.181984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.183602] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.186195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.191008] Bluetooth: hci3: HCI_REQ-0x0c1a [ 115.226172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.227809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.230162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.233535] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.237997] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 115.240507] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.247600] Bluetooth: hci5: HCI_REQ-0x0c1a [ 117.262816] Bluetooth: hci5: command 0x0409 tx timeout [ 117.262970] Bluetooth: hci3: command 0x0409 tx timeout [ 119.310840] Bluetooth: hci3: command 0x041b tx timeout [ 119.310900] Bluetooth: hci5: command 0x041b tx timeout [ 121.358804] Bluetooth: hci3: command 0x040f tx timeout [ 121.358841] Bluetooth: hci5: command 0x040f tx timeout [ 123.406815] Bluetooth: hci3: command 0x0419 tx timeout [ 123.407312] Bluetooth: hci5: command 0x0419 tx timeout 18:54:50 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xff, 0x800, 0x2, @private1, @remote, 0x20, 0x1, 0x0, 0x1}}) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:54:50 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xede00}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 18:54:50 executing program 7: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "b5a92b5e9bbfec22ce9de8e8bc343d5b08c668c769d85c5f90c66bd0ed38d0fbfe595684c6544c5677f7cefe0397494ab71ec017ee9f8bf76414ddc05ac1f626", "fcbe39dadb849f7ddaa150d789d1d4e0f5be1231a918c1453e23919be10860b9dfb2d6e69b6c8f65dbe48e896c237b20e5782183f3842e882a1555ef84458332", "edba52a8bef79a14ea6affb7e0d1b80b716861e378b3aa293b08596844e40b65", [0x5, 0x1ff]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff8, 0xff, 0x5, 0x100}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000480)) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000500)={0x7, 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000540)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) read$char_usb(r3, &(0x7f00000005c0)=""/57, 0x39) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pidfd_getfd(r2, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 18:54:50 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1074, r0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x480000, 0x8}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x1032, 0x2a, [@measure_req={0x26, 0x1003, {0x8, 0xa0, 0x0, "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"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xf4}}, @mic={0x8c, 0x18, {0x7f8, "fc0627d73b69", @long="edcabfd3aac7609e3cb26e617ca5aa41"}}, @chsw_timing={0x68, 0x4, {0x3, 0xfd6b}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x1074}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x2a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x40) socketpair(0x1e, 0xa, 0xb79b, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1fcbfa11, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x809}, 0x48404) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, r0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="49ece44f6ccb"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8804) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x20000, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xc0, r0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x5, 0x6}, {0x2, 0x4}, {0xf7, 0x1}, {0xe4, 0x1}, {0x2, 0x7}, {0x5}, {0x1f, 0x4}, {0x96, 0x6}, {0x0, 0x7}, {0x8, 0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x62, 0x3}], "cbc272cca2d23add"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x74, 0x4}], "c132f4cd40fe2558"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xff, 0x2}, {0x5}, {0x2, 0x5}, {0x2, 0x2}, {0xc3, 0x6}, {0x40, 0x7}, {0x1b}, {0x2, 0x6}, {0xf7, 0x5}, {0x7}, {0x3f}, {0x81, 0x6}, {0x80, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x40, 0x4}, {0x43}, {0x40, 0x6}, {0x1, 0x4}], "5546b285ec2c00dd"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x4}, {0xe0, 0x4}, {0x67, 0x5}, {0x6, 0x1}, {0x8, 0x3}, {0xd, 0x6}, {0xb9, 0x3}], "ab12d5200523ad52"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "7495ef304507f6f0"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xff}, {0x5, 0x7}, {0x8, 0x3}], "fcb7d8f791667e7e"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x4000880) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x58, r0, 0x504, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x84) getpeername(r8, &(0x7f0000001b40)=@nl, &(0x7f0000001bc0)=0x80) recvfrom(r4, &(0x7f0000001c00)=""/151, 0x97, 0x40, &(0x7f0000001cc0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x80) 18:54:50 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x1000, 0x0, 0x9, 0x80}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x206000, 0x0) write$char_usb(r1, &(0x7f0000000100)="44d1d33b4faee3ef4fada1782f0f4cdc43684c54f96adb4bbacd2540735dbbe7cf4e9d2ccb91579e64053de78190f6136e0b6c02fbee", 0x36) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x800400, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000200)) copy_file_range(r1, &(0x7f0000000240)=0x9, r3, &(0x7f0000000280)=0x4, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe60, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = signalfd4(r1, &(0x7f0000000440)={[0x400]}, 0x8, 0x0) process_mrelease(r5, 0x0) r6 = accept(r0, &(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000580)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000005c0)) socketpair(0x21, 0x3, 0x4, &(0x7f0000000600)) 18:54:50 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x6}, 0x20, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x178, 0x0, &(0x7f0000000200)={0x2, 0x77, {0x0, 0xc, 0x2d, "a0423f4f2648b4980ef6023d2899c507d25e1ab66daf757b57de9c71d4f67e8c4d7f9e6ee652f749cfa633c58d", 0x3d, "94f948e202a98b9bd41717da8573b428d6dd9d7297573f33b5652c1f49634f262d0533f82f1c29ade30f1d56aad16ca150ac2bc9b65707fd9203394f0f"}, 0x63, "3e26b04fd21a13e0a5560fc59cbe685b4e2cb1b31037b2a2e941f654b6355fbde3a38979e76fb481e53df9d5dc101a4b02b8c355a1418548b974b4b2bbb2d26bcfea89cd6054c52fc7b71ac94de849ee6f14d7cca4afe99e608ce59703372fc471f785"}, 0xe6}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000003c0)={0x6, 0x7fffffff, 0x1}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4890) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x20, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0x6, 0xfffffffd}}) recvfrom(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x2080, &(0x7f0000001680)=@xdp={0x2c, 0x1b, r1}, 0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001700)=[0xffffffffffffffff], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001840)={0x9, 0x3, 0xb7, &(0x7f0000001780)="acc4082808b47a34bb438e294224f6eb850a60fc212a72c80b4dcf1d6dd3b8c933096880452228a5ec31c8703501fd62b8afba27fbcbf3630c113f10f8245b291fd7b1a1dcdba4bfccdd42c5861be228390c9b60950454a6c218e8740ce96d4f31fab922f987019a9761739d508c52f3981bd6255432d5c05e474686d9586382bf690f0683e8a73fa3e65cab259aa635999f8c0dc5c50a4058219e55dc4fae3b527c690b7d6c3db0e8b73a0e87a060803f216f155a7612"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r4, &(0x7f0000001880)=""/79, 0x4f, 0x10100, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000001900)=0x58) r5 = creat(&(0x7f0000001940)='./file0\x00', 0xaa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2e997daa1128"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x1}}]}, 0x58}}, 0x2008c104) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000001c80)={&(0x7f0000001b80), 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\'\x7f+#\xe4/\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6gre0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) 18:54:50 executing program 6: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7fff, 0x400a00) r1 = socket(0x3, 0x80000, 0x3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x5, 0x7fffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x78, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x794}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5c05a63245d3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x20}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket(0xf, 0x4, 0x1ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x3, 0x75) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) pipe2(&(0x7f00000004c0), 0x5000) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000500)={0x7, 0x5e88, 0x796, 0x4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x810, r4, 0x0) 18:54:50 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) inotify_init() ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x20e000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000800)) 18:54:50 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xede00}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 18:54:50 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) inotify_init() ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x20e000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000800)) 18:54:50 executing program 7: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "b5a92b5e9bbfec22ce9de8e8bc343d5b08c668c769d85c5f90c66bd0ed38d0fbfe595684c6544c5677f7cefe0397494ab71ec017ee9f8bf76414ddc05ac1f626", "fcbe39dadb849f7ddaa150d789d1d4e0f5be1231a918c1453e23919be10860b9dfb2d6e69b6c8f65dbe48e896c237b20e5782183f3842e882a1555ef84458332", "edba52a8bef79a14ea6affb7e0d1b80b716861e378b3aa293b08596844e40b65", [0x5, 0x1ff]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff8, 0xff, 0x5, 0x100}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000480)) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000500)={0x7, 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000540)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) read$char_usb(r3, &(0x7f00000005c0)=""/57, 0x39) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pidfd_getfd(r2, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 18:55:05 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x6}, 0x20, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x178, 0x0, &(0x7f0000000200)={0x2, 0x77, {0x0, 0xc, 0x2d, "a0423f4f2648b4980ef6023d2899c507d25e1ab66daf757b57de9c71d4f67e8c4d7f9e6ee652f749cfa633c58d", 0x3d, "94f948e202a98b9bd41717da8573b428d6dd9d7297573f33b5652c1f49634f262d0533f82f1c29ade30f1d56aad16ca150ac2bc9b65707fd9203394f0f"}, 0x63, "3e26b04fd21a13e0a5560fc59cbe685b4e2cb1b31037b2a2e941f654b6355fbde3a38979e76fb481e53df9d5dc101a4b02b8c355a1418548b974b4b2bbb2d26bcfea89cd6054c52fc7b71ac94de849ee6f14d7cca4afe99e608ce59703372fc471f785"}, 0xe6}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000003c0)={0x6, 0x7fffffff, 0x1}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4890) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x20, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0x6, 0xfffffffd}}) recvfrom(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x2080, &(0x7f0000001680)=@xdp={0x2c, 0x1b, r1}, 0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001700)=[0xffffffffffffffff], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001840)={0x9, 0x3, 0xb7, &(0x7f0000001780)="acc4082808b47a34bb438e294224f6eb850a60fc212a72c80b4dcf1d6dd3b8c933096880452228a5ec31c8703501fd62b8afba27fbcbf3630c113f10f8245b291fd7b1a1dcdba4bfccdd42c5861be228390c9b60950454a6c218e8740ce96d4f31fab922f987019a9761739d508c52f3981bd6255432d5c05e474686d9586382bf690f0683e8a73fa3e65cab259aa635999f8c0dc5c50a4058219e55dc4fae3b527c690b7d6c3db0e8b73a0e87a060803f216f155a7612"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r4, &(0x7f0000001880)=""/79, 0x4f, 0x10100, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000001900)=0x58) r5 = creat(&(0x7f0000001940)='./file0\x00', 0xaa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2e997daa1128"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x1}}]}, 0x58}}, 0x2008c104) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80), 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\'\x7f+#\xe4/\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6gre0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) 18:55:05 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:55:05 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1074, r0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x480000, 0x8}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x1032, 0x2a, [@measure_req={0x26, 0x1003, {0x8, 0xa0, 0x0, "f0a7b72819e61c32477decc021564da510f68a034e84753416e54f116b5e45627714a25257ff4dfeb3810d1f3977af43f65f11f0671c1b8e39a4bef5d398b129ddcf699e89369da8554ab68cb991f7feedc02644f9a3e3ffb91e1dfc0c17d80398faa4c92e7854bbc4f0d0b95899c465b6953ea9498e38f2c65d3230cc55785f800b5ac4e269eaf5086bce1abd5aaa4f892545cb17456aa4e9c56a9149182748220ea09982ed57a4080e80802ba7b6604edde75b81bd94733816aff9065b4bb1d18a8cf66906f7888c8a19cd4ce9e5df1e54d6d1d1d2a17a26ddc6cb2aa4418430adfc6ccf99cb7b87e11ea1a5455455b5085f74bf49afdcd3e4baceeae0660bf753c2df93cdbf4699ee81db50b145583a8c102a5955fefb04d4cac1fb4932a49ac8d4e70b11929a7a5894f382c15782f41c90c4bf30c8a9df1273dbdf5246a6ddd973a4f9cb259a46245723a49e7bab9772e0e3f18a7e3e1e53fba0bc15ef0f714a570c06800a1e900d662eeb13251cce393fde7290ad3d08b3c074dec1704b90c8cfc8b186f5f957ba87fb755527b754a3e69623f18f8814bc81a75d4782172431d124e10bb86a9a475a33062ba711a8ae425d6e43cb8968704d854bd51fb2a63aee28e6843fd0f6a29826fea917ddd5ae0670125e95118ad78ef0748f0c86281112d6f2c4f9f7cb00e7c45bb76cdd703ab7f8447b67419ced183532b4ecf438fac658811701c833486a67bea6bdfb5d0cdedd192e408c205c93791a51be798504b96ddb1d509019359b59808ff6532f74ff41647800b95ad11d59e51384dfd4633121c9fe3189833c5c4b272df4696f8d5deb59427acd2b0ee1b3af46626b534f9afaca0ebcc6bc0b141df60aba0006fc4ea6917bb42103e01fd28d30769c30718b96ddbf8e60bf16d3f9ec8d0567aaa1b936e4cc142e9e16af5a94267e0587be416fccc19ae4d3cb483b39544570d84b76cbc8c40b7289b744674bde2e3f0c4d7870d5c2fe8f7a3829a61f103bd547e4e337b61f76052d28d3657b770998e93072e9dafd549e7c58f14b4a1ede96ac6edd2a1b5c68e2bc369131dc82ff8feb11d439e59b20704f1c6e44dde9143ad21f554715168a3adee24270c209578f86ea0348e310b6cc163a29df63ff31dcce5cd68a407d98776ddf00c5fec21326002ce1cfda30f3879b7972c39e39683ae833d7f06a78db056e3e0b462c8e39ebbd316df1b9198813bbade93264f59f9df8637af450c809c09a87cd0f6729af55c8dbe359b723162f7997d4a193e4b26ab9c1364bc6a6696e7232f1b34c3233e2401e46b3020a675b53f53a53f90fd2167768a133f94b00b838cf6b05502964b7bb30587c4bd2e29c80f0e62f7a70fbfd794b2beb00830007433aad0867905ccb9e17ac94beac18cebfb42349baa32e5d3bcfc696db6985695afe004e92cd3603c87e93be36d4c6022a166a975c8493a83e2e6e427db02488e09da2b919fc9cba74c1483ccc54e681dd76094019dae72d3d8d5a15a7782140a3a42a9e6e708659eee032c84e3974637755a35b7d6aa08461b824254a42718f75b4afa4778b2ea134ae8c59076c400e4dd8a5c9edea8997f89c0e861ff9a5a86f4e260483236f24a2b1d05511a15823f635e14e9e5d7ddfc9c81c48d2b7dd710096f1b9b518c486ceeae2ff4af830ecabce7e18e0409ca2709e09a0f57cd7936934a8ea9a5c7a256512626b41b611bcc34ced620f0b296ab409d6e9f800f4e67c9fc27360f00d2b6e05e209ab8fe3bf1d163399956cf7076d584e9161d2dbb6e46f0eb76f38a9b51b7d3e9358754e5834a33939a3d83d0e4f3e495b82414650ba6e7eb5768bc39ff6b79f44057b409ec10a43c1ca54d2e39e57f9ff5c435a13a9b0db85b82372d15db0763412fb179d9995ef74bd4d0633c8cb0a4d24b71c319a098680de7dfa8c9535f20ac06bb2c1ace3f88c8e8bc500c189f6a26f92a61ef18f4867d344790f81fbe4f196d5c6bce2992d8a04b4003d80783b11d2a918c602f7fbdf10b2847d0baa97f778c63f79ea725990f31e52acbaa5da4d7725fe9e2ab615aaa61a2c59d3dd8fc2b97d90924053660ddf39fa7288df06b2334b77ac43915c548bbe60f24597638d0d0e306d7e51415658125bc6eda450a9af14fe56f20ec97fccc94f3825b30b509bc82e2eac1fc208c6424f201ebdb138de582d86289fa88a620790f83ea8ba952e65ddc640a19ef82671883deb21a29fc7058283d96e12ab51262070fb4becb7ab74121ac8cdfa9628e680aea02346519e9865719c99e48241f351ceb15c894021ebba474804a1e304722638ba04776fbbe4f3935f4e9d11882a463ac209c6c3f756138395fad06242bb71b69cdc118b6ab7166a600d389cfa8a0eee1db2408a4a470d901ba653784ab137e53630cfe239e955b42d9a17d01b21bf875b47ffe2b9b8334c77d080029530b124f5e163afbb5f2600e16757ea314e5d9c24593517538c6f6ee124dffbb1089e2aba62e03544eb7f30046f0af76e1c9929b0cfa39aa1e001a9257027aac0686cbfd62e5301cc725b976355095c644167b5328029f3eef014f1d31501b8968b7144011491b395234b5a650315fee8349df642cd2a4e2faac4a09a0c08a818492d8ec949dc4d89872bf789d68469cfd19c9c2cdfb79ec6ecf19914d6d2875a7f01a10dfab70b82683b75b6c6ba176fc8121cef59487cebfb83b59da30f67665b0ee592bb0822065169bd34717f8985b48ccf67121124868155afff5081f5e900bdd7b9280065426778a799a22732f6443dcd1a293a8f4decab01982526a65ce022811151e96f745fd724dbbf3853470e3f3320d9d3f984811b09990ff25b9f318bde155f6b08c16c527165dd04f0ae3586a9d4525958fb83656aa35efffe15c1c954cf8b1c1ac09f7f2b5f3b1bcec4ecc13f9c66f10d7f5c059cebc962e8965eb4f09539335d3f669c588230698d77f77eb7dc64a29fc1c690c9aba7596d1144fa8a9b9377da622d01b7ae648cd47267815241d5997816b8b6d8164cdf4bab1ef2ba5add1895f6f4731939bd60358eeb773f49c88fe6705f2e7c1754bee189f705fd3e92f90f826d7f5c23b04e618d87cb09307e72b497186c328a2e07a87006622df2ad63afbcebf3f148e4d2c3e83acf6e3342682250fdaec1ac3a862ba41c7cf7d19198f57441800a503537afd0a31be58ad714e0c588e26c1fac227a0fb8c5dc0f31653db19aec7c16d2abece6ad20a99155eab550cffc6e18b9554ea1e51abddaa335934251389204ba2f1a20d548249bce6dd5d3f3ebf6fce03db0fe7611b7210015ac6ca55ce60442b49437f4fbd84aca5087e9aed47e7d612b1a9615213819bc9ae68a41f69539b69ec789ab6dab5a3e2e19bb63d62728d60e4c3cde27588195d666ea7250192d1fa9438d13d3253b83d107860be5472e3b75f7c0002f7954da7b2509bcb9947f2c53a71527ee48cb69e028ba470e19692c5967aabb1595530dccfc3cc30ff6090f97d77a0da38e0daa4c2a9cad8507c71b6c2d42eadbdc69eb4eea8a8c7264876752f5f4b7396c51190e83f0f8f61ead5f9c9e0adf88aea093f91b322f4516de9e36a72e9b882cef2155ecbf0749ebcc98c794eca485d9d192ba2c1dc87695103fec4c92deb234e61433837fed53d0b82b608cfb43565976853ee135aa18c7b6343384be3ea93191f5fa9a2e88aff6f5f69e53c5c3d21038b5d312f33c203a5b8151d9501cbff58b7315966aefac9af438b4b38953ff3c367659eeb83a8f366243a4d339fe1ec3bf72a256c2f00f3be390083fa14103685e6fe0106d2263687797c9ecee3fb80cdef67a3ceb9a85653bd89964eb0fb189db42444256bbfebd7df600cbcf2c0d576aec85e2b4f29b2543e85a43f56dc7fd6c253f431e10c6bfc42850fb18ba2a24a4f9d1bf4ab80889b94648dbedf9b477fe4a2990f170541acefcc12a25d6e9b92c124891339f61d045e547a6ad91c87bda53d112d8b2f992d09e5bb0cfbc12b81c3ab40b29cb8923d0976b91680fd684c67e09a7c5fff7a305f0da312f1728e1318b66046a17173774d8af433d841ab963f633ab341b04c5c8a0e28401e56c6466226b23e1f0aa38f3b1cff3bf6ad99999c10657e7a282b1552353d589d1779b0aa34c2ce2a4318c169ff4a2494ab540c3d41f0efc1fd7137d97243f339c1a4e33aff7cabe41a1e1caa2b25f010f78d2c878dd047ee230be1bd9a0230f59ba0bc8095bffa62ce226938c433da9f6858fec41527055040cc845ec2be856c99203813d2cc64f0457f4fa3a1f11fb48347eff1f1fdb7b044c88b50cee5d02dc4280e0de73e3d8ff8abe4728646ce53b6b3cc7f90f855443956adfddbdc1b35020d525277d6dbf5db9c0ae3ccc9e9aaa987ca36b253f979c30118a228c5f48a27b279ed402fa9fbb1da503a28ee510b8c5c8752ba69833b02ef5d6aa80dddec5b009dbb9e2f2b37e07d05d9035cf2886bf3ef6214f88ec5886bb78e0fd62d1729fc0adcc4486443b733bdcb6af4f18df2bed21498581d6fa6ce8c04a24b3e0f37c4735bd6e4e96ab16cc0a1beae90306ad520407c2ea07de7bfc621c7c027cc1050345dd0f48f42b7c24f7d08d2a760f95f08221f7143a3663446a37607c3bc8ba44018e971561643fef584d2bcd295a32f172624d9ae8b36cce8bc3260d50b4541275795c0a75016988604f71da6db4651dc22421c99ed6bc08b447f33398f392d5294ddcc478ef69d8533a20b22e7b4e8cfb656a9b7d851c7ee9fe37e458c4cf3c75742a6ff7a026ea57d3fe7959fc197a72c765f46bf4d6eca1c4ccb4bbfa72f2dbbebcda37958073db1e512e6fa7408b5caccbbaa4ac11d76fb940048b3b3edb78ab2c7954767b5652e3716671a8f6653fb77409863cdf782cb7e7df6640c15c78874def99ed32e1c16f8d6237fbaddf3e6869a3699b70de6deda0ebcf706a13756f2ba3dbb1176fae310f3b6d555a9ec44b35f6ea77dcd2474ba516fcedaba094ce4ed9b96cc279e45fd9aac7f1087d19219d93353878bd867c8c5f6a43a966a1692c0cdb8a9436703d23281dc8861d8b527edbeda5c085610172803328c02d261e24c7f681fd4f94f8859d2a1e827e177cbe31c884b8aec47e22777cc17ecfca272bbaa0d57a17b80910332c8c43cf5c9450a5744428dbf6453001559b7dfa58e6aa3df4f5b31d150531b2f0263639ebea43101dcd00605198df047f8f7d66b2da198b185e6dbf143b57daaf24b7e2469eeac41585870679de43b908edd0943a41b214c5a4e1e21abb9cf8972b0936871f2080a0c8e3098c414d6c28e8058899205a1c22706bce6ea3bdc8718eae6134c5f817fc616d8f4fab93e0ad0c16086a09d179325db3b988f79abef627dbcce9195024d4265482c30912ba9d43393d3b886f343e4b0582d9706690661796ad6d635434ea5786f652ed409fe922cccbfa9a9a73066ac9b756ef2be990c819424f1e335efd59c66887f475c166e462840dae921f95087310fbf04b4bd2aeb3f13218c1146d0da306dbdf1661e8819fb849b89fc5a7ddcc892b671f9db5bbb93f1f7ab04914b1fd68650839c9a583fc5f87c7afbb0087a5539a714a0e7fcd1c78cb1d76971035dd56be4c20af9e7f602d57710ee2643c6fded977589db62168425ca0351d099c9083a7e77057f2091de4f543f95716213cbe27dd70bd136974613464dbffc93348db87aea84804b06a270c613e4c8d78b7bf73c1110589a37255bfde1357b611d6df7170d600feb88354"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xf4}}, @mic={0x8c, 0x18, {0x7f8, "fc0627d73b69", @long="edcabfd3aac7609e3cb26e617ca5aa41"}}, @chsw_timing={0x68, 0x4, {0x3, 0xfd6b}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x1074}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x2a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x40) socketpair(0x1e, 0xa, 0xb79b, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1fcbfa11, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x809}, 0x48404) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, r0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="49ece44f6ccb"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8804) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x20000, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xc0, r0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x5, 0x6}, {0x2, 0x4}, {0xf7, 0x1}, {0xe4, 0x1}, {0x2, 0x7}, {0x5}, {0x1f, 0x4}, {0x96, 0x6}, {0x0, 0x7}, {0x8, 0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x62, 0x3}], "cbc272cca2d23add"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x74, 0x4}], "c132f4cd40fe2558"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xff, 0x2}, {0x5}, {0x2, 0x5}, {0x2, 0x2}, {0xc3, 0x6}, {0x40, 0x7}, {0x1b}, {0x2, 0x6}, {0xf7, 0x5}, {0x7}, {0x3f}, {0x81, 0x6}, {0x80, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x40, 0x4}, {0x43}, {0x40, 0x6}, {0x1, 0x4}], "5546b285ec2c00dd"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x4}, {0xe0, 0x4}, {0x67, 0x5}, {0x6, 0x1}, {0x8, 0x3}, {0xd, 0x6}, {0xb9, 0x3}], "ab12d5200523ad52"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "7495ef304507f6f0"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xff}, {0x5, 0x7}, {0x8, 0x3}], "fcb7d8f791667e7e"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x4000880) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x58, r0, 0x504, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x84) getpeername(r8, &(0x7f0000001b40)=@nl, &(0x7f0000001bc0)=0x80) recvfrom(r4, &(0x7f0000001c00)=""/151, 0x97, 0x40, &(0x7f0000001cc0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x80) 18:55:05 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x1000, 0x0, 0x9, 0x80}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x206000, 0x0) write$char_usb(r1, &(0x7f0000000100)="44d1d33b4faee3ef4fada1782f0f4cdc43684c54f96adb4bbacd2540735dbbe7cf4e9d2ccb91579e64053de78190f6136e0b6c02fbee", 0x36) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x800400, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000200)) copy_file_range(r1, &(0x7f0000000240)=0x9, r3, &(0x7f0000000280)=0x4, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe60, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = signalfd4(r1, &(0x7f0000000440)={[0x400]}, 0x8, 0x0) process_mrelease(r5, 0x0) r6 = accept(r0, &(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000580)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000005c0)) socketpair(0x21, 0x3, 0x4, &(0x7f0000000600)) 18:55:05 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xede00}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 18:55:05 executing program 6: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7fff, 0x400a00) r1 = socket(0x3, 0x80000, 0x3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x5, 0x7fffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x78, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x794}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5c05a63245d3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x20}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket(0xf, 0x4, 0x1ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x3, 0x75) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) pipe2(&(0x7f00000004c0), 0x5000) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000500)={0x7, 0x5e88, 0x796, 0x4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x810, r4, 0x0) 18:55:05 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) inotify_init() ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x20e000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000800)) 18:55:05 executing program 7: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "b5a92b5e9bbfec22ce9de8e8bc343d5b08c668c769d85c5f90c66bd0ed38d0fbfe595684c6544c5677f7cefe0397494ab71ec017ee9f8bf76414ddc05ac1f626", "fcbe39dadb849f7ddaa150d789d1d4e0f5be1231a918c1453e23919be10860b9dfb2d6e69b6c8f65dbe48e896c237b20e5782183f3842e882a1555ef84458332", "edba52a8bef79a14ea6affb7e0d1b80b716861e378b3aa293b08596844e40b65", [0x5, 0x1ff]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff8, 0xff, 0x5, 0x100}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000480)) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000500)={0x7, 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000540)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) read$char_usb(r3, &(0x7f00000005c0)=""/57, 0x39) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pidfd_getfd(r2, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 18:55:05 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) inotify_init() ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x20e000, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0) 18:55:06 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) 18:55:06 executing program 7: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "b5a92b5e9bbfec22ce9de8e8bc343d5b08c668c769d85c5f90c66bd0ed38d0fbfe595684c6544c5677f7cefe0397494ab71ec017ee9f8bf76414ddc05ac1f626", "fcbe39dadb849f7ddaa150d789d1d4e0f5be1231a918c1453e23919be10860b9dfb2d6e69b6c8f65dbe48e896c237b20e5782183f3842e882a1555ef84458332", "edba52a8bef79a14ea6affb7e0d1b80b716861e378b3aa293b08596844e40b65", [0x5, 0x1ff]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff8, 0xff, 0x5, 0x100}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000480)) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000500)={0x7, 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000540)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) read$char_usb(r3, &(0x7f00000005c0)=""/57, 0x39) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pidfd_getfd(r2, r4, 0x0) 18:55:06 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x1000, 0x0, 0x9, 0x80}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x206000, 0x0) write$char_usb(r1, &(0x7f0000000100)="44d1d33b4faee3ef4fada1782f0f4cdc43684c54f96adb4bbacd2540735dbbe7cf4e9d2ccb91579e64053de78190f6136e0b6c02fbee", 0x36) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x800400, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000200)) copy_file_range(r1, &(0x7f0000000240)=0x9, r3, &(0x7f0000000280)=0x4, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe60, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = signalfd4(r1, &(0x7f0000000440)={[0x400]}, 0x8, 0x0) process_mrelease(r5, 0x0) r6 = accept(r0, &(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000580)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000005c0)) socketpair(0x21, 0x3, 0x4, &(0x7f0000000600)) 18:55:06 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) 18:55:06 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:55:06 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) inotify_init() ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x20e000, 0x0) 18:55:06 executing program 7: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "b5a92b5e9bbfec22ce9de8e8bc343d5b08c668c769d85c5f90c66bd0ed38d0fbfe595684c6544c5677f7cefe0397494ab71ec017ee9f8bf76414ddc05ac1f626", "fcbe39dadb849f7ddaa150d789d1d4e0f5be1231a918c1453e23919be10860b9dfb2d6e69b6c8f65dbe48e896c237b20e5782183f3842e882a1555ef84458332", "edba52a8bef79a14ea6affb7e0d1b80b716861e378b3aa293b08596844e40b65", [0x5, 0x1ff]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff8, 0xff, 0x5, 0x100}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000480)) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000500)={0x7, 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000540)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) read$char_usb(r3, &(0x7f00000005c0)=""/57, 0x39) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) 18:55:20 executing program 6: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7fff, 0x400a00) r1 = socket(0x3, 0x80000, 0x3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x5, 0x7fffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x78, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x794}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5c05a63245d3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x20}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket(0xf, 0x4, 0x1ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x3, 0x75) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) pipe2(&(0x7f00000004c0), 0x5000) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000500)={0x7, 0x5e88, 0x796, 0x4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x810, r4, 0x0) 18:55:20 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) inotify_init() ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 18:55:20 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x6}, 0x20, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x178, 0x0, &(0x7f0000000200)={0x2, 0x77, {0x0, 0xc, 0x2d, "a0423f4f2648b4980ef6023d2899c507d25e1ab66daf757b57de9c71d4f67e8c4d7f9e6ee652f749cfa633c58d", 0x3d, "94f948e202a98b9bd41717da8573b428d6dd9d7297573f33b5652c1f49634f262d0533f82f1c29ade30f1d56aad16ca150ac2bc9b65707fd9203394f0f"}, 0x63, "3e26b04fd21a13e0a5560fc59cbe685b4e2cb1b31037b2a2e941f654b6355fbde3a38979e76fb481e53df9d5dc101a4b02b8c355a1418548b974b4b2bbb2d26bcfea89cd6054c52fc7b71ac94de849ee6f14d7cca4afe99e608ce59703372fc471f785"}, 0xe6}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000003c0)={0x6, 0x7fffffff, 0x1}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4890) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x20, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0x6, 0xfffffffd}}) recvfrom(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x2080, &(0x7f0000001680)=@xdp={0x2c, 0x1b, r1}, 0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001700)=[0xffffffffffffffff], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001840)={0x9, 0x3, 0xb7, &(0x7f0000001780)="acc4082808b47a34bb438e294224f6eb850a60fc212a72c80b4dcf1d6dd3b8c933096880452228a5ec31c8703501fd62b8afba27fbcbf3630c113f10f8245b291fd7b1a1dcdba4bfccdd42c5861be228390c9b60950454a6c218e8740ce96d4f31fab922f987019a9761739d508c52f3981bd6255432d5c05e474686d9586382bf690f0683e8a73fa3e65cab259aa635999f8c0dc5c50a4058219e55dc4fae3b527c690b7d6c3db0e8b73a0e87a060803f216f155a7612"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r4, &(0x7f0000001880)=""/79, 0x4f, 0x10100, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000001900)=0x58) r5 = creat(&(0x7f0000001940)='./file0\x00', 0xaa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2e997daa1128"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x1}}]}, 0x58}}, 0x2008c104) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80), 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\'\x7f+#\xe4/\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6gre0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) 18:55:20 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[r6, r7, r5, r5, r5, r5], 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:55:20 executing program 7: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "b5a92b5e9bbfec22ce9de8e8bc343d5b08c668c769d85c5f90c66bd0ed38d0fbfe595684c6544c5677f7cefe0397494ab71ec017ee9f8bf76414ddc05ac1f626", "fcbe39dadb849f7ddaa150d789d1d4e0f5be1231a918c1453e23919be10860b9dfb2d6e69b6c8f65dbe48e896c237b20e5782183f3842e882a1555ef84458332", "edba52a8bef79a14ea6affb7e0d1b80b716861e378b3aa293b08596844e40b65", [0x5, 0x1ff]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff8, 0xff, 0x5, 0x100}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000480)) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000500)={0x7, 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000540)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) read$char_usb(r3, &(0x7f00000005c0)=""/57, 0x39) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) 18:55:20 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x1000, 0x0, 0x9, 0x80}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x206000, 0x0) write$char_usb(r1, &(0x7f0000000100)="44d1d33b4faee3ef4fada1782f0f4cdc43684c54f96adb4bbacd2540735dbbe7cf4e9d2ccb91579e64053de78190f6136e0b6c02fbee", 0x36) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x800400, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000200)) copy_file_range(r1, &(0x7f0000000240)=0x9, r3, &(0x7f0000000280)=0x4, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe60, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = signalfd4(r1, &(0x7f0000000440)={[0x400]}, 0x8, 0x0) process_mrelease(r5, 0x0) r6 = accept(r0, &(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000580)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000005c0)) 18:55:20 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1074, r0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x480000, 0x8}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x1032, 0x2a, [@measure_req={0x26, 0x1003, {0x8, 0xa0, 0x0, "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"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xf4}}, @mic={0x8c, 0x18, {0x7f8, "fc0627d73b69", @long="edcabfd3aac7609e3cb26e617ca5aa41"}}, @chsw_timing={0x68, 0x4, {0x3, 0xfd6b}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x1074}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x2a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x40) socketpair(0x1e, 0xa, 0xb79b, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1fcbfa11, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x809}, 0x48404) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, r0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="49ece44f6ccb"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8804) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x20000, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xc0, r0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x5, 0x6}, {0x2, 0x4}, {0xf7, 0x1}, {0xe4, 0x1}, {0x2, 0x7}, {0x5}, {0x1f, 0x4}, {0x96, 0x6}, {0x0, 0x7}, {0x8, 0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x62, 0x3}], "cbc272cca2d23add"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x74, 0x4}], "c132f4cd40fe2558"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xff, 0x2}, {0x5}, {0x2, 0x5}, {0x2, 0x2}, {0xc3, 0x6}, {0x40, 0x7}, {0x1b}, {0x2, 0x6}, {0xf7, 0x5}, {0x7}, {0x3f}, {0x81, 0x6}, {0x80, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x40, 0x4}, {0x43}, {0x40, 0x6}, {0x1, 0x4}], "5546b285ec2c00dd"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x4}, {0xe0, 0x4}, {0x67, 0x5}, {0x6, 0x1}, {0x8, 0x3}, {0xd, 0x6}, {0xb9, 0x3}], "ab12d5200523ad52"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "7495ef304507f6f0"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xff}, {0x5, 0x7}, {0x8, 0x3}], "fcb7d8f791667e7e"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x4000880) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x58, r0, 0x504, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x84) getpeername(r8, &(0x7f0000001b40)=@nl, &(0x7f0000001bc0)=0x80) 18:55:20 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) 18:55:20 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) inotify_init() ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000740)) 18:55:20 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xede00}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) [ 179.662921] Bluetooth: hci2: command 0x0406 tx timeout [ 179.663913] Bluetooth: hci4: command 0x0406 tx timeout [ 179.664779] Bluetooth: hci7: command 0x0406 tx timeout [ 179.665687] Bluetooth: hci0: command 0x0406 tx timeout [ 179.666635] Bluetooth: hci6: command 0x0406 tx timeout [ 179.667897] Bluetooth: hci1: command 0x0406 tx timeout [ 180.174767] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 180.175384] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.175809] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.176354] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 180.176997] Call Trace: [ 180.177189] [ 180.177372] __schedule+0x893/0x2470 [ 180.177683] ? io_schedule_timeout+0x150/0x150 [ 180.178216] ? do_raw_spin_lock+0x121/0x260 [ 180.178567] ? rwlock_bug.part.0+0x90/0x90 [ 180.179335] schedule+0xda/0x1b0 [ 180.179613] rescuer_thread+0x851/0xdb0 [ 180.180313] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.180712] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.181106] ? lockdep_hardirqs_on+0x79/0x100 [ 180.181460] ? worker_thread+0x1260/0x1260 [ 180.181822] kthread+0x2ed/0x3a0 [ 180.182088] ? kthread_complete_and_exit+0x40/0x40 [ 180.182479] ret_from_fork+0x22/0x30 [ 180.182814] [ 180.183001] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 180.183490] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.183909] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.184486] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 180.185134] Call Trace: [ 180.185336] [ 180.185515] __schedule+0x893/0x2470 [ 180.185841] ? io_schedule_timeout+0x150/0x150 [ 180.186194] ? do_raw_spin_lock+0x121/0x260 [ 180.186534] ? rwlock_bug.part.0+0x90/0x90 [ 180.186872] schedule+0xda/0x1b0 [ 180.187131] rescuer_thread+0x851/0xdb0 [ 180.187438] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.187827] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.188196] ? lockdep_hardirqs_on+0x79/0x100 [ 180.188531] ? worker_thread+0x1260/0x1260 [ 180.188875] kthread+0x2ed/0x3a0 [ 180.189133] ? kthread_complete_and_exit+0x40/0x40 [ 180.189501] ret_from_fork+0x22/0x30 [ 180.189812] [ 180.189992] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 180.190476] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.190874] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.191417] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 180.192038] Call Trace: [ 180.192229] [ 180.192405] __schedule+0x893/0x2470 [ 180.192690] ? io_schedule_timeout+0x150/0x150 [ 180.193050] ? do_raw_spin_lock+0x121/0x260 [ 180.193371] ? rwlock_bug.part.0+0x90/0x90 [ 180.193715] schedule+0xda/0x1b0 [ 180.193976] rescuer_thread+0x851/0xdb0 [ 180.194273] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.194655] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.195042] ? lockdep_hardirqs_on+0x79/0x100 [ 180.195378] ? worker_thread+0x1260/0x1260 [ 180.195691] kthread+0x2ed/0x3a0 [ 180.195964] ? kthread_complete_and_exit+0x40/0x40 [ 180.196325] ret_from_fork+0x22/0x30 [ 180.196617] [ 180.196814] INFO: task netns:6 blocked for more than 143 seconds. [ 180.197250] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.197636] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.198194] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 180.198813] Call Trace: [ 180.199001] [ 180.199178] __schedule+0x893/0x2470 [ 180.199529] ? io_schedule_timeout+0x150/0x150 [ 180.199916] ? do_raw_spin_lock+0x121/0x260 [ 180.200239] ? rwlock_bug.part.0+0x90/0x90 [ 180.200562] schedule+0xda/0x1b0 [ 180.200842] rescuer_thread+0x851/0xdb0 [ 180.201142] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.201509] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.201896] ? lockdep_hardirqs_on+0x79/0x100 [ 180.202232] ? worker_thread+0x1260/0x1260 [ 180.202567] kthread+0x2ed/0x3a0 [ 180.202845] ? kthread_complete_and_exit+0x40/0x40 [ 180.203211] ret_from_fork+0x22/0x30 [ 180.203506] [ 180.203681] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 180.204167] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.204551] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.205110] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 180.205725] Workqueue: 0x0 (rcu_gp) [ 180.206007] Call Trace: [ 180.206198] [ 180.206379] __schedule+0x893/0x2470 [ 180.206663] ? io_schedule_timeout+0x150/0x150 [ 180.207033] schedule+0xda/0x1b0 [ 180.207294] worker_thread+0x15f/0x1260 [ 180.207604] ? process_one_work+0x16a0/0x16a0 [ 180.207965] kthread+0x2ed/0x3a0 [ 180.208222] ? kthread_complete_and_exit+0x40/0x40 [ 180.208586] ret_from_fork+0x22/0x30 [ 180.208895] [ 180.209069] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 180.209544] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.209943] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.210500] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 180.211122] Workqueue: 0x0 (events_highpri) [ 180.211448] Call Trace: [ 180.211638] [ 180.211830] __schedule+0x893/0x2470 [ 180.212117] ? io_schedule_timeout+0x150/0x150 [ 180.212465] schedule+0xda/0x1b0 [ 180.212744] worker_thread+0x15f/0x1260 [ 180.213053] ? process_one_work+0x16a0/0x16a0 [ 180.213393] kthread+0x2ed/0x3a0 [ 180.213648] ? kthread_complete_and_exit+0x40/0x40 [ 180.214030] ret_from_fork+0x22/0x30 [ 180.214321] [ 180.214507] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 180.215008] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.215392] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.215952] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 180.216548] Call Trace: [ 180.216756] [ 180.216933] __schedule+0x893/0x2470 [ 180.217221] ? io_schedule_timeout+0x150/0x150 [ 180.217557] ? do_raw_spin_lock+0x121/0x260 [ 180.217902] ? rwlock_bug.part.0+0x90/0x90 [ 180.218223] schedule+0xda/0x1b0 [ 180.218489] rescuer_thread+0x851/0xdb0 [ 180.218809] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.219178] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.219550] ? lockdep_hardirqs_on+0x79/0x100 [ 180.219904] ? worker_thread+0x1260/0x1260 [ 180.220224] kthread+0x2ed/0x3a0 [ 180.220482] ? kthread_complete_and_exit+0x40/0x40 [ 180.220862] ret_from_fork+0x22/0x30 [ 180.221154] [ 180.221329] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 180.221852] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.222237] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.222829] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 180.223426] Call Trace: [ 180.223618] [ 180.223815] __schedule+0x893/0x2470 [ 180.224114] ? io_schedule_timeout+0x150/0x150 [ 180.224456] ? mark_held_locks+0x9e/0xe0 [ 180.224788] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.225165] schedule+0xda/0x1b0 [ 180.225425] rcu_tasks_one_gp+0x3db/0xc10 [ 180.225774] rcu_tasks_kthread+0x80/0xa0 [ 180.226077] ? rcu_tasks_postscan+0x10/0x10 [ 180.226403] kthread+0x2ed/0x3a0 [ 180.226659] ? kthread_complete_and_exit+0x40/0x40 [ 180.227048] ret_from_fork+0x22/0x30 [ 180.227340] [ 180.227519] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 180.228016] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.228398] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.228963] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 180.229561] Workqueue: 0x0 (inet_frag_wq) [ 180.229900] Call Trace: [ 180.230093] [ 180.230268] __schedule+0x893/0x2470 [ 180.230571] ? io_schedule_timeout+0x150/0x150 [ 180.230960] schedule+0xda/0x1b0 [ 180.231231] worker_thread+0x15f/0x1260 [ 180.231550] ? process_one_work+0x16a0/0x16a0 [ 180.231926] kthread+0x2ed/0x3a0 [ 180.232196] ? kthread_complete_and_exit+0x40/0x40 [ 180.232574] ret_from_fork+0x22/0x30 [ 180.232901] [ 180.233083] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 180.233585] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.234011] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.234592] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 180.235244] Workqueue: 0x0 (kblockd) [ 180.235540] Call Trace: [ 180.235771] [ 180.235952] __schedule+0x893/0x2470 [ 180.236251] ? io_schedule_timeout+0x150/0x150 [ 180.236613] schedule+0xda/0x1b0 [ 180.236908] worker_thread+0x15f/0x1260 [ 180.237231] ? process_one_work+0x16a0/0x16a0 [ 180.237594] kthread+0x2ed/0x3a0 [ 180.237884] ? kthread_complete_and_exit+0x40/0x40 [ 180.238265] ret_from_fork+0x22/0x30 [ 180.238585] [ 180.238860] [ 180.238860] Showing all locks held in the system: [ 180.239326] 1 lock held by rcu_tasks_kthre/11: [ 180.239674] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 180.240441] 1 lock held by khungtaskd/25: [ 180.240775] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 180.241476] 1 lock held by in:imklog/212: [ 180.241814] 2 locks held by syz-executor/5079: [ 180.242159] [ 180.242294] ============================================= [ 180.242294] 18:55:33 executing program 4: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x6}, 0x20, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x178, 0x0, &(0x7f0000000200)={0x2, 0x77, {0x0, 0xc, 0x2d, "a0423f4f2648b4980ef6023d2899c507d25e1ab66daf757b57de9c71d4f67e8c4d7f9e6ee652f749cfa633c58d", 0x3d, "94f948e202a98b9bd41717da8573b428d6dd9d7297573f33b5652c1f49634f262d0533f82f1c29ade30f1d56aad16ca150ac2bc9b65707fd9203394f0f"}, 0x63, "3e26b04fd21a13e0a5560fc59cbe685b4e2cb1b31037b2a2e941f654b6355fbde3a38979e76fb481e53df9d5dc101a4b02b8c355a1418548b974b4b2bbb2d26bcfea89cd6054c52fc7b71ac94de849ee6f14d7cca4afe99e608ce59703372fc471f785"}, 0xe6}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000003c0)={0x6, 0x7fffffff, 0x1}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4890) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x20, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0x6, 0xfffffffd}}) recvfrom(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x2080, &(0x7f0000001680)=@xdp={0x2c, 0x1b, r1}, 0x80) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001700)=[0xffffffffffffffff], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001840)={0x9, 0x3, 0xb7, &(0x7f0000001780)="acc4082808b47a34bb438e294224f6eb850a60fc212a72c80b4dcf1d6dd3b8c933096880452228a5ec31c8703501fd62b8afba27fbcbf3630c113f10f8245b291fd7b1a1dcdba4bfccdd42c5861be228390c9b60950454a6c218e8740ce96d4f31fab922f987019a9761739d508c52f3981bd6255432d5c05e474686d9586382bf690f0683e8a73fa3e65cab259aa635999f8c0dc5c50a4058219e55dc4fae3b527c690b7d6c3db0e8b73a0e87a060803f216f155a7612"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r4, &(0x7f0000001880)=""/79, 0x4f, 0x10100, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000001900)=0x58) r5 = creat(&(0x7f0000001940)='./file0\x00', 0xaa) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x33}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2e997daa1128"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x1}}]}, 0x58}}, 0x2008c104) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80), 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\'\x7f+#\xe4/\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6gre0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) 18:55:33 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x1000, 0x0, 0x9, 0x80}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x206000, 0x0) write$char_usb(r1, &(0x7f0000000100)="44d1d33b4faee3ef4fada1782f0f4cdc43684c54f96adb4bbacd2540735dbbe7cf4e9d2ccb91579e64053de78190f6136e0b6c02fbee", 0x36) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x800400, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000200)) copy_file_range(r1, &(0x7f0000000240)=0x9, r3, &(0x7f0000000280)=0x4, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe60, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = signalfd4(r1, &(0x7f0000000440)={[0x400]}, 0x8, 0x0) process_mrelease(r5, 0x0) r6 = accept(r0, &(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000580)) 18:55:33 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1074, r0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x480000, 0x8}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x1032, 0x2a, [@measure_req={0x26, 0x1003, {0x8, 0xa0, 0x0, "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"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xf4}}, @mic={0x8c, 0x18, {0x7f8, "fc0627d73b69", @long="edcabfd3aac7609e3cb26e617ca5aa41"}}, @chsw_timing={0x68, 0x4, {0x3, 0xfd6b}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x1074}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x2a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x40) socketpair(0x1e, 0xa, 0xb79b, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1fcbfa11, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x809}, 0x48404) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, r0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="49ece44f6ccb"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8804) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x20000, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xc0, r0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x5, 0x6}, {0x2, 0x4}, {0xf7, 0x1}, {0xe4, 0x1}, {0x2, 0x7}, {0x5}, {0x1f, 0x4}, {0x96, 0x6}, {0x0, 0x7}, {0x8, 0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x62, 0x3}], "cbc272cca2d23add"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x74, 0x4}], "c132f4cd40fe2558"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xff, 0x2}, {0x5}, {0x2, 0x5}, {0x2, 0x2}, {0xc3, 0x6}, {0x40, 0x7}, {0x1b}, {0x2, 0x6}, {0xf7, 0x5}, {0x7}, {0x3f}, {0x81, 0x6}, {0x80, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x40, 0x4}, {0x43}, {0x40, 0x6}, {0x1, 0x4}], "5546b285ec2c00dd"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x4}, {0xe0, 0x4}, {0x67, 0x5}, {0x6, 0x1}, {0x8, 0x3}, {0xd, 0x6}, {0xb9, 0x3}], "ab12d5200523ad52"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "7495ef304507f6f0"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xff}, {0x5, 0x7}, {0x8, 0x3}], "fcb7d8f791667e7e"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x4000880) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000019c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001a00)={'wlan1\x00'}) getpeername(r8, &(0x7f0000001b40)=@nl, &(0x7f0000001bc0)=0x80) 18:55:33 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xff, 0x800, 0x2, @private1, @remote, 0x20, 0x1, 0x0, 0x1}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:55:33 executing program 7: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "b5a92b5e9bbfec22ce9de8e8bc343d5b08c668c769d85c5f90c66bd0ed38d0fbfe595684c6544c5677f7cefe0397494ab71ec017ee9f8bf76414ddc05ac1f626", "fcbe39dadb849f7ddaa150d789d1d4e0f5be1231a918c1453e23919be10860b9dfb2d6e69b6c8f65dbe48e896c237b20e5782183f3842e882a1555ef84458332", "edba52a8bef79a14ea6affb7e0d1b80b716861e378b3aa293b08596844e40b65", [0x5, 0x1ff]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff8, 0xff, 0x5, 0x100}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000480)) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000500)={0x7, 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000540)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) 18:55:33 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) inotify_init() 18:55:33 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xede00}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 18:55:33 executing program 6: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7fff, 0x400a00) r1 = socket(0x3, 0x80000, 0x3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x5, 0x7fffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x78, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x794}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5c05a63245d3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x20}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket(0xf, 0x4, 0x1ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x3, 0x75) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) pipe2(&(0x7f00000004c0), 0x5000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x810, r4, 0x0) 18:55:33 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xede00}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 18:55:33 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/206, 0xce}], 0x3) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) 18:55:33 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x1000, 0x0, 0x9, 0x80}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x206000, 0x0) write$char_usb(r1, &(0x7f0000000100)="44d1d33b4faee3ef4fada1782f0f4cdc43684c54f96adb4bbacd2540735dbbe7cf4e9d2ccb91579e64053de78190f6136e0b6c02fbee", 0x36) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x800400, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000200)) copy_file_range(r1, &(0x7f0000000240)=0x9, r3, &(0x7f0000000280)=0x4, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe60, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = signalfd4(r1, &(0x7f0000000440)={[0x400]}, 0x8, 0x0) process_mrelease(r5, 0x0) r6 = accept(r0, &(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000580)) 18:55:33 executing program 7: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "b5a92b5e9bbfec22ce9de8e8bc343d5b08c668c769d85c5f90c66bd0ed38d0fbfe595684c6544c5677f7cefe0397494ab71ec017ee9f8bf76414ddc05ac1f626", "fcbe39dadb849f7ddaa150d789d1d4e0f5be1231a918c1453e23919be10860b9dfb2d6e69b6c8f65dbe48e896c237b20e5782183f3842e882a1555ef84458332", "edba52a8bef79a14ea6affb7e0d1b80b716861e378b3aa293b08596844e40b65", [0x5, 0x1ff]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff8, 0xff, 0x5, 0x100}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000340)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000480)) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000500)={0x7, 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000540)=0x7) socket$nl_generic(0x10, 0x3, 0x10) openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x180, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) 18:55:33 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9908, 0x0, 0x3, 0x12, 0x4, "6fd194ce0c6e60d06580cce13c5eeb0b846fee6d387e729684cb96aae6b408f09093e3d522f659921133451c8f449e9c532c8f7399f0a240405e6e8a30a4ddf5", "2f32410270a018d7d48aa9349e17f710d56a450957fe860a31360c4a8e7b017ebd39a957011f91e2d7daa7c4a645d37063e2f75645783d8de02e1ca5748ab45f", "a3fa8e0f6079fefd248cb35aa9a309044e57eb1dc8283599d4391b5ca7f5e796", [0xffffffff, 0x9]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/73, 0x49}], 0x9) r0 = creat(&(0x7f0000000800)='./file0\x00', 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000840)={0xe4, 0x2}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x408c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x200040c5) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc0000000, 0x73}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x199}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x2408c800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000d40)={0x9, 0x4, 0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x5bb400, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000910}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x3}, {0x81, 0x5}], "ad4492a8d34c0917"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0xe0, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x11, 0x2}, {0xfe, 0x3}, {0x0, 0x3}, {0x9, 0x1}], "d58ea727a38d8159"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x7}, {0xaf, 0x4}, {0xe5, 0x7}, {0x1f, 0x6}, {0x3f, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x5d}, {0x3, 0x4}, {0x7, 0x2}, {0x8, 0x7}, {0x2, 0x4}, {0x81, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x1}], "e165c240ae4b4370"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xeb, 0x4}, {0x1f, 0x1}, {0x9, 0x3}, {0x40, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x80, 0x7}, {0x4, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x6}, {0x8}, {0x1, 0x5}, {0x4c, 0x2}, {0x1, 0x1}], "2c717dee08f2221f"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x2}, {0x3f, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0x4}, {0xb2, 0x4}], "e61025d971fb7780"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0xe0, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x7}, {0x80, 0x4}, {0x40, 0x2}, {0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x1}], "ff109a7e5a67c3cb"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x3, 0x4}, {0x40, 0x3}, {0x0, 0x2}, {0x1, 0x4}], "41bb6eff6586039d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe0, 0x1}, {0x2, 0x3}, {0xff, 0x7}, {0x1, 0x3}, {0x3d, 0x6}, {0x8, 0x3}, {0x55, 0x4}, {0x40, 0x1}, {0x81}], "f2da960a90861fa4"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x3}, {0x9, 0x4}, {0x93}, {0x5, 0x1}, {0x23, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x3}], "a93fbfab323575a7"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x20048016) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x1edb, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x80, 0xfffffffd, 0x5}}) r5 = eventfd(0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x48, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xede00}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 18:55:33 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10680000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8d8f36ab423e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x199480, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x4, 0x0, 0x8001, 0x7}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x8b}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair(0x3, 0x3, 0x20, &(0x7f0000000580)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xff, 0x800, 0x2, @private1, @remote, 0x20, 0x1, 0x0, 0x1}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4020) 18:55:33 executing program 6: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7fff, 0x400a00) r1 = socket(0x3, 0x80000, 0x3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x5, 0x7fffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x78, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x794}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5c05a63245d3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x20}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket(0xf, 0x4, 0x1ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x3, 0x75) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x810, r4, 0x0) 18:55:33 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) r1 = inotify_init() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x3) r2 = memfd_secret(0x80000) r3 = inotify_init() write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x4, 0x3, 0x4, "5658d85b4000c1a3d8438e5d353c4a75d2d93dc239f363cac3c34fddea29633c89fc950fecb510610012e9eb4dfcaee917c3d3982c808fa87b07450f5bda01d7623b2b72c0b4cd8f"}, 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) r4 = io_uring_setup(0x7c18, &(0x7f0000000380)={0x0, 0xe8da, 0x10, 0x0, 0x2ac, 0x0, r2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r2, r3, r5, r3], 0x4) creat(&(0x7f0000000480)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000700)='./file0\x00', 0x800) VM DIAGNOSIS: 18:55:26 Registers: info registers vcpu 0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f172a7e0088 CR3=0000000019f44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2035323a35353a38 312031202074634f YMM01=0000000000000000 0000000000000000 5d3739383736362e 39373120205b203a YMM02=0000000000000000 0000000000000000 783020646e616d6d 6f63203a31696368 YMM03=0000000000000000 0000000000000000 3736362e39373120 205b203a6c656e72 YMM04=0000000000000000 0000000000000000 2038313a33353a38 312031202074634f YMM05=0000000000000000 0000000000000000 65636f72703d7373 616c63742030733a YMM06=0000000000000000 0000000000000000 733a755f6d657473 79733d747865746e YMM07=0000000000000000 0000000000000000 725f6d6574737973 3a755f6d65747379 YMM08=0000000000000000 0000000000000000 7475636578652d7a 7973223d6d6d6f63 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffffff85407260 RSP=ffff8880187874d0 R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=fffffbfff0b60dda R11=0000000000000001 R12=ffff88800fefb580 R13=0000000000000000 R14=00000000ffffffff R15=ffff88800fefbef8 RIP=ffffffff842535e4 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1729e22900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f17292bc350 CR3=000000000f288000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 b198571852e96357 00000000000af320 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 088fa2d8778ce520 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000