@device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @random="d281b11f7193", {0xa, 0x21}}, @sa_query_req={0x8, 0x0, 0x8}}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x75}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @random="d281b11f7193", {0xa, 0x21}}, @sa_query_req={0x8, 0x0, 0x8}}, 0x1c) (async)

02:14:36 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0)

02:14:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0xec0}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:36 executing program 0:
r0 = syz_io_uring_setup(0x5ed9, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0)

02:14:36 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x9, 0x0, 0x0, 0x0, 0x9], 0x6, 0x80000})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1000}, 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100039ae00"/20, @ANYRES32=0x0, @ANYBLOB="29030000000000002c0012800b00010062726964676500001c000280060027000000000008001c0001000000050025000100000008000500", @ANYRES32=0x0, @ANYBLOB="00b5c5a42b29fa6723abfe43f812dfa0906d4db892fefeab742c5556491ebf6781b8b0"], 0x54}}, 0x0)

02:14:36 executing program 2:
r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x500, 0x22, 0x0, 0x1a00, 0x8, 0x0, 0x0, 0x4})

02:14:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x33fe0}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3029.583867][T20245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:36 executing program 0:
r0 = syz_io_uring_setup(0x5ed9, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0)

02:14:36 executing program 3:
syz_emit_ethernet(0x14a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/4096)

[ 3029.684948][T20245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3029.697809][T10772] Bluetooth: hci1: command 0x040f tx timeout
02:14:36 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00')
preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000001780)=""/169, 0xa9}], 0x1, 0x4000002, 0x0)
fanotify_mark(r1, 0x0, 0x8000000, r2, &(0x7f0000000040)='./file0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="40a37f1a7473c291d6399eb64cff36197d6bcbfb55308df8fb5488fb31c684861c1408a1ed29562cddee2a523940a71111f244f550b1db33d5c1f2a443095fdf9a975caf210cfe96dd", @ANYBLOB, @ANYBLOB="000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x260}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000085)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x286, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)

[ 3029.798047][T20245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3029.832209][T20245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:37 executing program 3:
syz_emit_ethernet(0x14a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/4096)

02:14:37 executing program 0:
r0 = syz_io_uring_setup(0x5ed9, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0)

[ 3030.092197][T20243] device bridge7 entered promiscuous mode
02:14:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x20000164}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x75}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @random="d281b11f7193", {0xa, 0x21}}, @sa_query_req={0x8, 0x0, 0x8}}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x75}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @random="d281b11f7193", {0xa, 0x21}}, @sa_query_req={0x8, 0x0, 0x8}}, 0x1c) (async)

02:14:37 executing program 3:
syz_emit_ethernet(0x14a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/4096)

02:14:37 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x9, 0x0, 0x0, 0x0, 0x9], 0x6, 0x80000})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1000}, 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100039ae00"/20, @ANYRES32=0x0, @ANYBLOB="29030000000000002c0012800b00010062726964676500001c000280060027000000000008001c0001000000050025000100000008000500", @ANYRES32=0x0, @ANYBLOB="00b5c5a42b29fa6723abfe43f812dfa0906d4db892fefeab742c5556491ebf6781b8b0"], 0x54}}, 0x0)

[ 3030.374478][T20275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x7ffff000}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:37 executing program 0:
r0 = syz_io_uring_setup(0x5ed9, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0)

02:14:37 executing program 3:
syz_emit_ethernet(0x14a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/4096)

02:14:37 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00')
preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000001780)=""/169, 0xa9}], 0x1, 0x4000002, 0x0)
fanotify_mark(r1, 0x0, 0x8000000, r2, &(0x7f0000000040)='./file0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="40a37f1a7473c291d6399eb64cff36197d6bcbfb55308df8fb5488fb31c684861c1408a1ed29562cddee2a523940a71111f244f550b1db33d5c1f2a443095fdf9a975caf210cfe96dd", @ANYBLOB, @ANYBLOB="000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x260}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000085)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x286, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)

[ 3030.517898][T20275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0xfffffdef}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3030.629066][T20275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3030.680975][T20275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:37 executing program 0:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000002080)=ANY=[@ANYBLOB="0121202e2f660700009af0b31167ce6773364a1db58bc9b632ef164c49cb2484d301df8edcb8dbea0e4ae7eb204bd31f640c5a8950693831b0eba016efcba66b650cb5902deaf4c91db183a14f8707616e0b3b4302cc0900a5497a91e3e15f2a60a053f15c79271e4fcdb145c9c840c74b3acdbdc822cb8c7260d827b0258c4e184534a42e6ce628752593611163ab9d5204a9a326b837b9389b1b1ae7d334a1300e80c95f39f4622174a28a26da414bb1da691167808da9e77653383c28ffbe0bbd878de64be334b535cd9bd3"], 0x191)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001f80)=ANY=[], 0x12, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x1)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x46)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

02:14:37 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000), 0x8)

[ 3031.123437][T20285] device bridge8 entered promiscuous mode
02:14:38 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0)

02:14:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x14}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "0415c0ff"}]}]}, 0x44}}, 0x40000)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="260023bd70c996f05ba6e2351a0009de"], 0x1c}}, 0x4000000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"/18, @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000880)=ANY=[@ANYBLOB="5000000008021100000108021100000085003c0fd83af988f80000000020000000000000000000640001000006020202020202010882848b960c1218242235d21c3d64b4090e46639e27c0f5d4c4af78469dfe8ebca51bffdd8a85ecd27f708dc86e796b6db71f974680ff3eac8e3c3685d02467bc3404bce44a13414c4f4b80cc84ca4eb635011b9ff843e3b99ad81fbfe94304bdacac802a74d3b38e98c7f6a692c50d0a5b4de1b20710fd5d58a76572"], 0x36)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x15}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x880)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@ctrl_frame=@rts={{}, {0x6}, @device_a, @device_b}, 0x10)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 3031.376407][T20315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1ff]})
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000280))

02:14:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x3}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:38 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x6, {{}, {0x0}, 0x0}}], 0x48}, 0x0)

02:14:38 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00')
preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000001780)=""/169, 0xa9}], 0x1, 0x4000002, 0x0)
fanotify_mark(r1, 0x0, 0x8000000, r2, &(0x7f0000000040)='./file0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="40a37f1a7473c291d6399eb64cff36197d6bcbfb55308df8fb5488fb31c684861c1408a1ed29562cddee2a523940a71111f244f550b1db33d5c1f2a443095fdf9a975caf210cfe96dd", @ANYBLOB, @ANYBLOB="000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x260}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000085)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x286, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)

[ 3031.494528][T20315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:38 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x6, {{}, {0x0}, 0x0}}], 0x48}, 0x0)

[ 3031.637948][T20315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x4}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:38 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x6, {{}, {0x0}, 0x0}}], 0x48}, 0x0)

[ 3031.775864][T19927] Bluetooth: hci1: command 0x0419 tx timeout
02:14:41 executing program 0:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000002080)=ANY=[@ANYBLOB="0121202e2f660700009af0b31167ce6773364a1db58bc9b632ef164c49cb2484d301df8edcb8dbea0e4ae7eb204bd31f640c5a8950693831b0eba016efcba66b650cb5902deaf4c91db183a14f8707616e0b3b4302cc0900a5497a91e3e15f2a60a053f15c79271e4fcdb145c9c840c74b3acdbdc822cb8c7260d827b0258c4e184534a42e6ce628752593611163ab9d5204a9a326b837b9389b1b1ae7d334a1300e80c95f39f4622174a28a26da414bb1da691167808da9e77653383c28ffbe0bbd878de64be334b535cd9bd3"], 0x191)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001f80)=ANY=[], 0x12, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x1)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x46)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

02:14:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1ff]})
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000280))

02:14:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x14}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "0415c0ff"}]}]}, 0x44}}, 0x40000)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="260023bd70c996f05ba6e2351a0009de"], 0x1c}}, 0x4000000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"/18, @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000880)=ANY=[@ANYBLOB="5000000008021100000108021100000085003c0fd83af988f80000000020000000000000000000640001000006020202020202010882848b960c1218242235d21c3d64b4090e46639e27c0f5d4c4af78469dfe8ebca51bffdd8a85ecd27f708dc86e796b6db71f974680ff3eac8e3c3685d02467bc3404bce44a13414c4f4b80cc84ca4eb635011b9ff843e3b99ad81fbfe94304bdacac802a74d3b38e98c7f6a692c50d0a5b4de1b20710fd5d58a76572"], 0x36)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x15}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x880)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@ctrl_frame=@rts={{}, {0x6}, @device_a, @device_b}, 0x10)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x14}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "0415c0ff"}]}]}, 0x44}}, 0x40000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="260023bd70c996f05ba6e2351a0009de"], 0x1c}}, 0x4000000) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"/18, @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000880)=ANY=[@ANYBLOB="5000000008021100000108021100000085003c0fd83af988f80000000020000000000000000000640001000006020202020202010882848b960c1218242235d21c3d64b4090e46639e27c0f5d4c4af78469dfe8ebca51bffdd8a85ecd27f708dc86e796b6db71f974680ff3eac8e3c3685d02467bc3404bce44a13414c4f4b80cc84ca4eb635011b9ff843e3b99ad81fbfe94304bdacac802a74d3b38e98c7f6a692c50d0a5b4de1b20710fd5d58a76572"], 0x36) (async)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x15}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x880) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@ctrl_frame=@rts={{}, {0x6}, @device_a, @device_b}, 0x10) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

02:14:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x5}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:41 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x6, {{}, {0x0}, 0x0}}], 0x48}, 0x0)

02:14:41 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00')
preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000001780)=""/169, 0xa9}], 0x1, 0x4000002, 0x0)
fanotify_mark(r1, 0x0, 0x8000000, r2, &(0x7f0000000040)='./file0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="40a37f1a7473c291d6399eb64cff36197d6bcbfb55308df8fb5488fb31c684861c1408a1ed29562cddee2a523940a71111f244f550b1db33d5c1f2a443095fdf9a975caf210cfe96dd", @ANYBLOB, @ANYBLOB="000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x260}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000085)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x286, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)

02:14:41 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000002080)=ANY=[@ANYBLOB="0121202e2f660700009af0b31167ce6773364a1db58bc9b632ef164c49cb2484d301df8edcb8dbea0e4ae7eb204bd31f640c5a8950693831b0eba016efcba66b650cb5902deaf4c91db183a14f8707616e0b3b4302cc0900a5497a91e3e15f2a60a053f15c79271e4fcdb145c9c840c74b3acdbdc822cb8c7260d827b0258c4e184534a42e6ce628752593611163ab9d5204a9a326b837b9389b1b1ae7d334a1300e80c95f39f4622174a28a26da414bb1da691167808da9e77653383c28ffbe0bbd878de64be334b535cd9bd3"], 0x191)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001f80)=ANY=[], 0x12, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x1)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x46)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

02:14:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x6}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3034.066683][T20343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3034.198110][T20343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1ff]})
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000280))

02:14:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x7}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3034.320091][T20343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x14}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "0415c0ff"}]}]}, 0x44}}, 0x40000)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="260023bd70c996f05ba6e2351a0009de"], 0x1c}}, 0x4000000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"/18, @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000880)=ANY=[@ANYBLOB="5000000008021100000108021100000085003c0fd83af988f80000000020000000000000000000640001000006020202020202010882848b960c1218242235d21c3d64b4090e46639e27c0f5d4c4af78469dfe8ebca51bffdd8a85ecd27f708dc86e796b6db71f974680ff3eac8e3c3685d02467bc3404bce44a13414c4f4b80cc84ca4eb635011b9ff843e3b99ad81fbfe94304bdacac802a74d3b38e98c7f6a692c50d0a5b4de1b20710fd5d58a76572"], 0x36)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x15}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x880)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@ctrl_frame=@rts={{}, {0x6}, @device_a, @device_b}, 0x10)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x14}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "0415c0ff"}]}]}, 0x44}}, 0x40000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="260023bd70c996f05ba6e2351a0009de"], 0x1c}}, 0x4000000) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"/18, @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000880)=ANY=[@ANYBLOB="5000000008021100000108021100000085003c0fd83af988f80000000020000000000000000000640001000006020202020202010882848b960c1218242235d21c3d64b4090e46639e27c0f5d4c4af78469dfe8ebca51bffdd8a85ecd27f708dc86e796b6db71f974680ff3eac8e3c3685d02467bc3404bce44a13414c4f4b80cc84ca4eb635011b9ff843e3b99ad81fbfe94304bdacac802a74d3b38e98c7f6a692c50d0a5b4de1b20710fd5d58a76572"], 0x36) (async)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x15}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x880) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@ctrl_frame=@rts={{}, {0x6}, @device_a, @device_b}, 0x10) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

02:14:41 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x40000700, 0x3a)

[ 3034.607638][T20373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3034.716055][T20373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3034.803291][T20373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3034.841336][T20377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:44 executing program 0:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000002080)=ANY=[@ANYBLOB="0121202e2f660700009af0b31167ce6773364a1db58bc9b632ef164c49cb2484d301df8edcb8dbea0e4ae7eb204bd31f640c5a8950693831b0eba016efcba66b650cb5902deaf4c91db183a14f8707616e0b3b4302cc0900a5497a91e3e15f2a60a053f15c79271e4fcdb145c9c840c74b3acdbdc822cb8c7260d827b0258c4e184534a42e6ce628752593611163ab9d5204a9a326b837b9389b1b1ae7d334a1300e80c95f39f4622174a28a26da414bb1da691167808da9e77653383c28ffbe0bbd878de64be334b535cd9bd3"], 0x191)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001f80)=ANY=[], 0x12, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x1)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x46)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

02:14:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x8}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:44 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0xa, 0x5, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x0, 0xf00fea9}, 0x1c, &(0x7f0000000740)={&(0x7f0000000600)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

02:14:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1ff]})
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000280))

02:14:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x31, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:14:44 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000002080)=ANY=[@ANYBLOB="0121202e2f660700009af0b31167ce6773364a1db58bc9b632ef164c49cb2484d301df8edcb8dbea0e4ae7eb204bd31f640c5a8950693831b0eba016efcba66b650cb5902deaf4c91db183a14f8707616e0b3b4302cc0900a5497a91e3e15f2a60a053f15c79271e4fcdb145c9c840c74b3acdbdc822cb8c7260d827b0258c4e184534a42e6ce628752593611163ab9d5204a9a326b837b9389b1b1ae7d334a1300e80c95f39f4622174a28a26da414bb1da691167808da9e77653383c28ffbe0bbd878de64be334b535cd9bd3"], 0x191)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001f80)=ANY=[], 0x12, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x1)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x46)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

02:14:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x6b}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3037.182869][T20385] wlan1: authenticate with 08:02:11:00:00:00
[ 3037.208025][T20385] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3037.231098][T20385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3037.315512][  T951] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 3037.354147][  T951] wlan1: authenticated
[ 3037.354645][T20385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3037.358787][ T4205] mac80211_hwsim hwsim93 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
02:14:44 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0xa, 0x5, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x0, 0xf00fea9}, 0x1c, &(0x7f0000000740)={&(0x7f0000000600)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

02:14:44 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000002080)=ANY=[@ANYBLOB="0121202e2f660700009af0b31167ce6773364a1db58bc9b632ef164c49cb2484d301df8edcb8dbea0e4ae7eb204bd31f640c5a8950693831b0eba016efcba66b650cb5902deaf4c91db183a14f8707616e0b3b4302cc0900a5497a91e3e15f2a60a053f15c79271e4fcdb145c9c840c74b3acdbdc822cb8c7260d827b0258c4e184534a42e6ce628752593611163ab9d5204a9a326b837b9389b1b1ae7d334a1300e80c95f39f4622174a28a26da414bb1da691167808da9e77653383c28ffbe0bbd878de64be334b535cd9bd3"], 0x191)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001f80)=ANY=[], 0x12, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x1)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x46)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[ 3037.456757][  T951] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
02:14:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x300}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3037.498675][  T951] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=49 aid=1)
[ 3037.518248][T20385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3037.525111][  T951] wlan1: 08:02:11:00:00:00 denied association (code=49)
02:14:44 executing program 0:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000002080)=ANY=[@ANYBLOB="0121202e2f660700009af0b31167ce6773364a1db58bc9b632ef164c49cb2484d301df8edcb8dbea0e4ae7eb204bd31f640c5a8950693831b0eba016efcba66b650cb5902deaf4c91db183a14f8707616e0b3b4302cc0900a5497a91e3e15f2a60a053f15c79271e4fcdb145c9c840c74b3acdbdc822cb8c7260d827b0258c4e184534a42e6ce628752593611163ab9d5204a9a326b837b9389b1b1ae7d334a1300e80c95f39f4622174a28a26da414bb1da691167808da9e77653383c28ffbe0bbd878de64be334b535cd9bd3"], 0x191)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001f80)=ANY=[], 0x12, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x1)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x46)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

02:14:44 executing program 3:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x51, 0x2}, 0x10)
sendmmsg(r1, &(0x7f000000a180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000008c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x80, 0x0}}], 0x2, 0x0)

02:14:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0xffffff1f}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:44 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
symlink(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./bus\x00')
llistxattr(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)

02:14:44 executing program 3:
r0 = syz_open_dev$media(&(0x7f0000000640), 0x0, 0x109001)
r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0)
tee(r0, r1, 0x3ff, 0x0)

02:14:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x31, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:14:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:45 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
symlink(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./bus\x00')
llistxattr(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)

02:14:45 executing program 0:
add_key(&(0x7f0000000540)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x56, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "2a2838efcd65d99824cc75165bd159dafd9e8982946ed38fcb8792f7f1a66056b7687eace3fbc84b1c2dfbfb9e886f8616c3302d20ccc6be2e510b0892361fb0", 0x3e}, 0x48, 0xfffffffffffffffe)
request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='syz', 0x0)
request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000440)='n]\xb3J\xd7\xc1\xd8\xd4\xd0\x8d*\x94u]\xf0B\xee\xf4\xb4!\x7f\x13\xcdcM\xf2\n\xa1\xdc\x7f\xc4\x19\x89n\xf5S\xf5\x00\'\x83\xa6~\xdd\x91\xe6\x92\xdc\xb1ca\xfd\xa9g.\x97\x85\xee\xba}\x81\xe52\xdb\x1f\xd7\'*S\x0f\xd9\xbc\xe3K\x88:YV\xb1\xf9CX\x93\x03\x9d\xd4\x9f\x88\x11\xdbM\x19\x9e\xaa\x88VF)\xcc\xb1,`EBYu\x16\x0f\xcf\xeb\x142\x13i\xbeb\x9fA\n\xb6T\xc56\xc7V\xf58M6%\t\xd4\x1e\xb6\x1fa\xeb\xa4\xcf\xc2\xce\x04l\x19\x817\xff.JC\v\xc5@\xabu\xd6=\x01\xcd|\xa1\xcf\xd0\x05\x9d8+\x151\xa9', 0x0)

02:14:45 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0xa, 0x5, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x0, 0xf00fea9}, 0x1c, &(0x7f0000000740)={&(0x7f0000000600)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

02:14:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)={r1})

02:14:45 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x8}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00')
preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0)

02:14:45 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
symlink(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./bus\x00')
llistxattr(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)

02:14:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 64)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x31, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 3038.713687][T20452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3038.722896][T20449] wlan1: authenticate with 08:02:11:00:00:00
02:14:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x3}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:45 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e23, 0x6b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7c3a8474}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0xffff3d89, @loopback, 0x17}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}], 0x68)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8)
ftruncate(r2, 0x200002)
sendfile(r0, r2, 0x0, 0x80001d00c0cc)

02:14:45 executing program 0:
r0 = openat$fb1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
fsync(r0)

02:14:45 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
symlink(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./bus\x00')
llistxattr(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)

[ 3038.818913][T20449] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3038.837556][T20452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3038.886227][T15847] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 3038.892881][T15847] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
02:14:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x4}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:14:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r1=>0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x48}}, 0x0)

[ 3039.010014][T20452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:14:46 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket(0xa, 0x5, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x0, 0xf00fea9}, 0x1c, &(0x7f0000000740)={&(0x7f0000000600)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

02:14:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1f613}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x2000000, 0x2e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x12f)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x289, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
pipe(&(0x7f00000000c0))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x4000000000010046)

02:14:46 executing program 3:
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08e244"], 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x5ea}], 0x2}, 0x0)

[ 3039.516894][T15847] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 3040.545635][  T951] device hsr_slave_0 left promiscuous mode
[ 3040.552585][  T951] device hsr_slave_1 left promiscuous mode
[ 3040.567244][  T951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3040.574846][  T951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3040.601004][  T951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3040.616836][  T951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3040.628379][  T951] device bridge_slave_1 left promiscuous mode
[ 3040.634626][  T951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3040.647296][  T951] device bridge_slave_0 left promiscuous mode
[ 3040.653538][  T951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3040.707310][  T951] device veth1_macvtap left promiscuous mode
[ 3040.713418][  T951] device veth0_macvtap left promiscuous mode
[ 3040.725871][  T951] device veth1_vlan left promiscuous mode
[ 3040.731715][  T951] device veth0_vlan left promiscuous mode
[ 3041.308410][  T951] team0 (unregistering): Port device team_slave_1 removed
[ 3041.348105][  T951] team0 (unregistering): Port device team_slave_0 removed
[ 3041.390846][  T951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3041.429588][  T951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3041.727018][  T951] bond0 (unregistering): Released all slaves
[ 3070.174604][T20493] chnl_net:caif_netlink_parms(): no params data found
[ 3070.282475][T20493] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3070.289961][T20493] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3070.298922][T20493] device bridge_slave_0 entered promiscuous mode
[ 3070.309749][T20493] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3070.317315][T20493] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3070.325942][T20493] device bridge_slave_1 entered promiscuous mode
[ 3070.362259][T20493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3070.375643][T20493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3070.412934][T20493] team0: Port device team_slave_0 added
[ 3070.424115][T20493] team0: Port device team_slave_1 added
[ 3070.469099][T20493] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3070.485562][T20493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3070.535663][T20493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3070.551120][T20493] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3070.558290][T20493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3070.585905][T20493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3070.660691][T20493] device hsr_slave_0 entered promiscuous mode
[ 3070.677054][T20493] device hsr_slave_1 entered promiscuous mode
[ 3070.696341][T20493] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3070.703940][T20493] Cannot create hsr debugfs directory
[ 3070.951276][T20493] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3070.958426][T20493] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3070.965857][T20493] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3070.972936][T20493] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3071.183026][T20493] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3071.218173][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3071.246984][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3071.297343][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 3071.336450][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3071.356708][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3071.368827][T20493] 8021q: adding VLAN 0 to HW filter on device team0
[ 3071.401013][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3071.411629][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3071.436087][T16935] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3071.443187][T16935] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3071.487035][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3071.502206][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3071.526773][T17664] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3071.533858][T17664] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3071.555970][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3071.586105][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3071.617954][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3071.638789][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3071.656696][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3071.676320][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3071.706405][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3071.730386][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3071.747102][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3071.766039][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3071.786468][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3071.809819][T20493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3071.867487][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3071.875026][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3071.919826][T20493] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3071.977253][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3071.987681][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3072.016063][T10772] Bluetooth: hci1: command 0x0409 tx timeout
[ 3072.061627][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3072.071928][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3072.100264][T20493] device veth0_vlan entered promiscuous mode
[ 3072.109422][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3072.127029][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3072.154777][T20493] device veth1_vlan entered promiscuous mode
[ 3072.226625][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3072.237494][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3072.264015][T20493] device veth0_macvtap entered promiscuous mode
[ 3072.298102][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3072.308470][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3072.330492][T20493] device veth1_macvtap entered promiscuous mode
[ 3072.341896][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3072.357232][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3072.397853][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3072.425598][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.446354][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3072.466402][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.501149][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3072.520965][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.551975][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3072.576134][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.595895][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3072.626706][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.647369][T20493] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3072.665091][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3072.687613][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3072.709927][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3072.737645][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.755546][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3072.776104][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.797246][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3072.827035][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.846201][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3072.866257][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.901312][T20493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3072.915734][T20493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3072.946704][T20493] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3072.960433][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3072.978462][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3073.211727][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3073.236869][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3073.300624][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3073.351617][T17239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3073.362019][T17239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3073.409207][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3073.602727][T20502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_a, @broadcast}, @ver_80211n={0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x1}}, @measure_req={0x0, 0x0, {0x20, [{0x26, 0x43, {0x7, 0x47, 0x40, "c4130a4bfa8e076acc3b04e8147d7ef1101307655a4b65d40ad809a8d9fdbd1487c1efec338303b8d9d2778599fda18b283a543fd82b5343e5c9261de8d6fb78"}}, {0x26, 0xd8, {0xaf, 0xff, 0x20, "111ae295362bdccbf28bcc7763f6d5d6dc8e35706eb4b419ca6ed463a2c1f73f1fd8a42b5107544e6bb023f377aa838f6330860760d84bfec2a56d6ca864ce083951331152ae196f0bf656f2a013aa4481df32ce247bc405a80dcaf0861ea5bdcd85b067db44976888577dc554aedb902995b52118fc1723a909f18122474ed26e0574b5ec30a48c68cdec7286ca1a3cfff7f611098b8ea0f24ae65078b6f75d9829216da6a04e7cfa352f5f56c059b65b62adfad6caf3fe1c2189ef69f3ecef7a9ea2bf3957e50bd07e9f03c0e303aaea3006a015"}}, {0x26, 0xae, {0x0, 0x5, 0x80, "eeb4ea4e07afd28cd87bffceff18f25e0fc41c7692a0944a7d83995f16a4aa27858993faede865a973eb2910bea81fccbcfb0033afbfd0344741e91728dd81f13a397e6781a3d57f41b93a23d9727d4a10f19752295dcf74a11e5742f2c94dfe076a100bcc01bb4e5a6cdf0697aadb77c5ed1a46da3365cada0d333d238f782226c20effce401f040932f388475ba238502efc66560a75d7b27431e7b720b704748da4217dfb7fe7e575e9"}}, {0x26, 0x8, {0x7e, 0x80, 0x80, "9cb79ebb6d"}}]}}}, 0x1f8)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:20 executing program 0:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x48}})

02:15:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x5}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:20 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x12f841, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_script(r1, 0x0, 0xa7)

02:15:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1f613}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x2000000, 0x2e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x12f)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x289, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
pipe(&(0x7f00000000c0))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x4000000000010046)

02:15:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1f613}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x2000000, 0x2e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x12f)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x289, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
pipe(&(0x7f00000000c0))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x4000000000010046)

02:15:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x6}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:20 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x801, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r3 = socket$unix(0x1, 0x801, 0x0)
r4 = openat$nvram(0xffffff9c, &(0x7f0000000080), 0x480000, 0x0)
connect$unix(r4, &(0x7f0000001900)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1000e, 0xffffffffffffffff, 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r6, &(0x7f0000001880)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/244, 0xf4}, {&(0x7f0000000080)}, {&(0x7f0000001480)=""/225, 0xe1}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000001580)=""/38, 0x26}, {&(0x7f00000015c0)=""/26, 0x1a}, {&(0x7f0000001600)=""/130, 0x82}, {&(0x7f00000016c0)=""/7, 0x7}], 0xa, &(0x7f0000001780)=""/210, 0xd2}, 0x4}], 0x1, 0x1cd5e6bd0ee89635, &(0x7f00000018c0))

02:15:20 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
r1 = syz_open_pts(r0, 0x0)
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, "ee057b518b00ff0001971e426f8fade4002000"})
readv(r2, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4103, 0x1007}], 0x1)

[ 3073.851811][T20518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3073.891902][T17664] wlan1: authenticate with 08:02:11:00:00:00
[ 3073.906471][T17664] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3073.913174][   T44] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 3073.947397][   T44] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 3074.009455][   T44] wlan1: authenticated
[ 3074.009811][T20518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3074.018370][T19927] mac80211_hwsim hwsim95 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
02:15:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x7}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3074.104713][T17664] Bluetooth: hci1: command 0x041b tx timeout
[ 3074.138874][   T44] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
02:15:21 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty, @in6=@local}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, 0xe4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c02270304000e0580a7b6072e63e286a5cefe", 0x5ac)

[ 3074.192874][T20518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3074.233247][T17239] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 3074.235121][T20518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3074.250048][T17239] wlan1: associated
02:15:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x8}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_a, @broadcast}, @ver_80211n={0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x1}}, @measure_req={0x0, 0x0, {0x20, [{0x26, 0x43, {0x7, 0x47, 0x40, "c4130a4bfa8e076acc3b04e8147d7ef1101307655a4b65d40ad809a8d9fdbd1487c1efec338303b8d9d2778599fda18b283a543fd82b5343e5c9261de8d6fb78"}}, {0x26, 0xd8, {0xaf, 0xff, 0x20, "111ae295362bdccbf28bcc7763f6d5d6dc8e35706eb4b419ca6ed463a2c1f73f1fd8a42b5107544e6bb023f377aa838f6330860760d84bfec2a56d6ca864ce083951331152ae196f0bf656f2a013aa4481df32ce247bc405a80dcaf0861ea5bdcd85b067db44976888577dc554aedb902995b52118fc1723a909f18122474ed26e0574b5ec30a48c68cdec7286ca1a3cfff7f611098b8ea0f24ae65078b6f75d9829216da6a04e7cfa352f5f56c059b65b62adfad6caf3fe1c2189ef69f3ecef7a9ea2bf3957e50bd07e9f03c0e303aaea3006a015"}}, {0x26, 0xae, {0x0, 0x5, 0x80, "eeb4ea4e07afd28cd87bffceff18f25e0fc41c7692a0944a7d83995f16a4aa27858993faede865a973eb2910bea81fccbcfb0033afbfd0344741e91728dd81f13a397e6781a3d57f41b93a23d9727d4a10f19752295dcf74a11e5742f2c94dfe076a100bcc01bb4e5a6cdf0697aadb77c5ed1a46da3365cada0d333d238f782226c20effce401f040932f388475ba238502efc66560a75d7b27431e7b720b704748da4217dfb7fe7e575e9"}}, {0x26, 0x8, {0x7e, 0x80, 0x80, "9cb79ebb6d"}}]}}}, 0x1f8)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_a, @broadcast}, @ver_80211n={0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x1}}, @measure_req={0x0, 0x0, {0x20, [{0x26, 0x43, {0x7, 0x47, 0x40, "c4130a4bfa8e076acc3b04e8147d7ef1101307655a4b65d40ad809a8d9fdbd1487c1efec338303b8d9d2778599fda18b283a543fd82b5343e5c9261de8d6fb78"}}, {0x26, 0xd8, {0xaf, 0xff, 0x20, "111ae295362bdccbf28bcc7763f6d5d6dc8e35706eb4b419ca6ed463a2c1f73f1fd8a42b5107544e6bb023f377aa838f6330860760d84bfec2a56d6ca864ce083951331152ae196f0bf656f2a013aa4481df32ce247bc405a80dcaf0861ea5bdcd85b067db44976888577dc554aedb902995b52118fc1723a909f18122474ed26e0574b5ec30a48c68cdec7286ca1a3cfff7f611098b8ea0f24ae65078b6f75d9829216da6a04e7cfa352f5f56c059b65b62adfad6caf3fe1c2189ef69f3ecef7a9ea2bf3957e50bd07e9f03c0e303aaea3006a015"}}, {0x26, 0xae, {0x0, 0x5, 0x80, "eeb4ea4e07afd28cd87bffceff18f25e0fc41c7692a0944a7d83995f16a4aa27858993faede865a973eb2910bea81fccbcfb0033afbfd0344741e91728dd81f13a397e6781a3d57f41b93a23d9727d4a10f19752295dcf74a11e5742f2c94dfe076a100bcc01bb4e5a6cdf0697aadb77c5ed1a46da3365cada0d333d238f782226c20effce401f040932f388475ba238502efc66560a75d7b27431e7b720b704748da4217dfb7fe7e575e9"}}, {0x26, 0x8, {0x7e, 0x80, 0x80, "9cb79ebb6d"}}]}}}, 0x1f8) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

02:15:21 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x85, 0x0, 0x0, 0x4, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0), 0x0)
sendto$inet(r1, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0), 0x8)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb)
ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000000))

02:15:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x9}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xe}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1f613}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x2000000, 0x2e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x12f)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x289, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
pipe(&(0x7f00000000c0))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x4000000000010046)

02:15:22 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)

02:15:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1f613}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x2000000, 0x2e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x12f)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x289, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
pipe(&(0x7f00000000c0))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x4000000000010046)

[ 3075.035775][T20542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xf}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:22 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x85, 0x0, 0x0, 0x4, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0), 0x0)
sendto$inet(r1, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0), 0x8)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb)
ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000000))

[ 3075.137891][T20542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:22 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x40045109, &(0x7f0000000000))

[ 3075.239774][T20542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x60}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3075.319337][T20543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:22 executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
preadv(r0, &(0x7f00000017c0), 0xd3, 0x4000, 0x0)

02:15:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 32)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 32)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_a, @broadcast}, @ver_80211n={0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x1}}, @measure_req={0x0, 0x0, {0x20, [{0x26, 0x43, {0x7, 0x47, 0x40, "c4130a4bfa8e076acc3b04e8147d7ef1101307655a4b65d40ad809a8d9fdbd1487c1efec338303b8d9d2778599fda18b283a543fd82b5343e5c9261de8d6fb78"}}, {0x26, 0xd8, {0xaf, 0xff, 0x20, "111ae295362bdccbf28bcc7763f6d5d6dc8e35706eb4b419ca6ed463a2c1f73f1fd8a42b5107544e6bb023f377aa838f6330860760d84bfec2a56d6ca864ce083951331152ae196f0bf656f2a013aa4481df32ce247bc405a80dcaf0861ea5bdcd85b067db44976888577dc554aedb902995b52118fc1723a909f18122474ed26e0574b5ec30a48c68cdec7286ca1a3cfff7f611098b8ea0f24ae65078b6f75d9829216da6a04e7cfa352f5f56c059b65b62adfad6caf3fe1c2189ef69f3ecef7a9ea2bf3957e50bd07e9f03c0e303aaea3006a015"}}, {0x26, 0xae, {0x0, 0x5, 0x80, "eeb4ea4e07afd28cd87bffceff18f25e0fc41c7692a0944a7d83995f16a4aa27858993faede865a973eb2910bea81fccbcfb0033afbfd0344741e91728dd81f13a397e6781a3d57f41b93a23d9727d4a10f19752295dcf74a11e5742f2c94dfe076a100bcc01bb4e5a6cdf0697aadb77c5ed1a46da3365cada0d333d238f782226c20effce401f040932f388475ba238502efc66560a75d7b27431e7b720b704748da4217dfb7fe7e575e9"}}, {0x26, 0x8, {0x7e, 0x80, 0x80, "9cb79ebb6d"}}]}}}, 0x1f8) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xf0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3075.626381][T20572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3075.674089][T20572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:22 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5e, 0xa2, 0xd, 0x40, 0xb95, 0x172a, 0x9328, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xac, 0xb2, 0xe}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0})

02:15:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x300}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3075.756575][T20575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3075.809850][T20574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3076.173176][T10772] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 3076.251324][ T4205] Bluetooth: hci1: command 0x040f tx timeout
[ 3076.596545][T10772] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=93.28
[ 3076.605811][T10772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3076.616067][T10772] usb 1-1: config 0 descriptor??
02:15:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1f613}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x2000000, 0x2e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x12f)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x289, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
pipe(&(0x7f00000000c0))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x4000000000010046)

02:15:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x500}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1f613}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x2000000, 0x2e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x12f)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x289, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
pipe(&(0x7f00000000c0))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x4000000000010046)

02:15:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x1e4c1, 0x20)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5b08}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x40885)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
nanosleep(&(0x7f0000000700)={0x0, 0x3938700}, &(0x7f0000000740))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:24 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x85, 0x0, 0x0, 0x4, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0), 0x0)
sendto$inet(r1, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0), 0x8)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb)
ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000000))

02:15:24 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x600}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3077.205134][T20590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:24 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x700}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3077.309665][T20590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3077.321389][T10772] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 3077.367750][T10772] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
02:15:24 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x85, 0x0, 0x0, 0x4, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0), 0x0)
sendto$inet(r1, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0), 0x8)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb)
ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000000))

[ 3077.437299][T10772] asix: probe of 1-1:0.0 failed with error -71
[ 3077.483005][T20594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3077.509331][T10772] usb 1-1: USB disconnect, device number 113
02:15:24 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x900}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:24 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

02:15:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_deladdr={0x2c, 0x15, 0x315, 0x0, 0x0, {0xa, 0x78, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0)

02:15:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x1e4c1, 0x20) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5b08}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x40885)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
nanosleep(&(0x7f0000000700)={0x0, 0x3938700}, &(0x7f0000000740)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:24 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xb8c}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3078.053208][T20607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3078.100295][T20611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_deladdr={0x2c, 0x15, 0x315, 0x0, 0x0, {0xa, 0x78, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0)

[ 3078.335896][T18322] Bluetooth: hci1: command 0x0419 tx timeout
02:15:25 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xe00}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:25 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
close(r0)

02:15:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_deladdr={0x2c, 0x15, 0x315, 0x0, 0x0, {0xa, 0x78, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0)

02:15:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x1e4c1, 0x20)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5b08}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x40885)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
nanosleep(&(0x7f0000000700)={0x0, 0x3938700}, &(0x7f0000000740))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
open(&(0x7f0000000000)='./file0\x00', 0x1e4c1, 0x20) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5b08}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x40885) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
nanosleep(&(0x7f0000000700)={0x0, 0x3938700}, &(0x7f0000000740)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

02:15:25 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r1)
r2 = memfd_create(&(0x7f0000000340)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00', 0x0)
write(r2, &(0x7f0000000280)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568d85d05667190ba40ed59ac4c015a156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r4 = inotify_init1(0x0)
dup3(r2, r0, 0x0)
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0xc40001e1)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

02:15:25 executing program 2:
r0 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)

[ 3078.888532][T20620] wlan1: authenticate with 08:02:11:00:00:00
[ 3078.917449][T20620] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
02:15:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_deladdr={0x2c, 0x15, 0x315, 0x0, 0x0, {0xa, 0x78, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0)

02:15:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xf00}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3078.953432][T20620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:26 executing program 3:
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x76, &(0x7f0000000340)={r2}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={r2, @in6={{0xa, 0x4e20, 0x8000, @loopback}}, 0xfff7, 0x8001}, 0x88)
r3 = syz_io_uring_setup(0x3edb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18808, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[ 3079.048179][T17239] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 3079.069409][T17239] wlan1: authenticated
[ 3079.069878][T20620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3079.073688][T10772] mac80211_hwsim hwsim95 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
02:15:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x1824}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:26 executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x22, 0x3f, 0x61, 0x20, 0x2639, 0x2, 0x797e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0xe2, 0x81}}]}}]}}, 0x0)

[ 3079.125641][T17239] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
02:15:26 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@v={0x93, 0x0, 0x90, 0x0, @generic})

[ 3079.226449][T17239] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 3079.226797][T20628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3079.246463][T17239] wlan1: associated
[ 3079.311414][T20620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x2418}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:26 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
close(r0)

02:15:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e00ffffffffb9"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x34c, r6, 0x322, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@challenge={0x10, 0x1, 0x7}, @measure_req={0x26, 0xb2, {0x40, 0x4c, 0xd3, "1dbae413c6a2a66c64b38f0aa7fce15b169c7a0b101df5e57048dfec5bb82aa6e7ce1be27869c3d22b2f4e2a066d5ef88a5eb23e31fea94e34fa249652aee26da119fcb683cd333841d5bb81cfe9a25dd007abfda0b5b99fb19d79b4088013282096469255d1e478c1b1af24a0f3c3f2a79ba1be1e2ed28fc63a12c7ef4d81d013ff545b3614e8e19e43b61517cb68be8d784a9badb572b379b2328646c5348ec4f920b3c78d684db98c8e12194a4f"}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48}}, @preq={0x82, 0x2b, @ext={{0x1, 0x0, 0x1}, 0x9a, 0x0, 0x8, @device_b, 0x0, @broadcast, 0xc8, 0x9, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0xfffffffc}]}}, @cf={0x4, 0x6, {0x1, 0x9, 0xf000, 0x6b}}, @link_id={0x65, 0x12, {@random="127f0d33dc01", @device_a, @device_b}}, @chsw_timing={0x68, 0x4, {0x6, 0xffff}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0xb3, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x2c, 0x9}}, @sec_chan_ofs={0x3e, 0x1}, @perr={0x84, 0x55, {0x8, 0x5, [@not_ext={{}, @device_b, 0x2, "", 0x1b}, @ext={{}, @device_b, 0xfffffffc, @device_a, 0x8}, @ext={{}, @device_a, 0x8, @device_a, 0x7}, @not_ext={{}, @device_b, 0xfffff519, "", 0x1}, @ext={{}, @device_b, 0x101, @device_b, 0x2c}]}}, @peer_mgmt={0x75, 0x6, {0x1, 0x0, @val=0x97, @void, @void}}, @tim={0x5, 0x3d, {0x0, 0xb4, 0x2, "4a2dc152a004e0b14b34f0468e5f1ba286150b942949e2622b7e27262cb7bedadf9436790d59b39524591e4173ed55b8737eb19a93c381f7d59c"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0x11a, 0x2a, [@supported_rates={0x1, 0x1, [{0x48}]}, @chsw_timing={0x68, 0x4, {0x800, 0x7d9}}, @measure_req={0x26, 0xb8, {0x0, 0x0, 0x0, "e57d863c37c4e0c8086972e869940879f1c6ba8ec07c46151c29bfdb91a5c0dfba13ec46e36e3956efdccee709ae3749e8a5f3d8db9ce31bae14f9702cbef533fd24cd3e042cb4c9b52670f7e9edfe90f387e2ab1fbd74cda0dffa2990732c23cd4c0b28cdee7c468b45216964df372c145d470ca2db44b09d4d34c3714de88b63aece140eae2ef42811a356b74cdaf561bd4bc74c30d58a6ac821bb67294fb85b23f7571c963e8d2d9b5dd30adf8705b987c8953f"}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x9, 0x1}}, @perr={0x84, 0x48, {0x3f, 0x4, [@not_ext={{}, @device_a, 0x391e, "", 0x4}, @ext={{}, @device_a, 0x4, @device_b, 0x2e}, @ext={{}, @device_b, 0x7, @device_a, 0x5}, @ext={{}, @device_a, 0x3, @broadcast, 0x25}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x64}, @NL80211_ATTR_MAC={0xa}]}, 0x34c}, 0x1, 0x0, 0x0, 0x40000}, 0x12000)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:26 executing program 0:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
close(r0)

02:15:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x3f00}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3079.696278][T20654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x6000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3079.812807][T20654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3079.875960][T19927] usb 3-1: new high-speed USB device number 105 using dummy_hcd
02:15:27 executing program 0:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
close(r0)

[ 3079.922939][T20654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x8c0b}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3080.165634][T19927] usb 3-1: Using ep0 maxpacket: 32
02:15:27 executing program 3:
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x76, &(0x7f0000000340)={r2}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={r2, @in6={{0xa, 0x4e20, 0x8000, @loopback}}, 0xfff7, 0x8001}, 0x88)
r3 = syz_io_uring_setup(0x3edb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18808, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0)

02:15:27 executing program 0:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
close(r0)

[ 3080.316070][T19927] usb 3-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=79.7e
[ 3080.337547][T19927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3080.369515][T19927] usb 3-1: config 0 descriptor??
[ 3080.672831][T19927] usb 3-1: USB disconnect, device number 105
02:15:28 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0)

02:15:28 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
close(r0)

02:15:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xf000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e00ffffffffb9"], 0x40}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x5) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x34c, r6, 0x322, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@challenge={0x10, 0x1, 0x7}, @measure_req={0x26, 0xb2, {0x40, 0x4c, 0xd3, "1dbae413c6a2a66c64b38f0aa7fce15b169c7a0b101df5e57048dfec5bb82aa6e7ce1be27869c3d22b2f4e2a066d5ef88a5eb23e31fea94e34fa249652aee26da119fcb683cd333841d5bb81cfe9a25dd007abfda0b5b99fb19d79b4088013282096469255d1e478c1b1af24a0f3c3f2a79ba1be1e2ed28fc63a12c7ef4d81d013ff545b3614e8e19e43b61517cb68be8d784a9badb572b379b2328646c5348ec4f920b3c78d684db98c8e12194a4f"}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48}}, @preq={0x82, 0x2b, @ext={{0x1, 0x0, 0x1}, 0x9a, 0x0, 0x8, @device_b, 0x0, @broadcast, 0xc8, 0x9, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0xfffffffc}]}}, @cf={0x4, 0x6, {0x1, 0x9, 0xf000, 0x6b}}, @link_id={0x65, 0x12, {@random="127f0d33dc01", @device_a, @device_b}}, @chsw_timing={0x68, 0x4, {0x6, 0xffff}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0xb3, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x2c, 0x9}}, @sec_chan_ofs={0x3e, 0x1}, @perr={0x84, 0x55, {0x8, 0x5, [@not_ext={{}, @device_b, 0x2, "", 0x1b}, @ext={{}, @device_b, 0xfffffffc, @device_a, 0x8}, @ext={{}, @device_a, 0x8, @device_a, 0x7}, @not_ext={{}, @device_b, 0xfffff519, "", 0x1}, @ext={{}, @device_b, 0x101, @device_b, 0x2c}]}}, @peer_mgmt={0x75, 0x6, {0x1, 0x0, @val=0x97, @void, @void}}, @tim={0x5, 0x3d, {0x0, 0xb4, 0x2, "4a2dc152a004e0b14b34f0468e5f1ba286150b942949e2622b7e27262cb7bedadf9436790d59b39524591e4173ed55b8737eb19a93c381f7d59c"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0x11a, 0x2a, [@supported_rates={0x1, 0x1, [{0x48}]}, @chsw_timing={0x68, 0x4, {0x800, 0x7d9}}, @measure_req={0x26, 0xb8, {0x0, 0x0, 0x0, "e57d863c37c4e0c8086972e869940879f1c6ba8ec07c46151c29bfdb91a5c0dfba13ec46e36e3956efdccee709ae3749e8a5f3d8db9ce31bae14f9702cbef533fd24cd3e042cb4c9b52670f7e9edfe90f387e2ab1fbd74cda0dffa2990732c23cd4c0b28cdee7c468b45216964df372c145d470ca2db44b09d4d34c3714de88b63aece140eae2ef42811a356b74cdaf561bd4bc74c30d58a6ac821bb67294fb85b23f7571c963e8d2d9b5dd30adf8705b987c8953f"}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x9, 0x1}}, @perr={0x84, 0x48, {0x3f, 0x4, [@not_ext={{}, @device_a, 0x391e, "", 0x4}, @ext={{}, @device_a, 0x4, @device_b, 0x2e}, @ext={{}, @device_b, 0x7, @device_a, 0x5}, @ext={{}, @device_a, 0x3, @broadcast, 0x25}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x64}, @NL80211_ATTR_MAC={0xa}]}, 0x34c}, 0x1, 0x0, 0x0, 0x40000}, 0x12000) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:28 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x80006)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c)
sendfile64(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x4)

02:15:28 executing program 3:
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x76, &(0x7f0000000340)={r2}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={r2, @in6={{0xa, 0x4e20, 0x8000, @loopback}}, 0xfff7, 0x8001}, 0x88)
r3 = syz_io_uring_setup(0x3edb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18808, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[ 3081.316819][T20681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x30000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:28 executing program 2:
stat(0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r2)
r3 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x0)

02:15:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x34000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3081.626632][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[ 3081.633842][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
02:15:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e00ffffffffb9"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x5) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0) (async)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x34c, r6, 0x322, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@challenge={0x10, 0x1, 0x7}, @measure_req={0x26, 0xb2, {0x40, 0x4c, 0xd3, "1dbae413c6a2a66c64b38f0aa7fce15b169c7a0b101df5e57048dfec5bb82aa6e7ce1be27869c3d22b2f4e2a066d5ef88a5eb23e31fea94e34fa249652aee26da119fcb683cd333841d5bb81cfe9a25dd007abfda0b5b99fb19d79b4088013282096469255d1e478c1b1af24a0f3c3f2a79ba1be1e2ed28fc63a12c7ef4d81d013ff545b3614e8e19e43b61517cb68be8d784a9badb572b379b2328646c5348ec4f920b3c78d684db98c8e12194a4f"}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48}}, @preq={0x82, 0x2b, @ext={{0x1, 0x0, 0x1}, 0x9a, 0x0, 0x8, @device_b, 0x0, @broadcast, 0xc8, 0x9, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0xfffffffc}]}}, @cf={0x4, 0x6, {0x1, 0x9, 0xf000, 0x6b}}, @link_id={0x65, 0x12, {@random="127f0d33dc01", @device_a, @device_b}}, @chsw_timing={0x68, 0x4, {0x6, 0xffff}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0xb3, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x2c, 0x9}}, @sec_chan_ofs={0x3e, 0x1}, @perr={0x84, 0x55, {0x8, 0x5, [@not_ext={{}, @device_b, 0x2, "", 0x1b}, @ext={{}, @device_b, 0xfffffffc, @device_a, 0x8}, @ext={{}, @device_a, 0x8, @device_a, 0x7}, @not_ext={{}, @device_b, 0xfffff519, "", 0x1}, @ext={{}, @device_b, 0x101, @device_b, 0x2c}]}}, @peer_mgmt={0x75, 0x6, {0x1, 0x0, @val=0x97, @void, @void}}, @tim={0x5, 0x3d, {0x0, 0xb4, 0x2, "4a2dc152a004e0b14b34f0468e5f1ba286150b942949e2622b7e27262cb7bedadf9436790d59b39524591e4173ed55b8737eb19a93c381f7d59c"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0x11a, 0x2a, [@supported_rates={0x1, 0x1, [{0x48}]}, @chsw_timing={0x68, 0x4, {0x800, 0x7d9}}, @measure_req={0x26, 0xb8, {0x0, 0x0, 0x0, "e57d863c37c4e0c8086972e869940879f1c6ba8ec07c46151c29bfdb91a5c0dfba13ec46e36e3956efdccee709ae3749e8a5f3d8db9ce31bae14f9702cbef533fd24cd3e042cb4c9b52670f7e9edfe90f387e2ab1fbd74cda0dffa2990732c23cd4c0b28cdee7c468b45216964df372c145d470ca2db44b09d4d34c3714de88b63aece140eae2ef42811a356b74cdaf561bd4bc74c30d58a6ac821bb67294fb85b23f7571c963e8d2d9b5dd30adf8705b987c8953f"}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x9, 0x1}}, @perr={0x84, 0x48, {0x3f, 0x4, [@not_ext={{}, @device_a, 0x391e, "", 0x4}, @ext={{}, @device_a, 0x4, @device_b, 0x2e}, @ext={{}, @device_b, 0x7, @device_a, 0x5}, @ext={{}, @device_a, 0x3, @broadcast, 0x25}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x64}, @NL80211_ATTR_MAC={0xa}]}, 0x34c}, 0x1, 0x0, 0x0, 0x40000}, 0x12000) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x400300}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3081.972931][T20696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3082.053915][T20700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:29 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x80006)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c)
sendfile64(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x4)

02:15:29 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
close(r0)

02:15:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xf0ffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:29 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11038}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x62180)
r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="d4", 0x1}], 0x1, 0x80805, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0])
socket$nl_sock_diag(0x10, 0x3, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

02:15:29 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
ioprio_get$pid(0x1, 0x0)

02:15:29 executing program 3:
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x76, &(0x7f0000000340)={r2}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={r2, @in6={{0xa, 0x4e20, 0x8000, @loopback}}, 0xfff7, 0x8001}, 0x88)
r3 = syz_io_uring_setup(0x3edb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18808, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0)

02:15:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x7ffd}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xfa, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x20}}}, 0x3f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x1000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x2000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3082.998050][T20721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
ioprio_get$pid(0x3, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5441, &(0x7f0000001100)=0x3)
dup2(r0, r1)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000)
perf_event_open(&(0x7f0000001080)={0x5, 0x80, 0x3, 0x3, 0x1, 0x4e, 0x0, 0x6, 0x20508, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000000, 0x1, @perf_bp={&(0x7f0000001140), 0x3}, 0x300, 0x4, 0xb5, 0x1, 0x4, 0x0, 0xff7f, 0x0, 0x800, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1)

[ 3083.206631][T20721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x3000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3083.324644][T20721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:30 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11038}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x62180)
r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="d4", 0x1}], 0x1, 0x80805, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0])
socket$nl_sock_diag(0x10, 0x3, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

02:15:30 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x80006)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c)
sendfile64(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x4)

02:15:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
ioprio_get$pid(0x3, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5441, &(0x7f0000001100)=0x3)
dup2(r0, r1)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000)
perf_event_open(&(0x7f0000001080)={0x5, 0x80, 0x3, 0x3, 0x1, 0x4e, 0x0, 0x6, 0x20508, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000000, 0x1, @perf_bp={&(0x7f0000001140), 0x3}, 0x300, 0x4, 0xb5, 0x1, 0x4, 0x0, 0xff7f, 0x0, 0x800, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1)

02:15:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x7ffd}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xfa, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x20}}}, 0x3f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x5000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3083.922683][T20743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3084.032855][T20747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:31 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11038}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x62180)
r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="d4", 0x1}], 0x1, 0x80805, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0])
socket$nl_sock_diag(0x10, 0x3, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

02:15:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x6000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:31 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11038}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x62180)
r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="d4", 0x1}], 0x1, 0x80805, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0])
socket$nl_sock_diag(0x10, 0x3, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

02:15:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x7ffd}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xfa, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x20}}}, 0x3f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 3084.526408][T20759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x7000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
ioprio_get$pid(0x3, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5441, &(0x7f0000001100)=0x3)
dup2(r0, r1)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000)
perf_event_open(&(0x7f0000001080)={0x5, 0x80, 0x3, 0x3, 0x1, 0x4e, 0x0, 0x6, 0x20508, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000000, 0x1, @perf_bp={&(0x7f0000001140), 0x3}, 0x300, 0x4, 0xb5, 0x1, 0x4, 0x0, 0xff7f, 0x0, 0x800, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1)

[ 3084.639172][T20758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:31 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11038}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x62180)
r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="d4", 0x1}], 0x1, 0x80805, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0])
socket$nl_sock_diag(0x10, 0x3, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3084.727900][T20756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:31 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x80006)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c)
sendfile64(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x4)

02:15:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x8000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050d08e9bf99"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))

02:15:32 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11038}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x62180)
r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="d4", 0x1}], 0x1, 0x80805, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0])
socket$nl_sock_diag(0x10, 0x3, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

02:15:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x9000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:32 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11038}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x62180)
r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="d4", 0x1}], 0x1, 0x80805, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0])
socket$nl_sock_diag(0x10, 0x3, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3085.270437][T20775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xe000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xf000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050d08e9bf99"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))

02:15:32 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
ioprio_get$pid(0x3, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5441, &(0x7f0000001100)=0x3)
dup2(r0, r1)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000)
perf_event_open(&(0x7f0000001080)={0x5, 0x80, 0x3, 0x3, 0x1, 0x4e, 0x0, 0x6, 0x20508, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000000, 0x1, @perf_bp={&(0x7f0000001140), 0x3}, 0x300, 0x4, 0xb5, 0x1, 0x4, 0x0, 0xff7f, 0x0, 0x800, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1)

02:15:33 executing program 3:
r0 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000e86000)="00220400", 0x4)

[ 3085.990843][T20793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x24180000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:33 executing program 0:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0x1c, 0xdf, 0x8, 0x182d, 0x21c, 0x658, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0xff, 0x0, 0x64, [{{0x9, 0x4, 0x46, 0x79, 0x0, 0xe0, 0x94, 0xb0, 0x1}}]}}]}}, 0x0)

02:15:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x3a, 0x0, 0x0)

02:15:33 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093fef184a8c58cc36a6f6468005e0f020000010000000f0000003f420f000000009ad2bb17ffff1f00"/56, 0x38}])

02:15:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x3f000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:33 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002010000106e05ff004000010203010902"], 0xfffffffffffffffe)

02:15:33 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = syz_io_uring_setup(0x77b, &(0x7f0000001500), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}, 0x0)
listen(r0, 0x0)
io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0)

02:15:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x60000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3086.356155][T18322] usb 1-1: new full-speed USB device number 114 using dummy_hcd
02:15:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050d08e9bf99"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))

02:15:33 executing program 3:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x6558, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

[ 3086.541270][T20818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3086.720065][T18322] usb 1-1: config 11 has an invalid interface number: 70 but max is 0
[ 3086.733787][T18322] usb 1-1: config 11 has no interface number 0
[ 3086.742295][T17664] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 3086.762961][T18322] usb 1-1: config 11 interface 70 has no altsetting 0
[ 3086.780542][T18322] usb 1-1: New USB device found, idVendor=182d, idProduct=021c, bcdDevice= 6.58
[ 3086.804289][T18322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3086.996122][T17664] usb 3-1: Using ep0 maxpacket: 16
02:15:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x2, 0xffffffffffffffff, 0x7}}}, 0x3f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050009"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000090b1e177ce0bc78737a1e27f650cb0bd6691539de8fcff4ea2cf4e6f75c3fe5839be40d0c1c58dc98d048f086c7ffeec7d02173e75985b3936eb6b053f446f", @ANYRES16=r4, @ANYBLOB="050000000000000000002101000008000300", @ANYRES32=r5], 0x1c}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x51c1, 0x20142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}}, 0x4044004)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800d}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'})

02:15:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x8c0b0000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:34 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000)

[ 3087.105605][T18322] usb 1-1: string descriptor 0 read error: -71
[ 3087.120475][T18322] usb 1-1: USB2VGA dongle found at address 114
[ 3087.136258][T17664] usb 3-1: config 0 has no interfaces?
[ 3087.158297][T20827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3087.180375][T18322] usb 1-1: Allocated 8 output buffers
[ 3087.195490][T17664] usb 3-1: string descriptor 0 read error: -71
[ 3087.201790][T17664] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40
[ 3087.219043][T18322] usb 1-1: Not attached to USB 2.0 hub, deferring init
[ 3087.268691][T17664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3087.283136][T18322] usb 1-1: USB disconnect, device number 114
[ 3087.333168][T17664] usb 3-1: config 0 descriptor??
[ 3087.386438][T17664] usb 3-1: can't set config #0, error -71
[ 3087.410725][T17664] usb 3-1: USB disconnect, device number 106
02:15:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x165080)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x0, 0x268, 0x300, 0x0, 0x268, 0x410, 0x460, 0x460, 0x410, 0x460, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffff00, 0x0, 0xff000000, 0xeb9f20bd8f5713bc], [0x0, 0xff, 0xff000000, 0xffffff00], 'vcan0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0xf7, 0x7, 0x4}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

02:15:34 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xf, 0x2}, 0x10, 0xffffffffffffffff}, 0x74)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x1, 0x4}, 0x8, 0x10, 0x0}, 0x74)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x504)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)
openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x402, 0x0)
write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)

02:15:34 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000003340)=""/4090, 0xffa}], 0x1, 0x0, 0x0)

02:15:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x9effffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4, 0x9}]}]}, 0x1c}}, 0x0)

02:15:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x2, 0xffffffffffffffff, 0x7}}}, 0x3f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050009"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000090b1e177ce0bc78737a1e27f650cb0bd6691539de8fcff4ea2cf4e6f75c3fe5839be40d0c1c58dc98d048f086c7ffeec7d02173e75985b3936eb6b053f446f", @ANYRES16=r4, @ANYBLOB="050000000000000000002101000008000300", @ANYRES32=r5], 0x1c}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x51c1, 0x20142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}}, 0x4044004)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800d}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x2, 0xffffffffffffffff, 0x7}}}, 0x3f) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000090b1e177ce0bc78737a1e27f650cb0bd6691539de8fcff4ea2cf4e6f75c3fe5839be40d0c1c58dc98d048f086c7ffeec7d02173e75985b3936eb6b053f446f", @ANYRES16=r4, @ANYBLOB="050000000000000000002101000008000300", @ANYRES32=r5], 0x1c}}, 0x0) (async)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x51c1, 0x20142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}}, 0x4044004) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800d}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)

02:15:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xf0ffffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:34 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xf, 0x2}, 0x10, 0xffffffffffffffff}, 0x74)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x1, 0x4}, 0x8, 0x10, 0x0}, 0x74)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x504)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)
openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x402, 0x0)
write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)

[ 3087.855059][T20841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:35 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000003340)=""/4090, 0xffa}], 0x1, 0x0, 0x0)

02:15:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xfcffffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3088.017189][T20845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x165080)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x0, 0x268, 0x300, 0x0, 0x268, 0x410, 0x460, 0x460, 0x410, 0x460, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffff00, 0x0, 0xff000000, 0xeb9f20bd8f5713bc], [0x0, 0xff, 0xff000000, 0xffffff00], 'vcan0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0xf7, 0x7, 0x4}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

02:15:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xfeffffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3088.134171][T20852] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
02:15:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x2, 0xffffffffffffffff, 0x7}}}, 0x3f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050009"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000090b1e177ce0bc78737a1e27f650cb0bd6691539de8fcff4ea2cf4e6f75c3fe5839be40d0c1c58dc98d048f086c7ffeec7d02173e75985b3936eb6b053f446f", @ANYRES16=r4, @ANYBLOB="050000000000000000002101000008000300", @ANYRES32=r5], 0x1c}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x51c1, 0x20142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}}, 0x4044004)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800d}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x2, 0xffffffffffffffff, 0x7}}}, 0x3f) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000090b1e177ce0bc78737a1e27f650cb0bd6691539de8fcff4ea2cf4e6f75c3fe5839be40d0c1c58dc98d048f086c7ffeec7d02173e75985b3936eb6b053f446f", @ANYRES16=r4, @ANYBLOB="050000000000000000002101000008000300", @ANYRES32=r5], 0x1c}}, 0x0) (async)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x51c1, 0x20142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}}, 0x4044004) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800d}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)

02:15:35 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xf, 0x2}, 0x10, 0xffffffffffffffff}, 0x74)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x1, 0x4}, 0x8, 0x10, 0x0}, 0x74)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x504)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)
openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x402, 0x0)
write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)

02:15:35 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xf, 0x2}, 0x10, 0xffffffffffffffff}, 0x74)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x1, 0x4}, 0x8, 0x10, 0x0}, 0x74)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x504)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)
openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x402, 0x0)
write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)

02:15:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xfffff000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3088.461827][T20872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:35 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000003340)=""/4090, 0xffa}], 0x1, 0x0, 0x0)

02:15:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x165080)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x0, 0x268, 0x300, 0x0, 0x268, 0x410, 0x460, 0x460, 0x410, 0x460, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffff00, 0x0, 0xff000000, 0xeb9f20bd8f5713bc], [0x0, 0xff, 0xff000000, 0xffffff00], 'vcan0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0xf7, 0x7, 0x4}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

02:15:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xffffff7f}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3088.670554][T20879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xffffff9e}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000000980500658297f0b6ebdb47c36900", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x268, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x34bcbcaf56df80ea}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000008021100000008021104000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x28, r6, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x42}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x4, 0x5, 0x44, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:36 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xf, 0x2}, 0x10, 0xffffffffffffffff}, 0x74)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x1, 0x4}, 0x8, 0x10, 0x0}, 0x74)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x504)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)
openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x402, 0x0)
write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)

02:15:36 executing program 1:
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000003340)=""/4090, 0xffa}], 0x1, 0x0, 0x0)

[ 3089.076572][T20903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x165080)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x0, 0x268, 0x300, 0x0, 0x268, 0x410, 0x460, 0x460, 0x410, 0x460, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffff00, 0x0, 0xff000000, 0xeb9f20bd8f5713bc], [0x0, 0xff, 0xff000000, 0xffffff00], 'vcan0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0xf7, 0x7, 0x4}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

02:15:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xfffffff0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:36 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xf, 0x2}, 0x10, 0xffffffffffffffff}, 0x74)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x1, 0x4}, 0x8, 0x10, 0x0}, 0x74)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x504)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)
openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x402, 0x0)
write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)

[ 3089.172423][T20903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3089.274612][T20903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xfffffffc}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xfffffffe}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:36 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000bdad2340030431c6ae8f000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

02:15:36 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0xaa, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="7b073e059df8"}, 0x14)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

02:15:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000000980500658297f0b6ebdb47c36900", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x268, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x34bcbcaf56df80ea}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000008021100000008021104000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0) (async)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x28, r6, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x42}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x4, 0x5, 0x44, @void}, 0x1e) (async, rerun: 64)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xffffffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x1c, r1, 0x8cd06300a5cb3a07, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

02:15:36 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xf, 0x2}, 0x10, 0xffffffffffffffff}, 0x74)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x1, 0x4}, 0x8, 0x10, 0x0}, 0x74)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x504)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)
openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x402, 0x0)
write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x1)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)

[ 3089.826131][T20932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:37 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x801, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{}, 0x0, 0x0, 0x0, 0x0, "abd33d777b15138e"}, 0x10}}, 0x0)

[ 3089.875168][T20938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3089.911745][T20929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3089.996478][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.042700][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.076341][T17664] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 3090.084826][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:37 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x801, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{}, 0x0, 0x0, 0x0, 0x0, "abd33d777b15138e"}, 0x10}}, 0x0)

[ 3090.141282][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3090.197438][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.250063][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:37 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x801, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{}, 0x0, 0x0, 0x0, 0x0, "abd33d777b15138e"}, 0x10}}, 0x0)

[ 3090.308682][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x3}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3090.380314][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.436887][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.446417][T17664] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice=8f.ae
[ 3090.464527][T17664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3090.488376][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.499011][T17664] usb 4-1: config 0 descriptor??
[ 3090.543954][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.550101][T17664] i2c-tiny-usb 4-1:0.0: version 8f.ae found at bus 004 address 110
[ 3090.592007][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.670950][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.712807][T20937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3090.796983][T20928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3091.010164][T17664]  (null): failure reading functionality
[ 3091.039054][T17664] i2c i2c-1: failure reading functionality
[ 3091.058506][T17664] i2c i2c-1: connected i2c-tiny-usb device
[ 3091.093036][T17664] usb 4-1: USB disconnect, device number 110
02:15:38 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="c8"})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)

[ 3092.244128][T17239] device hsr_slave_0 left promiscuous mode
[ 3092.269717][T17239] device hsr_slave_1 left promiscuous mode
[ 3092.286307][T17239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3092.293810][T17239] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3092.318401][T17239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3092.335942][T17239] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3092.363173][T17239] device bridge_slave_1 left promiscuous mode
[ 3092.370126][T17239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3092.398867][T17239] device bridge_slave_0 left promiscuous mode
[ 3092.405115][T17239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3092.449692][T17239] device veth1_macvtap left promiscuous mode
[ 3092.466845][T17239] device veth0_macvtap left promiscuous mode
[ 3092.473061][T17239] device veth1_vlan left promiscuous mode
[ 3092.486814][T17239] device veth0_vlan left promiscuous mode
[ 3093.143735][T17239] team0 (unregistering): Port device team_slave_1 removed
[ 3093.193183][T17239] team0 (unregistering): Port device team_slave_0 removed
[ 3093.256359][T17239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3093.326126][T17239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3093.616757][T17239] bond0 (unregistering): Released all slaves
[ 3094.983364][T20963] chnl_net:caif_netlink_parms(): no params data found
[ 3095.122617][T20963] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3095.145656][T20963] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3095.157148][T20963] device bridge_slave_0 entered promiscuous mode
[ 3095.188228][T20963] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3095.235444][T20963] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3095.243863][T20963] device bridge_slave_1 entered promiscuous mode
[ 3095.371319][T20963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3095.438915][T20963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3095.551820][T20963] team0: Port device team_slave_0 added
[ 3095.597583][T20963] team0: Port device team_slave_1 added
[ 3095.718926][T20963] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3095.735346][T20963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3095.805587][T20963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3095.829084][T20963] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3095.846187][T20963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3095.906316][T20963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3096.027740][T20963] device hsr_slave_0 entered promiscuous mode
[ 3096.046083][T20963] device hsr_slave_1 entered promiscuous mode
[ 3096.086498][T20963] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3096.094108][T20963] Cannot create hsr debugfs directory
[ 3096.635669][T20963] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3096.656676][T18322] Bluetooth: hci1: command 0x0409 tx timeout
[ 3096.696493][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3096.704669][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3096.743759][T20963] 8021q: adding VLAN 0 to HW filter on device team0
[ 3096.782673][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3096.816488][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3096.825010][T18322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3096.832153][T18322] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3096.896968][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3096.905169][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3096.946156][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3096.954752][T18322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3096.962002][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3097.015811][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3097.077941][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3097.098019][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3097.128426][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3097.156484][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3097.186272][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3097.195123][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3097.216413][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3097.245209][T20963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3097.276511][T20963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3097.290758][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3097.301127][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3097.326834][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3097.407088][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3097.414703][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3097.452243][T20963] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3097.510379][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3097.526718][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3097.587178][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3097.616760][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3097.630045][T20963] device veth0_vlan entered promiscuous mode
[ 3097.648258][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3097.666152][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3097.706785][T20963] device veth1_vlan entered promiscuous mode
[ 3097.786966][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3097.795254][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3097.817843][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3097.846351][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3097.859407][T20963] device veth0_macvtap entered promiscuous mode
[ 3097.881092][T20963] device veth1_macvtap entered promiscuous mode
[ 3097.982455][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3098.007195][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.035764][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3098.055775][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.076057][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3098.096208][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.117132][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3098.145452][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.165946][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3098.196151][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.217141][T20963] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3098.233005][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3098.247615][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3098.267944][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3098.286773][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3098.309271][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3098.337423][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.355463][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3098.376238][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.406349][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3098.437935][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.455450][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3098.475725][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.497594][T20963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3098.526320][T20963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3098.546959][T20963] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3098.564039][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3098.576727][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3098.755377][T30821] Bluetooth: hci1: command 0x041b tx timeout
[ 3098.788989][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3098.835611][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3098.873319][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3098.929317][  T951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3098.945695][  T951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3098.988927][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3099.147197][T20972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.180656][T20975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.229173][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.257305][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.288441][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.317933][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.347642][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.368928][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.398495][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.428652][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.447408][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.488815][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.516786][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.538304][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.570042][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.597662][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.627025][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.648327][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.679049][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.707463][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.729457][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.758572][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.790950][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.817935][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.846992][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.867768][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.899044][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3099.926308][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3101.169851][  T951] device hsr_slave_0 left promiscuous mode
[ 3101.189862][  T951] device hsr_slave_1 left promiscuous mode
[ 3101.206821][  T951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3101.214377][  T951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3101.246218][  T951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3101.253678][  T951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3101.278056][  T951] device bridge_slave_1 left promiscuous mode
[ 3101.284375][  T951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3101.317749][  T951] device bridge_slave_0 left promiscuous mode
[ 3101.323991][  T951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3101.356447][  T951] device veth1_macvtap left promiscuous mode
[ 3101.362532][  T951] device veth0_macvtap left promiscuous mode
[ 3101.385852][  T951] device veth1_vlan left promiscuous mode
[ 3101.391748][  T951] device veth0_vlan left promiscuous mode
[ 3101.953097][  T951] team0 (unregistering): Port device team_slave_1 removed
[ 3101.998039][  T951] team0 (unregistering): Port device team_slave_0 removed
[ 3102.030588][  T951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3102.076398][  T951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3102.346368][  T951] bond0 (unregistering): Released all slaves
[ 3104.024760][T20979] chnl_net:caif_netlink_parms(): no params data found
[ 3104.172584][T20979] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3104.215623][T20979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3104.225220][T20979] device bridge_slave_0 entered promiscuous mode
[ 3104.279339][T20979] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3104.303114][T20979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3104.356108][T20979] device bridge_slave_1 entered promiscuous mode
[ 3104.470640][T20979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3104.520583][T20979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3104.642116][T20979] team0: Port device team_slave_0 added
[ 3104.686407][T20979] team0: Port device team_slave_1 added
[ 3104.788258][T20979] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3104.795230][T20979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3104.885452][T20979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3104.935717][T20979] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3104.942688][T20979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3105.035340][T20979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3105.169483][T20979] device hsr_slave_0 entered promiscuous mode
[ 3105.197859][T20979] device hsr_slave_1 entered promiscuous mode
[ 3105.226404][T20979] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3105.233995][T20979] Cannot create hsr debugfs directory
[ 3105.695815][T19927] Bluetooth: hci1: command 0x0409 tx timeout
[ 3105.865057][T20979] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3105.917934][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3105.946516][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3105.972216][T20979] 8021q: adding VLAN 0 to HW filter on device team0
[ 3106.027175][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3106.037830][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3106.055974][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3106.063079][ T9169] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3106.125930][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3106.136194][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3106.166324][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3106.195635][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3106.202730][ T9169] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3106.240445][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3106.289217][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3106.331004][T19927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3106.342419][T19927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3106.361081][T19927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3106.386580][T19927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3106.416324][T19927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3106.426811][T19927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3106.446240][T19927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3106.466679][T19927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3106.486124][T19927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3106.510327][T20979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3106.566421][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3106.573972][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3106.616475][T20979] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3106.670338][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3106.696974][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3106.753315][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3106.776499][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3106.790160][T20979] device veth0_vlan entered promiscuous mode
[ 3106.798262][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3106.816685][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3106.834249][T20979] device veth1_vlan entered promiscuous mode
[ 3106.919284][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3106.936315][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3106.955929][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3106.966384][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3106.990667][T20979] device veth0_macvtap entered promiscuous mode
[ 3107.020272][T20979] device veth1_macvtap entered promiscuous mode
[ 3107.071793][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3107.096561][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.115814][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3107.135342][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.147855][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3107.175687][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.196089][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3107.215338][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.235369][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3107.255360][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.278864][T20979] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3107.298881][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3107.316271][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3107.324671][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3107.346495][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3107.369222][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3107.395784][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.415349][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3107.436221][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.456490][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3107.485336][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.505342][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3107.525337][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.535264][T20979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3107.575658][T20979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3107.597563][T20979] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3107.605017][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3107.623980][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3107.775796][T18322] Bluetooth: hci1: command 0x041b tx timeout
[ 3107.860229][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3107.906403][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3107.949488][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3108.012838][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3108.029070][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3108.061008][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3108.251463][T20988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.268015][T20991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.292890][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.304805][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.317449][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.338196][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.366791][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.389891][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.417550][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.437259][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.467479][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.487989][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.518284][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.546913][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.569000][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.597468][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.626767][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.647371][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.678464][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.697875][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.726865][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.747442][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.777481][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.808399][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.829096][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.857424][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.877909][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.917555][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.940836][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.967853][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3108.999310][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.017308][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.049817][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.077336][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.097803][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.127302][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.148021][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.178293][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.206729][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.228013][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.257449][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.286628][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.307283][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.338281][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.357924][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:56 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x801, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{}, 0x0, 0x0, 0x0, 0x0, "abd33d777b15138e"}, 0x10}}, 0x0)

02:15:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:56 executing program 2:
r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x0)
ioctl$I2C_RETRIES(r0, 0x701, 0x0)

02:15:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000000980500658297f0b6ebdb47c36900", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0) (async)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x268, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x34bcbcaf56df80ea}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000008021100000008021104000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0) (async)
sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x28, r6, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x42}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x4, 0x5, 0x44, @void}, 0x1e) (rerun: 32)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:56 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0xaa, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="7b073e059df8"}, 0x14)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

02:15:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="c8"})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)

02:15:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x5}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:56 executing program 1:
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x46)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

[ 3109.543438][T21005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3109.558069][T21004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="c8"})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)

02:15:56 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @private}]}}}]}, 0x40}}, 0x0)

02:15:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x6}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3109.721462][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.778140][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f80ecdb4cb9460a480e0013000000e3060007000000000600140040fe00ff050003001201", 0x2e}], 0x1}, 0x0)

[ 3109.846538][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.860853][T18322] Bluetooth: hci1: command 0x040f tx timeout
02:15:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="c8"})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)

02:15:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x7}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3109.898435][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3109.979941][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.030277][T21022] : renamed from caif0
[ 3110.077914][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.099238][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.116993][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.130193][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.154562][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.189109][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.212176][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.241567][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.260256][T21022] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 3110.298747][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.388862][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.456578][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.498330][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.517282][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.547382][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.589620][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.626450][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x7df4}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:57 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000200)=@deltclass={0x2c, 0x29, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0xa}]}, 0x2c}}, 0x0)

02:15:57 executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:15:57 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0xaa, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="7b073e059df8"}, 0x14)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

02:15:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x8}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f80ecdb4cb9460a480e0013000000e3060007000000000600140040fe00ff050003001201", 0x2e}], 0x1}, 0x0)

[ 3110.647903][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3110.754009][T21031] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 3110.835530][T21041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
02:15:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x9}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:57 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x68001)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_connect={0xcf9})

02:15:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f80ecdb4cb9460a480e0013000000e3060007000000000600140040fe00ff050003001201", 0x2e}], 0x1}, 0x0)

[ 3110.929406][T21045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3111.050004][T21040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3111.104387][T21050] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 3111.159255][T21040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xe}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f80ecdb4cb9460a480e0013000000e3060007000000000600140040fe00ff050003001201", 0x2e}], 0x1}, 0x0)

02:15:58 executing program 2:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x5}, r0, 0xfdffbfffffffffff, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x9, 0x0, 0x2, 0x0, 0xa8, 0x2208c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x20}, 0x104, 0x0, 0x6, 0x0, 0x8, 0x8, 0x6, 0x0, 0xffffffff, 0x0, 0x5e6}, r0, 0x10, 0xffffffffffffffff, 0x2)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000004c0)="b0c3f841b632e9058926dd4fccfbcf1cce125bcab912b7f647f4504836eeb169a656acfec46e2b446fbef66030df9b06179f0a5205ffffc4024471056765b2dc1b32bb6af03bef1c70e6412b6502545982e132a72aaf1fd866e53b7d5079d71032c8971e370b83075198390cbcebf417243c1033a79244418be78e1c1aaaead296813c39de86bb36d5f36f6513d1a4019471c1cbef01e94f2d08fa4216f783510d1f21bd16cb7b46ed4d1d2e62918fef77074391d772f4dbbea0c83d8b7a711c25a0a4663c438ac20697c7a38cddbcb03e0cc2ad160c974b6b081bd635455dc411de18a573f5b0125a8b", 0xea, 0x40, &(0x7f00000005c0)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc1e}, 0x1c)
ptrace$cont(0x9, 0x0, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

[ 3111.508905][T21058] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
02:15:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x7df4}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xf}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:58 executing program 0:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0xaa, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="7b073e059df8"}, 0x14)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

02:15:58 executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

[ 3111.753532][T21061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:58 executing program 1:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:15:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x60}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3111.856423][T21072] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3111.936512][ T9175] Bluetooth: hci1: command 0x0419 tx timeout
02:15:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xf0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:15:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x7df4}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:15:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x300}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3112.386626][T21089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3112.485870][T21092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:15:59 executing program 0:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:15:59 executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:15:59 executing program 2:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x5}, r0, 0xfdffbfffffffffff, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x9, 0x0, 0x2, 0x0, 0xa8, 0x2208c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x20}, 0x104, 0x0, 0x6, 0x0, 0x8, 0x8, 0x6, 0x0, 0xffffffff, 0x0, 0x5e6}, r0, 0x10, 0xffffffffffffffff, 0x2)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000004c0)="b0c3f841b632e9058926dd4fccfbcf1cce125bcab912b7f647f4504836eeb169a656acfec46e2b446fbef66030df9b06179f0a5205ffffc4024471056765b2dc1b32bb6af03bef1c70e6412b6502545982e132a72aaf1fd866e53b7d5079d71032c8971e370b83075198390cbcebf417243c1033a79244418be78e1c1aaaead296813c39de86bb36d5f36f6513d1a4019471c1cbef01e94f2d08fa4216f783510d1f21bd16cb7b46ed4d1d2e62918fef77074391d772f4dbbea0c83d8b7a711c25a0a4663c438ac20697c7a38cddbcb03e0cc2ad160c974b6b081bd635455dc411de18a573f5b0125a8b", 0xea, 0x40, &(0x7f00000005c0)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc1e}, 0x1c)
ptrace$cont(0x9, 0x0, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

02:15:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x500}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:16:00 executing program 4:
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000780)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000060000000800030029847d81cb8429d431dd363d9f789db1bb1cb81d505bb093841bf346444831fcb81ae4ea9045dbc0b5652c0e4e6682c8c43e79093f5b604c85518ee654fa5149420f182d6c5cc3c84c3492814661b54ad2393710db0b2087433ecce860abc5e06751c7c90b0a39f9a5c15115c325c640fd36755c4431be17fa118b59706cd63cf7e0de841669153568b0f80dafe6477754bac81971e971d04375fdbe9165a1a5699f19d72e6700be", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x1e8, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6497792d60ead895d33cc5a33ab451e350645eaf9dd74ed9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "695c42cac52531f8e120739a32b0babd836cc7421fefa533"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "728f5d6882f847515483b5f780ab97df70adf3b76d6fd97d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2149d612f27d5d2b4cfa00ce1f9d3c74a2c4a1818f6343f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f43acc7630a7ce3450cd454c9e834f85294f617f294b6ea1"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6c91d38eb0398be571efe399feecfab820903c525abb8555"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "45b219fdd577e31fd8a0a6ed01f864f07b5504b65ccc16e8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8004}, 0x40040)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000100000000200ffff0000000000002078e051ae170d90832ca5af3b0e350f826ac1"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b96fd111824"], 0x28)

02:16:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x600}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:16:00 executing program 1:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

[ 3113.195951][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3113.226510][T21103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:16:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x700}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3113.448669][T21103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3113.574413][T21102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:16:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x900}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:16:01 executing program 4:
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000780)=0x4) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000060000000800030029847d81cb8429d431dd363d9f789db1bb1cb81d505bb093841bf346444831fcb81ae4ea9045dbc0b5652c0e4e6682c8c43e79093f5b604c85518ee654fa5149420f182d6c5cc3c84c3492814661b54ad2393710db0b2087433ecce860abc5e06751c7c90b0a39f9a5c15115c325c640fd36755c4431be17fa118b59706cd63cf7e0de841669153568b0f80dafe6477754bac81971e971d04375fdbe9165a1a5699f19d72e6700be", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x1e8, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6497792d60ead895d33cc5a33ab451e350645eaf9dd74ed9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "695c42cac52531f8e120739a32b0babd836cc7421fefa533"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "728f5d6882f847515483b5f780ab97df70adf3b76d6fd97d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2149d612f27d5d2b4cfa00ce1f9d3c74a2c4a1818f6343f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f43acc7630a7ce3450cd454c9e834f85294f617f294b6ea1"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6c91d38eb0398be571efe399feecfab820903c525abb8555"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "45b219fdd577e31fd8a0a6ed01f864f07b5504b65ccc16e8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8004}, 0x40040) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) (async, rerun: 64)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000100000000200ffff0000000000002078e051ae170d90832ca5af3b0e350f826ac1"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b96fd111824"], 0x28)

02:16:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xb8c}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3114.130753][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
02:16:01 executing program 1:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:16:01 executing program 0:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:16:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xe00}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:16:01 executing program 2:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x5}, r0, 0xfdffbfffffffffff, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x9, 0x0, 0x2, 0x0, 0xa8, 0x2208c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x20}, 0x104, 0x0, 0x6, 0x0, 0x8, 0x8, 0x6, 0x0, 0xffffffff, 0x0, 0x5e6}, r0, 0x10, 0xffffffffffffffff, 0x2)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000004c0)="b0c3f841b632e9058926dd4fccfbcf1cce125bcab912b7f647f4504836eeb169a656acfec46e2b446fbef66030df9b06179f0a5205ffffc4024471056765b2dc1b32bb6af03bef1c70e6412b6502545982e132a72aaf1fd866e53b7d5079d71032c8971e370b83075198390cbcebf417243c1033a79244418be78e1c1aaaead296813c39de86bb36d5f36f6513d1a4019471c1cbef01e94f2d08fa4216f783510d1f21bd16cb7b46ed4d1d2e62918fef77074391d772f4dbbea0c83d8b7a711c25a0a4663c438ac20697c7a38cddbcb03e0cc2ad160c974b6b081bd635455dc411de18a573f5b0125a8b", 0xea, 0x40, &(0x7f00000005c0)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc1e}, 0x1c)
ptrace$cont(0x9, 0x0, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

02:16:01 executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:16:01 executing program 4:
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000780)=0x4) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000060000000800030029847d81cb8429d431dd363d9f789db1bb1cb81d505bb093841bf346444831fcb81ae4ea9045dbc0b5652c0e4e6682c8c43e79093f5b604c85518ee654fa5149420f182d6c5cc3c84c3492814661b54ad2393710db0b2087433ecce860abc5e06751c7c90b0a39f9a5c15115c325c640fd36755c4431be17fa118b59706cd63cf7e0de841669153568b0f80dafe6477754bac81971e971d04375fdbe9165a1a5699f19d72e6700be", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x1e8, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6497792d60ead895d33cc5a33ab451e350645eaf9dd74ed9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "695c42cac52531f8e120739a32b0babd836cc7421fefa533"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "728f5d6882f847515483b5f780ab97df70adf3b76d6fd97d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2149d612f27d5d2b4cfa00ce1f9d3c74a2c4a1818f6343f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f43acc7630a7ce3450cd454c9e834f85294f617f294b6ea1"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6c91d38eb0398be571efe399feecfab820903c525abb8555"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "45b219fdd577e31fd8a0a6ed01f864f07b5504b65ccc16e8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8004}, 0x40040) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000100000000200ffff0000000000002078e051ae170d90832ca5af3b0e350f826ac1"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b96fd111824"], 0x28) (rerun: 64)

02:16:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xf00}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3114.953993][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
02:16:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x1824}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3115.055031][T21147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3115.208997][T21146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3115.396621][T21148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:16:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x2418}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3115.507364][T21148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3115.536674][T21148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3115.585218][T21148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3115.657286][T21148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:16:02 executing program 1:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x5}, r0, 0xfdffbfffffffffff, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x9, 0x0, 0x2, 0x0, 0xa8, 0x2208c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x20}, 0x104, 0x0, 0x6, 0x0, 0x8, 0x8, 0x6, 0x0, 0xffffffff, 0x0, 0x5e6}, r0, 0x10, 0xffffffffffffffff, 0x2)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000004c0)="b0c3f841b632e9058926dd4fccfbcf1cce125bcab912b7f647f4504836eeb169a656acfec46e2b446fbef66030df9b06179f0a5205ffffc4024471056765b2dc1b32bb6af03bef1c70e6412b6502545982e132a72aaf1fd866e53b7d5079d71032c8971e370b83075198390cbcebf417243c1033a79244418be78e1c1aaaead296813c39de86bb36d5f36f6513d1a4019471c1cbef01e94f2d08fa4216f783510d1f21bd16cb7b46ed4d1d2e62918fef77074391d772f4dbbea0c83d8b7a711c25a0a4663c438ac20697c7a38cddbcb03e0cc2ad160c974b6b081bd635455dc411de18a573f5b0125a8b", 0xea, 0x40, &(0x7f00000005c0)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc1e}, 0x1c)
ptrace$cont(0x9, 0x0, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

02:16:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x3f00}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3115.834783][T21148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:16:03 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x6000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:16:03 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x8c0b}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:16:04 executing program 0:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:16:04 executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:16:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xf000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:16:04 executing program 2:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x5}, r0, 0xfdffbfffffffffff, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x9, 0x0, 0x2, 0x0, 0xa8, 0x2208c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x20}, 0x104, 0x0, 0x6, 0x0, 0x8, 0x8, 0x6, 0x0, 0xffffffff, 0x0, 0x5e6}, r0, 0x10, 0xffffffffffffffff, 0x2)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000004c0)="b0c3f841b632e9058926dd4fccfbcf1cce125bcab912b7f647f4504836eeb169a656acfec46e2b446fbef66030df9b06179f0a5205ffffc4024471056765b2dc1b32bb6af03bef1c70e6412b6502545982e132a72aaf1fd866e53b7d5079d71032c8971e370b83075198390cbcebf417243c1033a79244418be78e1c1aaaead296813c39de86bb36d5f36f6513d1a4019471c1cbef01e94f2d08fa4216f783510d1f21bd16cb7b46ed4d1d2e62918fef77074391d772f4dbbea0c83d8b7a711c25a0a4663c438ac20697c7a38cddbcb03e0cc2ad160c974b6b081bd635455dc411de18a573f5b0125a8b", 0xea, 0x40, &(0x7f00000005c0)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc1e}, 0x1c)
ptrace$cont(0x9, 0x0, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

[ 3117.996988][T15847] device hsr_slave_0 left promiscuous mode
[ 3118.007022][T15847] device hsr_slave_1 left promiscuous mode
[ 3118.029627][T15847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3118.062364][T15847] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3118.100257][T15847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3118.131893][T15847] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3118.165179][T15847] device bridge_slave_1 left promiscuous mode
[ 3118.191156][T15847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3118.216154][T15847] device bridge_slave_0 left promiscuous mode
[ 3118.222724][T15847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3118.310347][T15847] device veth1_macvtap left promiscuous mode
[ 3118.317598][T15847] device veth0_macvtap left promiscuous mode
[ 3118.324208][T15847] device veth1_vlan left promiscuous mode
[ 3118.331698][T15847] device veth0_vlan left promiscuous mode
[ 3118.739910][T21177] syz-executor.0: vmalloc error: size 278528, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[ 3118.762811][T21177] CPU: 1 PID: 21177 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0
[ 3118.771616][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3118.781696][T21177] Call Trace:
[ 3118.784990][T21177]  <TASK>
[ 3118.787938][T21177]  dump_stack_lvl+0xcd/0x134
[ 3118.792826][T21177]  warn_alloc.cold+0x87/0x17a
[ 3118.797535][T21177]  ? zone_watermark_ok_safe+0x290/0x290
[ 3118.803268][T21177]  ? __vmalloc_node_range+0x574/0xab0
[ 3118.808675][T21177]  __vmalloc_node_range+0x883/0xab0
[ 3118.813910][T21177]  ? vfree_atomic+0xe0/0xe0
[ 3118.818447][T21177]  ? snd_dma_get_ops+0x45/0xe0
[ 3118.823244][T21177]  ? __snd_dma_alloc_pages+0x50/0x90
[ 3118.828564][T21177]  __vmalloc+0x69/0x80
[ 3118.832662][T21177]  ? __snd_dma_alloc_pages+0x50/0x90
[ 3118.837971][T21177]  ? snd_dma_vmalloc_free+0x40/0x40
[ 3118.843197][T21177]  __snd_dma_alloc_pages+0x50/0x90
[ 3118.848347][T21177]  snd_dma_alloc_dir_pages+0x14d/0x240
[ 3118.853838][T21177]  do_alloc_pages+0xc2/0x180
[ 3118.858466][T21177]  snd_pcm_lib_malloc_pages+0x3e2/0x990
[ 3118.864045][T21177]  snd_pcm_hw_params+0x1408/0x1990
[ 3118.869295][T21177]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3118.875477][T21177]  ? snd_pcm_capture_open+0x140/0x140
[ 3118.880869][T21177]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3118.887141][T21177]  ? snd_pcm_kernel_ioctl+0xb4/0x310
[ 3118.892544][T21177]  snd_pcm_kernel_ioctl+0x164/0x310
[ 3118.897768][T21177]  snd_pcm_oss_change_params_locked+0x13c8/0x3bf0
[ 3118.904230][T21177]  ? snd_pcm_plugin_append+0x190/0x190
[ 3118.909719][T21177]  ? mutex_lock_io_nested+0x1150/0x1150
[ 3118.915292][T21177]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3118.921480][T21177]  ? snd_pcm_oss_make_ready+0x7c/0x1b0
[ 3118.926968][T21177]  ? snd_pcm_oss_make_ready+0xb5/0x1b0
[ 3118.932454][T21177]  snd_pcm_oss_make_ready+0xe7/0x1b0
[ 3118.937770][T21177]  snd_pcm_oss_sync+0x1de/0x800
[ 3118.942652][T21177]  snd_pcm_oss_release+0x276/0x300
[ 3118.947792][T21177]  __fput+0x286/0x9f0
[ 3118.951880][T21177]  ? snd_pcm_oss_sync+0x800/0x800
[ 3118.956929][T21177]  task_work_run+0xdd/0x1a0
[ 3118.961460][T21177]  exit_to_user_mode_prepare+0x27e/0x290
[ 3118.967116][T21177]  syscall_exit_to_user_mode+0x19/0x60
[ 3118.972600][T21177]  __do_fast_syscall_32+0x72/0xf0
[ 3118.977658][T21177]  do_fast_syscall_32+0x2f/0x70
[ 3118.982559][T21177]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[ 3118.988919][T21177] RIP: 0023:0xf6e94549
[ 3118.993000][T21177] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 3119.012637][T21177] RSP: 002b:00000000f588e5bc EFLAGS: 00000296 ORIG_RAX: 00000000000001b4
[ 3119.021073][T21177] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ffffffff
[ 3119.029056][T21177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 3119.037131][T21177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3119.045113][T21177] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 3119.053108][T21177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3119.061107][T21177]  </TASK>
[ 3119.549236][T15847] team0 (unregistering): Port device team_slave_1 removed
[ 3119.594477][T15847] team0 (unregistering): Port device team_slave_0 removed
[ 3119.629115][T15847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3119.677220][T15847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3119.899415][T15847] bond0 (unregistering): Released all slaves
[ 3120.136127][T21177] Mem-Info:
[ 3120.139293][T21177] active_anon:8489 inactive_anon:278362 isolated_anon:0
[ 3120.139293][T21177]  active_file:4344 inactive_file:46906 isolated_file:0
[ 3120.139293][T21177]  unevictable:774 dirty:12 writeback:0
[ 3120.139293][T21177]  slab_reclaimable:20698 slab_unreclaimable:122996
[ 3120.139293][T21177]  mapped:48698 shmem:29328 pagetables:7873 bounce:0
[ 3120.139293][T21177]  kernel_misc_reclaimable:0
[ 3120.139293][T21177]  free:1096330 free_pcp:6541 free_cma:0
[ 3120.285831][T21177] Node 0 active_anon:33948kB inactive_anon:1112540kB active_file:17304kB inactive_file:187624kB unevictable:1560kB isolated(anon):0kB isolated(file):0kB mapped:194792kB dirty:44kB writeback:0kB shmem:114860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 743424kB writeback_tmp:0kB kernel_stack:22904kB pagetables:31488kB all_unreclaimable? no
[ 3120.423972][T21177] Node 1 active_anon:8kB inactive_anon:908kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:144kB pagetables:4kB all_unreclaimable? no
[ 3120.495580][T21177] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3120.534594][T21177] lowmem_reserve[]: 0 2645 2645 2645 2645
[ 3120.555042][T21177] Node 0 DMA32 free:422644kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:33948kB inactive_anon:1112540kB active_file:17304kB inactive_file:187624kB unevictable:1560kB writepending:44kB present:3129332kB managed:2716760kB mlocked:24kB bounce:0kB free_pcp:27004kB local_pcp:5748kB free_cma:0kB
[ 3120.675484][T21177] lowmem_reserve[]: 0 0 0 0 0
[ 3120.680276][T21177] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3120.819143][T21177] lowmem_reserve[]: 0 0 0 0 0
[ 3120.823921][T21177] Node 1 Normal free:3947956kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:908kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3120.955659][T21177] lowmem_reserve[]: 0 0 0 0 0
[ 3120.960435][T21177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 3121.005516][T21177] Node 0 DMA32: 7141*4kB (UME) 3080*8kB (UME) 909*16kB (UME) 685*32kB (UME) 217*64kB (UME) 99*128kB (UME) 41*256kB (ME) 25*512kB (ME) 18*1024kB (M) 17*2048kB (M) 56*4096kB (UM) = 422148kB
[ 3121.082410][T21186] chnl_net:caif_netlink_parms(): no params data found
[ 3121.095523][T21177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 3121.158430][T21177] Node 1 Normal: 139*4kB (UE) 43*8kB (UE) 29*16kB (UE) 165*32kB (UME) 87*64kB (UME) 30*128kB (UME) 5*256kB (U) 7*512kB (U) 1*1024kB (U) 1*2048kB (M) 958*4096kB (ME) = 3947956kB
[ 3121.245732][T21177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3121.296396][T21177] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[ 3121.315518][T21177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3121.325105][T21177] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3121.348300][T21186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3121.376592][T21186] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3121.384906][T21177] 40677 total pagecache pages
[ 3121.405651][T21177] 0 pages in swap cache
[ 3121.409838][T21177] Swap cache stats: add 0, delete 0, find 0/0
[ 3121.425583][T21186] device bridge_slave_0 entered promiscuous mode
[ 3121.447542][T21177] Free swap  = 0kB
[ 3121.451301][T21177] Total swap = 0kB
[ 3121.455023][T21177] 2097051 pages RAM
[ 3121.438207][T21186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3121.483172][T21186] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3121.515382][T21177] 0 pages HighMem/MovableOnly
[ 3121.520099][T21177] 384516 pages reserved
[ 3121.524253][T21177] 0 pages cma reserved
[ 3121.530368][T21186] device bridge_slave_1 entered promiscuous mode
[ 3121.669804][T21186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3121.710836][T21186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3121.838795][T21186] team0: Port device team_slave_0 added
[ 3121.876290][T21186] team0: Port device team_slave_1 added
[ 3121.988941][T21186] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3122.016323][T21186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3122.106222][T21186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3122.169924][T21186] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3122.185471][T21186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3122.275388][T21186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3122.389353][T21186] device hsr_slave_0 entered promiscuous mode
[ 3122.426461][T21186] device hsr_slave_1 entered promiscuous mode
[ 3122.447963][T21186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3122.476179][T21186] Cannot create hsr debugfs directory
[ 3122.656123][T18322] Bluetooth: hci1: command 0x0409 tx timeout
[ 3123.088356][T21186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3123.167348][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3123.185919][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3123.220995][T21186] 8021q: adding VLAN 0 to HW filter on device team0
[ 3123.257131][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3123.267413][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3123.296249][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3123.303338][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3123.377058][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3123.386602][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3123.396829][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3123.415688][T17664] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3123.422794][T17664] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3123.445837][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3123.492979][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3123.508198][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3123.529223][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3123.556903][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3123.577006][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3123.599422][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3123.626208][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3123.663661][T21186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3123.706933][T21186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3123.738646][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3123.748317][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3123.776969][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3123.859047][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3123.868092][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3123.904333][T21186] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3123.988171][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3124.006837][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3124.068983][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3124.086959][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3124.109638][T21186] device veth0_vlan entered promiscuous mode
[ 3124.128564][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3124.147397][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3124.163864][T21186] device veth1_vlan entered promiscuous mode
[ 3124.197877][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3124.272456][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3124.296625][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3124.319199][T21186] device veth0_macvtap entered promiscuous mode
[ 3124.361641][T21186] device veth1_macvtap entered promiscuous mode
[ 3124.456189][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3124.496351][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3124.525619][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3124.555562][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3124.585592][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3124.625483][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3124.657531][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3124.685522][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3124.705483][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3124.726289][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3124.746249][T16926] Bluetooth: hci1: command 0x041b tx timeout
[ 3124.773314][T21186] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3124.801105][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3124.811727][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3124.826730][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3124.846710][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3124.869543][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3124.896105][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3124.915552][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3124.945852][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3124.966585][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3124.986927][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3125.015866][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3125.035489][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3125.056449][T21186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3125.076731][T21186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3125.098661][T21186] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3125.136209][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3125.145219][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3125.368777][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3125.395477][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3125.431546][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3125.488950][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3125.501331][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3125.538003][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3125.687515][T21193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3125.768229][T21193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3125.808959][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3125.838146][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3125.876298][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3125.898890][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3125.927881][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3125.959306][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3125.977669][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.007322][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.039798][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.068718][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.098227][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.118230][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.147663][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.181368][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.206570][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.227744][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.262308][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.289451][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.307411][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.339391][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.367339][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.387253][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.419383][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.437795][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.467981][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.501404][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.523365][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.603136][T21194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3126.825815][T30821] Bluetooth: hci1: command 0x040f tx timeout
[ 3127.866508][   T44] device hsr_slave_0 left promiscuous mode
[ 3127.886587][   T44] device hsr_slave_1 left promiscuous mode
[ 3127.893743][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3127.916200][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3127.947656][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3127.955147][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3127.978768][   T44] device bridge_slave_1 left promiscuous mode
[ 3127.985056][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3128.017808][   T44] device bridge_slave_0 left promiscuous mode
[ 3128.024077][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3128.067845][   T44] device veth1_macvtap left promiscuous mode
[ 3128.073925][   T44] device veth0_macvtap left promiscuous mode
[ 3128.096521][   T44] device veth1_vlan left promiscuous mode
[ 3128.102384][   T44] device veth0_vlan left promiscuous mode
[ 3128.676684][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 3128.717876][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 3128.766735][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3128.852857][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3129.149633][   T44] bond0 (unregistering): Released all slaves
[ 3143.062325][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[ 3143.068860][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
[ 3143.852553][T21202] chnl_net:caif_netlink_parms(): no params data found
[ 3144.028584][T21202] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3144.047861][T21202] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3144.067329][T21202] device bridge_slave_0 entered promiscuous mode
[ 3144.088070][T21202] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3144.105513][T21202] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3144.126683][T21202] device bridge_slave_1 entered promiscuous mode
[ 3144.190479][T21202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3144.220300][T21202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3144.301833][T21202] team0: Port device team_slave_0 added
[ 3144.327430][T21202] team0: Port device team_slave_1 added
[ 3144.383558][T21202] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3144.405567][T21202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3144.456008][T21202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3144.491307][T21202] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3144.498608][T21202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3144.525948][T21202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3144.584806][T21202] device hsr_slave_0 entered promiscuous mode
[ 3144.609731][T21202] device hsr_slave_1 entered promiscuous mode
[ 3144.626171][T21202] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3144.633777][T21202] Cannot create hsr debugfs directory
[ 3144.858092][T21202] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3144.865196][T21202] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3144.872629][T21202] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3144.879746][T21202] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3144.917464][T18322] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3144.927792][T18322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3145.057340][T21202] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3145.096534][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3145.106252][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3145.130553][T21202] 8021q: adding VLAN 0 to HW filter on device team0
[ 3145.152356][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3145.166834][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3145.197372][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3145.204459][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3145.236954][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3145.256506][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3145.276557][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3145.283658][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3145.305850][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3145.341404][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3145.357317][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3145.378277][T17664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3145.409649][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3145.426516][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3145.447082][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3145.466594][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3145.476944][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3145.504327][T21202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3145.537239][T21202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3145.558716][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3145.568996][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3145.616914][ T9169] Bluetooth: hci1: command 0x0409 tx timeout
[ 3145.630032][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3145.639619][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3145.676165][T21202] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3145.737399][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3145.757176][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3145.806588][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3145.818190][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3145.840069][T21202] device veth0_vlan entered promiscuous mode
[ 3145.863042][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3145.873422][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3145.904789][T21202] device veth1_vlan entered promiscuous mode
[ 3145.928313][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3145.997665][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3146.007952][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3146.031064][T21202] device veth0_macvtap entered promiscuous mode
[ 3146.053353][T21202] device veth1_macvtap entered promiscuous mode
[ 3146.107305][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3146.135602][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.156362][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3146.177425][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.206118][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3146.225434][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.235273][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3146.276542][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.297722][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3146.325888][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.347236][T21202] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3146.358737][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3146.377450][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3146.396332][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3146.405164][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3146.439650][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3146.457873][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.485911][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3146.506227][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.525764][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3146.557067][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.576164][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3146.596210][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.615454][T21202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3146.657193][T21202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3146.687850][T21202] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3146.716493][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3146.726224][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3146.954932][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3146.985825][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3147.047095][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3147.059487][T15847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3147.080278][T15847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3147.118162][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3147.260445][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3147.290715][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.368954][T21211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.408056][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.439322][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.460085][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.488057][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.517480][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.561779][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.588401][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.617938][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.637500][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.667633][T21212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3147.695802][ T9169] Bluetooth: hci1: command 0x041b tx timeout
[ 3147.736688][T21213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3148.890137][T15847] device hsr_slave_0 left promiscuous mode
[ 3148.906486][T15847] device hsr_slave_1 left promiscuous mode
[ 3148.920360][T15847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3148.936152][T15847] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3148.966045][T15847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3148.973543][T15847] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3148.998107][T15847] device bridge_slave_1 left promiscuous mode
[ 3149.004362][T15847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3149.027771][T15847] device bridge_slave_0 left promiscuous mode
[ 3149.034019][T15847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3149.089331][T15847] device veth1_macvtap left promiscuous mode
[ 3149.106520][T15847] device veth0_macvtap left promiscuous mode
[ 3149.112656][T15847] device veth1_vlan left promiscuous mode
[ 3149.129753][T15847] device veth0_vlan left promiscuous mode
[ 3149.706402][T15847] team0 (unregistering): Port device team_slave_1 removed
[ 3149.747669][T15847] team0 (unregistering): Port device team_slave_0 removed
[ 3149.786416][T15847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3149.822488][T15847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3150.137611][T15847] bond0 (unregistering): Released all slaves
[ 3164.876587][T21219] chnl_net:caif_netlink_parms(): no params data found
[ 3164.988676][T21219] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3165.005546][T21219] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3165.013868][T21219] device bridge_slave_0 entered promiscuous mode
[ 3165.024363][T21219] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3165.032648][T21219] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3165.047467][T21219] device bridge_slave_1 entered promiscuous mode
[ 3165.110617][T21219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3165.124300][T21219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3165.187508][T21219] team0: Port device team_slave_0 added
[ 3165.217748][T21219] team0: Port device team_slave_1 added
[ 3165.266571][T21219] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3165.285613][T21219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3165.343998][T21219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3165.368977][T21219] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3165.385366][T21219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3165.445333][T21219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3165.523109][T21219] device hsr_slave_0 entered promiscuous mode
[ 3165.556573][T21219] device hsr_slave_1 entered promiscuous mode
[ 3165.577197][T21219] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3165.584791][T21219] Cannot create hsr debugfs directory
[ 3165.827752][T21219] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3165.834852][T21219] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3165.842272][T21219] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3165.849376][T21219] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3165.940159][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3165.949809][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3166.076009][T21219] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3166.128926][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3166.138446][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3166.164050][T21219] 8021q: adding VLAN 0 to HW filter on device team0
[ 3166.188077][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3166.198402][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3166.226164][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3166.233253][ T9169] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3166.269071][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3166.286225][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3166.305941][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3166.313037][ T9169] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3166.336464][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3166.378197][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3166.388778][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3166.408542][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3166.452368][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3166.461950][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3166.487484][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3166.501081][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3166.526218][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3166.543664][T21219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3166.576677][T21219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3166.607217][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3166.617957][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3166.669933][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3166.679758][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3166.707371][T21219] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3166.737075][T16926] Bluetooth: hci1: command 0x0409 tx timeout
[ 3166.774914][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3166.797031][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3166.838840][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3166.856183][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3166.882037][T21219] device veth0_vlan entered promiscuous mode
[ 3166.893287][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3166.906468][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3166.934113][T21219] device veth1_vlan entered promiscuous mode
[ 3166.958207][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3167.024500][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3167.041557][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3167.070151][T21219] device veth0_macvtap entered promiscuous mode
[ 3167.096059][T21219] device veth1_macvtap entered promiscuous mode
[ 3167.133483][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3167.165334][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.175185][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3167.205650][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.225575][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3167.245569][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.272688][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3167.302972][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.326487][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3167.345334][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.367140][T21219] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3167.379433][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3167.396443][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3167.416187][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3167.437147][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3167.459796][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3167.475445][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.485280][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3167.525368][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.535215][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3167.565630][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.595345][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3167.615526][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.635360][T21219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3167.655334][T21219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3167.676953][T21219] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3167.693559][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3167.717283][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3167.929345][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3167.946174][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3167.987383][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3168.053547][T17239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3168.068575][T17239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3168.104544][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3168.314499][T21226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.399476][T21226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.437645][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.458280][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.488516][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.517632][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.547981][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.577544][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.608014][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.627267][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.659135][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.677501][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.707933][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.741625][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.766166][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3168.815499][T17663] Bluetooth: hci1: command 0x041b tx timeout
[ 3168.836900][T21227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3170.075185][T17239] device hsr_slave_0 left promiscuous mode
[ 3170.098450][T17239] device hsr_slave_1 left promiscuous mode
[ 3170.107119][T17239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3170.114566][T17239] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3170.148058][T17239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3170.165519][T17239] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3170.187933][T17239] device bridge_slave_1 left promiscuous mode
[ 3170.194180][T17239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3170.221746][T17239] device bridge_slave_0 left promiscuous mode
[ 3170.235486][T17239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3170.266801][T17239] device veth1_macvtap left promiscuous mode
[ 3170.275685][T17239] device veth0_macvtap left promiscuous mode
[ 3170.281859][T17239] device veth1_vlan left promiscuous mode
[ 3170.306811][T17239] device veth0_vlan left promiscuous mode
[ 3170.861032][T17239] team0 (unregistering): Port device team_slave_1 removed
[ 3170.900649][T17239] team0 (unregistering): Port device team_slave_0 removed
[ 3170.934282][T17239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3170.978960][T17239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3171.290832][T17239] bond0 (unregistering): Released all slaves
[ 3186.113865][T21238] chnl_net:caif_netlink_parms(): no params data found
[ 3186.289766][T21238] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3186.307120][T21238] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3186.327595][T21238] device bridge_slave_0 entered promiscuous mode
[ 3186.350312][T21238] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3186.375659][T21238] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3186.384092][T21238] device bridge_slave_1 entered promiscuous mode
[ 3186.450436][T21238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3186.480638][T21238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3186.580033][T21238] team0: Port device team_slave_0 added
[ 3186.600206][T21238] team0: Port device team_slave_1 added
[ 3186.657419][T21238] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3186.664408][T21238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3186.725846][T21238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3186.759202][T21238] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3186.775961][T21238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3186.802167][T21238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3186.852245][T21238] device hsr_slave_0 entered promiscuous mode
[ 3186.876710][T21238] device hsr_slave_1 entered promiscuous mode
[ 3186.895704][T21238] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3186.903306][T21238] Cannot create hsr debugfs directory
[ 3187.100698][T21238] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3187.107840][T21238] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3187.115218][T21238] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3187.122351][T21238] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3187.169394][T16935] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3187.209310][T16935] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3187.405274][T21238] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3187.447264][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3187.467436][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3187.480479][T21238] 8021q: adding VLAN 0 to HW filter on device team0
[ 3187.508477][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3187.526952][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3187.546144][T17663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3187.553233][T17663] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3187.597421][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3187.607533][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3187.625981][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3187.633055][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3187.665982][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3187.686387][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3187.717281][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3187.739201][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3187.757000][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3187.787511][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3187.816447][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3187.836118][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3187.855790][T30821] Bluetooth: hci1: command 0x0409 tx timeout
[ 3187.857521][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3187.887060][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3187.906573][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3187.928473][T21238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3187.986820][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3187.994365][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3188.025829][T21238] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3188.082238][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3188.092994][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3188.159916][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3188.170245][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3188.191022][T21238] device veth0_vlan entered promiscuous mode
[ 3188.207079][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3188.217525][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3188.244146][T21238] device veth1_vlan entered promiscuous mode
[ 3188.330280][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3188.346375][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3188.370768][T21238] device veth0_macvtap entered promiscuous mode
[ 3188.408272][T21238] device veth1_macvtap entered promiscuous mode
[ 3188.468410][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3188.486292][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3188.507071][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3188.532680][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3188.556547][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3188.576120][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3188.606117][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3188.625364][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3188.635209][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3188.666014][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3188.696756][T21238] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3188.707760][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3188.726471][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3188.747044][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3188.757604][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3188.793764][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3188.816420][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3188.836044][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3188.855488][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3188.885670][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3188.917150][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3188.945659][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3188.965396][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3188.985964][T21238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3189.016667][T21238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3189.039936][T21238] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3189.064540][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3189.087193][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3189.316695][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3189.325185][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3189.391817][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3189.440428][T15847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3189.469094][T15847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3189.508314][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3189.670684][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3189.710954][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3189.789075][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3189.818826][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3189.847334][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3189.877646][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3189.908107][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3189.939116][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3189.945662][T30821] Bluetooth: hci1: command 0x041b tx timeout
[ 3189.967127][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3189.987762][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.018924][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.048324][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.078085][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.104575][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.137999][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.158262][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.189307][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.218705][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.237856][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.267733][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.297972][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.317540][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.348533][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.377561][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.397930][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.432380][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.458554][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3190.489587][T21247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3191.803499][ T1040] device hsr_slave_0 left promiscuous mode
[ 3191.826214][ T1040] device hsr_slave_1 left promiscuous mode
[ 3191.836022][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3191.843475][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3191.868154][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3191.895818][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3191.917107][ T1040] device bridge_slave_1 left promiscuous mode
[ 3191.923361][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3191.947797][ T1040] device bridge_slave_0 left promiscuous mode
[ 3191.954125][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3191.996619][ T1040] device veth1_macvtap left promiscuous mode
[ 3192.002710][ T1040] device veth0_macvtap left promiscuous mode
[ 3192.025692][ T1040] device veth1_vlan left promiscuous mode
[ 3192.031624][ T1040] device veth0_vlan left promiscuous mode
[ 3192.598109][ T1040] team0 (unregistering): Port device team_slave_1 removed
[ 3192.638399][ T1040] team0 (unregistering): Port device team_slave_0 removed
[ 3192.667904][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3192.716168][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3193.011890][ T1040] bond0 (unregistering): Released all slaves
[ 3194.720028][T21252] chnl_net:caif_netlink_parms(): no params data found
[ 3194.928954][T21252] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3194.958030][T21252] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3194.966448][T21252] device bridge_slave_0 entered promiscuous mode
[ 3194.976443][T21252] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3194.983613][T21252] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3194.992287][T21252] device bridge_slave_1 entered promiscuous mode
[ 3195.032062][T21252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3195.059401][T21252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3195.239098][T21252] team0: Port device team_slave_0 added
[ 3195.269260][T21252] team0: Port device team_slave_1 added
[ 3195.368517][T21252] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3195.385429][T21252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3195.475528][T21252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3195.508941][T21252] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3195.540136][T21252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3195.615856][T21252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3195.799306][T21252] device hsr_slave_0 entered promiscuous mode
[ 3195.836771][T21252] device hsr_slave_1 entered promiscuous mode
[ 3195.846157][T21252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3195.853741][T21252] Cannot create hsr debugfs directory
[ 3196.400214][T21252] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3196.415656][T30821] Bluetooth: hci1: command 0x0409 tx timeout
[ 3196.457242][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3196.467980][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3196.501381][T21252] 8021q: adding VLAN 0 to HW filter on device team0
[ 3196.537740][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3196.548273][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3196.619724][T16935] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3196.626881][T16935] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3196.665974][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3196.674051][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3196.740976][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3196.785904][T16935] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3196.792998][T16935] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3196.801901][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3196.814158][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3196.835470][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3196.845120][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3196.916424][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3196.935774][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3196.945065][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3196.982749][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3196.991610][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3197.000810][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3197.010343][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3197.023415][T21252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3197.107340][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3197.114876][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3197.164578][T21252] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3197.254909][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3197.286607][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3197.357213][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3197.376006][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3197.388124][T21252] device veth0_vlan entered promiscuous mode
[ 3197.415926][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3197.434858][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3197.465018][T21252] device veth1_vlan entered promiscuous mode
[ 3197.540767][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3197.557450][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3197.576549][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3197.596041][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3197.619792][T21252] device veth0_macvtap entered promiscuous mode
[ 3197.646003][T21252] device veth1_macvtap entered promiscuous mode
[ 3197.691429][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3197.715465][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3197.745680][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3197.765507][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3197.786072][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3197.816265][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3197.835363][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3197.863966][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3197.885861][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3197.916740][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3197.937902][T21252] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3197.960637][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3197.971510][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3197.997277][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3198.016307][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3198.031834][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3198.057549][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3198.086049][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3198.106061][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3198.125350][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3198.155869][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3198.177654][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3198.195518][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3198.225497][T21252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3198.246485][T21252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3198.267669][T21252] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3198.282292][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3198.297323][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3198.495854][T10772] Bluetooth: hci1: command 0x041b tx timeout
[ 3198.519099][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3198.577105][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3198.616062][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3198.672135][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3198.692050][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3198.724753][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3198.872924][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3198.927885][T21259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.017088][T21259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.048192][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.077902][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.108048][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.127690][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.157662][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.187395][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.222548][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.248283][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.277899][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.299864][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.327325][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.350107][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.381071][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.408399][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.438261][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.468955][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.500491][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.527878][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.558023][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.578375][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.607882][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.637500][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.666284][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.688352][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.718201][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.738126][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.771260][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.798894][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.828326][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.847125][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.877599][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.907620][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.927397][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.959893][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3199.987523][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
dup3(r0, r3, 0x80000)

02:17:27 executing program 1:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x5}, r0, 0xfdffbfffffffffff, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x9, 0x0, 0x2, 0x0, 0xa8, 0x2208c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x20}, 0x104, 0x0, 0x6, 0x0, 0x8, 0x8, 0x6, 0x0, 0xffffffff, 0x0, 0x5e6}, r0, 0x10, 0xffffffffffffffff, 0x2)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000004c0)="b0c3f841b632e9058926dd4fccfbcf1cce125bcab912b7f647f4504836eeb169a656acfec46e2b446fbef66030df9b06179f0a5205ffffc4024471056765b2dc1b32bb6af03bef1c70e6412b6502545982e132a72aaf1fd866e53b7d5079d71032c8971e370b83075198390cbcebf417243c1033a79244418be78e1c1aaaead296813c39de86bb36d5f36f6513d1a4019471c1cbef01e94f2d08fa4216f783510d1f21bd16cb7b46ed4d1d2e62918fef77074391d772f4dbbea0c83d8b7a711c25a0a4663c438ac20697c7a38cddbcb03e0cc2ad160c974b6b081bd635455dc411de18a573f5b0125a8b", 0xea, 0x40, &(0x7f00000005c0)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc1e}, 0x1c)
ptrace$cont(0x9, 0x0, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

02:17:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x30000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:27 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
write(r0, &(0x7f0000000140)="240000001a005f0014f9f407000909000a00800000000000000000000800110000000000", 0x24)

02:17:27 executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:17:27 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x17, &(0x7f0000000040)={0x1}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)

[ 3200.023747][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:27 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x1, 0x2, [@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
close(r0)

02:17:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x34000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:27 executing program 2:
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8402, 0x0, 0x1, 0x0, 0x83, 0x40, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000))
openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2a000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={0x0, @xdp={0x2c, 0x2, 0x0, 0x2f}, @xdp={0x2c, 0x4, 0x0, 0x12}, @l2, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x10000, 0x7ff, 0x200})
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={<r5=>r0, 0x7, 0x4, 0x400})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180))
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2}, {0x0, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x1, 0x4, 0xffffffff, 0xfffffffd}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000f00)={'wg2\x00'})
ioctl$TUNATTACHFILTER(r0, 0x801054db, &(0x7f0000000200)={0x0, 0x0})

[ 3200.341724][T21273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:27 executing program 0:
socket(0x2b, 0x0, 0x1)

02:17:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x400300}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3200.469514][T21273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3200.589489][T10772] Bluetooth: hci1: command 0x040f tx timeout
[ 3200.627944][T21273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xf0ffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
dup3(r0, r3, 0x80000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
dup3(r0, r3, 0x80000) (async)

02:17:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x1000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:28 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2280}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x2, 0x8, 0x0, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

02:17:28 executing program 1:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x0, 0x0, 0x0, 0x5}, r0, 0xfdffbfffffffffff, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x9, 0x0, 0x2, 0x0, 0xa8, 0x2208c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x20}, 0x104, 0x0, 0x6, 0x0, 0x8, 0x8, 0x6, 0x0, 0xffffffff, 0x0, 0x5e6}, r0, 0x10, 0xffffffffffffffff, 0x2)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000004c0)="b0c3f841b632e9058926dd4fccfbcf1cce125bcab912b7f647f4504836eeb169a656acfec46e2b446fbef66030df9b06179f0a5205ffffc4024471056765b2dc1b32bb6af03bef1c70e6412b6502545982e132a72aaf1fd866e53b7d5079d71032c8971e370b83075198390cbcebf417243c1033a79244418be78e1c1aaaead296813c39de86bb36d5f36f6513d1a4019471c1cbef01e94f2d08fa4216f783510d1f21bd16cb7b46ed4d1d2e62918fef77074391d772f4dbbea0c83d8b7a711c25a0a4663c438ac20697c7a38cddbcb03e0cc2ad160c974b6b081bd635455dc411de18a573f5b0125a8b", 0xea, 0x40, &(0x7f00000005c0)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc1e}, 0x1c)
ptrace$cont(0x9, 0x0, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x80000)
r4 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

02:17:28 executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x20000, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
dup(r0)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}})
close_range(r2, 0xffffffffffffffff, 0x0)

02:17:28 executing program 0:
openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000240))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

[ 3201.241009][T21296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3201.266890][T10772] wlan1: authenticate with 08:02:11:00:00:00
[ 3201.273986][T10772] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
02:17:28 executing program 0:
openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000240))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

[ 3201.350792][T21296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3201.361572][   T54] wlan1: authenticated
[ 3201.370780][T17663] mac80211_hwsim hwsim109 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 3201.435444][   T54] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3201.493895][   T54] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 3201.503295][T21296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3201.561690][   T54] wlan1: associated
02:17:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x2000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3201.649841][T21303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:28 executing program 2:
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8402, 0x0, 0x1, 0x0, 0x83, 0x40, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000))
openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2a000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={0x0, @xdp={0x2c, 0x2, 0x0, 0x2f}, @xdp={0x2c, 0x4, 0x0, 0x12}, @l2, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x10000, 0x7ff, 0x200})
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={<r5=>r0, 0x7, 0x4, 0x400})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180))
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2}, {0x0, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x1, 0x4, 0xffffffff, 0xfffffffd}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000f00)={'wg2\x00'})
ioctl$TUNATTACHFILTER(r0, 0x801054db, &(0x7f0000000200)={0x0, 0x0})

02:17:28 executing program 0:
openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000240))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

02:17:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
dup3(r0, r3, 0x80000)

02:17:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x3000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:29 executing program 0:
openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000240))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

[ 3202.131164][T21330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:29 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000200)=""/213, 0xd0}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/175, 0xaf}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/248, 0xf8}], 0x6, 0x0, 0xffffff11}}], 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[], 0x18}}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/180, 0xb4}], 0x5}}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000ef8b", @ANYRES16=0x0, @ANYBLOB="0106000000f193aa0e0041800900ceff00e660c61e00", @ANYRES32, @ANYBLOB="c4000a"], 0x34}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x13, 0x0, 0x0, 0xfffffffffffffc5d)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0xad2a, 0x7812, 0x0, 0x4b6ae4f95a5de308)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12)
preadv(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000380)=""/28, 0x1c}, {0x0}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x8, 0xffffffb4, 0x1)

02:17:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x5000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3202.649426][T21339] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 3202.658828][T10772] Bluetooth: hci1: command 0x0419 tx timeout
[ 3202.714248][T21339] netlink: 36105 bytes leftover after parsing attributes in process `syz-executor.1'.
02:17:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "61bc47c84adf4589c6f8d16943747c13"}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x80)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "691e45f471e87f7c1a9a8d5ccdde3f75f9257b919142426a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2d3867d6e2b342496d417d23953500b5190c4462d4dc4cfa"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x3f}, @device_a, @broadcast, @broadcast, {0x6, 0x81}, @broadcast}, {0xa, 0x1, 0x3, 0x0, 0x2}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9b3}, @device_b, @device_a, @initial, {0x1, 0x7f}}, {0x8, 0x0, 0x1, 0x1, 0x9}}}, @ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x1b, "85b1b9d7006a2ad5dd5494d456adeb2d2012302ca9f110a4d7c741"}, {@device_b, @device_a, 0x38, "06831652974e0878b4dcc20bf9b7f9b6a080206d5e733cfd68dbffdc816684cd737034e1333c9699d1bb6bc3e04cc0d9bfcc4947c2ca36ea"}]}, 0xb2)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="84000000010901030000000000000000050000050900010073793a3100000000340002001400018008000100e000000108000200e0000002060003400004000006000340000400000c000280050001000000000008000640000000010c00048008000140000000030900010073797a300000000008000640000000010900054000000006b10decf4fcf8116ed3620b9010e03bf1375f6395db5fbeb7402fcdd028208d469fea310f725296c9e123f5eae8a6f609969122c965c6679a560d9a"], 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

02:17:29 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x10, &(0x7f0000000780)={r0}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={'streebog256-generic\x00'}})

02:17:29 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'vlan1\x00', 'macvlan0\x00'}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x42}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'veth1_to_bond\x00', 'team_slave_1\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp={{0x28}, {0x0, "407f"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)

02:17:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x6000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3202.963588][T21347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3203.101255][T21347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3203.196890][T21347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3203.219257][T21347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:30 executing program 2:
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8402, 0x0, 0x1, 0x0, 0x83, 0x40, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000))
openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2a000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={0x0, @xdp={0x2c, 0x2, 0x0, 0x2f}, @xdp={0x2c, 0x4, 0x0, 0x12}, @l2, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x10000, 0x7ff, 0x200})
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={<r5=>r0, 0x7, 0x4, 0x400})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180))
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2}, {0x0, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x1, 0x4, 0xffffffff, 0xfffffffd}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000f00)={'wg2\x00'})
ioctl$TUNATTACHFILTER(r0, 0x801054db, &(0x7f0000000200)={0x0, 0x0})

02:17:30 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000200)=""/213, 0xd0}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/175, 0xaf}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/248, 0xf8}], 0x6, 0x0, 0xffffff11}}], 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[], 0x18}}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/180, 0xb4}], 0x5}}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000ef8b", @ANYRES16=0x0, @ANYBLOB="0106000000f193aa0e0041800900ceff00e660c61e00", @ANYRES32, @ANYBLOB="c4000a"], 0x34}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x13, 0x0, 0x0, 0xfffffffffffffc5d)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0xad2a, 0x7812, 0x0, 0x4b6ae4f95a5de308)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12)
preadv(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000380)=""/28, 0x1c}, {0x0}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x8, 0xffffffb4, 0x1)

02:17:30 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x10, &(0x7f0000000780)={r0}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={'streebog256-generic\x00'}})

02:17:30 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000200)=""/213, 0xd0}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/175, 0xaf}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/248, 0xf8}], 0x6, 0x0, 0xffffff11}}], 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[], 0x18}}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/180, 0xb4}], 0x5}}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000ef8b", @ANYRES16=0x0, @ANYBLOB="0106000000f193aa0e0041800900ceff00e660c61e00", @ANYRES32, @ANYBLOB="c4000a"], 0x34}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x13, 0x0, 0x0, 0xfffffffffffffc5d)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0xad2a, 0x7812, 0x0, 0x4b6ae4f95a5de308)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12)
preadv(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000380)=""/28, 0x1c}, {0x0}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x8, 0xffffffb4, 0x1)

02:17:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x7000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:30 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x10, &(0x7f0000000780)={r0}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={'streebog256-generic\x00'}})

02:17:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x8000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3203.451622][T21361] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
02:17:30 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x10, &(0x7f0000000780)={r0}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={'streebog256-generic\x00'}})

[ 3203.503476][T21361] netlink: 44097 bytes leftover after parsing attributes in process `syz-executor.3'.
02:17:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xc, 0x1, @random="6ba93bee6efb"}]}, 0x44}}, 0x0)

02:17:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "61bc47c84adf4589c6f8d16943747c13"}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x80) (async)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "691e45f471e87f7c1a9a8d5ccdde3f75f9257b919142426a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2d3867d6e2b342496d417d23953500b5190c4462d4dc4cfa"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x3f}, @device_a, @broadcast, @broadcast, {0x6, 0x81}, @broadcast}, {0xa, 0x1, 0x3, 0x0, 0x2}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9b3}, @device_b, @device_a, @initial, {0x1, 0x7f}}, {0x8, 0x0, 0x1, 0x1, 0x9}}}, @ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x1b, "85b1b9d7006a2ad5dd5494d456adeb2d2012302ca9f110a4d7c741"}, {@device_b, @device_a, 0x38, "06831652974e0878b4dcc20bf9b7f9b6a080206d5e733cfd68dbffdc816684cd737034e1333c9699d1bb6bc3e04cc0d9bfcc4947c2ca36ea"}]}, 0xb2) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="84000000010901030000000000000000050000050900010073793a3100000000340002001400018008000100e000000108000200e0000002060003400004000006000340000400000c000280050001000000000008000640000000010c00048008000140000000030900010073797a300000000008000640000000010900054000000006b10decf4fcf8116ed3620b9010e03bf1375f6395db5fbeb7402fcdd028208d469fea310f725296c9e123f5eae8a6f609969122c965c6679a560d9a"], 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

02:17:30 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000200)=""/213, 0xd0}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/175, 0xaf}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/248, 0xf8}], 0x6, 0x0, 0xffffff11}}], 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[], 0x18}}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/180, 0xb4}], 0x5}}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000ef8b", @ANYRES16=0x0, @ANYBLOB="0106000000f193aa0e0041800900ceff00e660c61e00", @ANYRES32, @ANYBLOB="c4000a"], 0x34}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x13, 0x0, 0x0, 0xfffffffffffffc5d)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0xad2a, 0x7812, 0x0, 0x4b6ae4f95a5de308)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12)
preadv(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000380)=""/28, 0x1c}, {0x0}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x8, 0xffffffb4, 0x1)

[ 3203.590593][T21360] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 3203.617967][T21360] netlink: 36105 bytes leftover after parsing attributes in process `syz-executor.1'.
02:17:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x9000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3203.837328][T21380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3203.923536][T21384] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 3203.956211][T21384] netlink: 36101 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3204.508987][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[ 3204.515451][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
02:17:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8402, 0x0, 0x1, 0x0, 0x83, 0x40, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000))
openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2a000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x6)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={0x0, @xdp={0x2c, 0x2, 0x0, 0x2f}, @xdp={0x2c, 0x4, 0x0, 0x12}, @l2, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x10000, 0x7ff, 0x200})
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={<r5=>r0, 0x7, 0x4, 0x400})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180))
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2}, {0x0, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x1, 0x4, 0xffffffff, 0xfffffffd}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000f00)={'wg2\x00'})
ioctl$TUNATTACHFILTER(r0, 0x801054db, &(0x7f0000000200)={0x0, 0x0})

02:17:31 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = getpgid(0x0)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000000c0))

02:17:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) (async, rerun: 64)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) (rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "61bc47c84adf4589c6f8d16943747c13"}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x80) (async)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "691e45f471e87f7c1a9a8d5ccdde3f75f9257b919142426a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2d3867d6e2b342496d417d23953500b5190c4462d4dc4cfa"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x3f}, @device_a, @broadcast, @broadcast, {0x6, 0x81}, @broadcast}, {0xa, 0x1, 0x3, 0x0, 0x2}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9b3}, @device_b, @device_a, @initial, {0x1, 0x7f}}, {0x8, 0x0, 0x1, 0x1, 0x9}}}, @ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x1b, "85b1b9d7006a2ad5dd5494d456adeb2d2012302ca9f110a4d7c741"}, {@device_b, @device_a, 0x38, "06831652974e0878b4dcc20bf9b7f9b6a080206d5e733cfd68dbffdc816684cd737034e1333c9699d1bb6bc3e04cc0d9bfcc4947c2ca36ea"}]}, 0xb2) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="84000000010901030000000000000000050000050900010073793a3100000000340002001400018008000100e000000108000200e0000002060003400004000006000340000400000c000280050001000000000008000640000000010c00048008000140000000030900010073797a300000000008000640000000010900054000000006b10decf4fcf8116ed3620b9010e03bf1375f6395db5fbeb7402fcdd028208d469fea310f725296c9e123f5eae8a6f609969122c965c6679a560d9a"], 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

02:17:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xe000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:31 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000200)=""/213, 0xd0}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/175, 0xaf}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/248, 0xf8}], 0x6, 0x0, 0xffffff11}}], 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[], 0x18}}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/180, 0xb4}], 0x5}}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000ef8b", @ANYRES16=0x0, @ANYBLOB="0106000000f193aa0e0041800900ceff00e660c61e00", @ANYRES32, @ANYBLOB="c4000a"], 0x34}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x13, 0x0, 0x0, 0xfffffffffffffc5d)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0xad2a, 0x7812, 0x0, 0x4b6ae4f95a5de308)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12)
preadv(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000380)=""/28, 0x1c}, {0x0}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x8, 0xffffffb4, 0x1)

02:17:31 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000200)=""/213, 0xd0}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/175, 0xaf}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/248, 0xf8}], 0x6, 0x0, 0xffffff11}}], 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[], 0x18}}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/180, 0xb4}], 0x5}}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000ef8b", @ANYRES16=0x0, @ANYBLOB="0106000000f193aa0e0041800900ceff00e660c61e00", @ANYRES32, @ANYBLOB="c4000a"], 0x34}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x13, 0x0, 0x0, 0xfffffffffffffc5d)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0xad2a, 0x7812, 0x0, 0x4b6ae4f95a5de308)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12)
preadv(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000380)=""/28, 0x1c}, {0x0}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x8, 0xffffffb4, 0x1)

02:17:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e001306000000000000000007000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0)

02:17:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xf000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3204.848809][T21400] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 3204.876638][T21400] netlink: 36101 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3204.887598][T21407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3205.045660][T21399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3205.123238][T21394] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 3205.137662][T21394] netlink: 36105 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3205.340774][T21408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
02:17:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x24180000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e001306000000000000000007000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0)

02:17:32 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0x13, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0)

02:17:32 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000200)=""/213, 0xd0}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/175, 0xaf}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/248, 0xf8}], 0x6, 0x0, 0xffffff11}}], 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[], 0x18}}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000640)=""/180, 0xb4}], 0x5}}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000ef8b", @ANYRES16=0x0, @ANYBLOB="0106000000f193aa0e0041800900ceff00e660c61e00", @ANYRES32, @ANYBLOB="c4000a"], 0x34}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x13, 0x0, 0x0, 0xfffffffffffffc5d)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0xad2a, 0x7812, 0x0, 0x4b6ae4f95a5de308)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12)
preadv(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000380)=""/28, 0x1c}, {0x0}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x8, 0xffffffb4, 0x1)

[ 3205.631522][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3205.906857][T21424] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 3205.921314][T21424] netlink: 36105 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3206.026465][T30821] usb 4-1: new high-speed USB device number 111 using dummy_hcd
02:17:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002dfafdba8d6f66c3d4a78aa4c416c21b2eef9f025c4f9ed969387a0d0e85bfee272e5ca57928f5e4e2745599", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:17:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x3f000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e001306000000000000000007000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0)

02:17:33 executing program 2:
r0 = getpgrp(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
clone3(&(0x7f0000000300)={0x160180000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0], 0x1}, 0x58)
clone3(&(0x7f0000000280)={0x2000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0xc}, &(0x7f0000000100)=""/240, 0xf0, &(0x7f0000000380)=""/251, &(0x7f0000000200)}, 0x58)

02:17:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x60000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:33 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
shutdown(r2, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1a, 0x10, r2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x20601, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0xc1, 0x6, 0x0, 0x0, 0x9, 0x6044, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0xb814, 0x1, 0x8e, 0x3, 0x12a0ca40, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x516e}, r1, 0x6, r0, 0xa)
syz_open_dev$cec(0x0, 0x0, 0x2)

[ 3206.293450][T21431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3206.324874][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3206.404419][T21431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3206.436274][T30821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
02:17:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e001306000000000000000007000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0)

[ 3206.483636][T30821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
02:17:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x8c0b0000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3206.571765][T30821] usb 4-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.40
[ 3206.618358][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3206.629114][T30821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3206.676397][T30821] usb 4-1: config 0 descriptor??
02:17:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x9effffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:33 executing program 0:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[ 3207.167665][T30821] ntrig 0003:1B96:0013.0073: unknown main item tag 0x0
[ 3207.187947][T30821] ntrig 0003:1B96:0013.0073: hidraw0: USB HID v0.00 Device [HID 1b96:0013] on usb-dummy_hcd.3-1/input0
[ 3207.381855][T30821] usb 4-1: USB disconnect, device number 111
02:17:34 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0x13, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0)

02:17:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002dfafdba8d6f66c3d4a78aa4c416c21b2eef9f025c4f9ed969387a0d0e85bfee272e5ca57928f5e4e2745599", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002dfafdba8d6f66c3d4a78aa4c416c21b2eef9f025c4f9ed969387a0d0e85bfee272e5ca57928f5e4e2745599", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

02:17:35 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
shutdown(r2, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1a, 0x10, r2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x20601, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0xc1, 0x6, 0x0, 0x0, 0x9, 0x6044, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0xb814, 0x1, 0x8e, 0x3, 0x12a0ca40, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x516e}, r1, 0x6, r0, 0xa)
syz_open_dev$cec(0x0, 0x0, 0x2)

02:17:35 executing program 2:
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$vga_arbiter(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[ 3207.977766][T21457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xfcffffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3208.130431][T21457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:35 executing program 0:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

02:17:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002dfafdba8d6f66c3d4a78aa4c416c21b2eef9f025c4f9ed969387a0d0e85bfee272e5ca57928f5e4e2745599", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:17:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xfeffffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3208.560036][T21481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xfffff000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="e995fad84018fbff536bff017425349d0ec725ceeb2ccc"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x4c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @random="b067f0999e41", {0x0, 0x2}}, 0x9, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0x94, "dd70c97348c98be36d8f505e7e4f57a16c8be86ec48a6c16ff3d9ad6208b2b543912de45bf200e7583065e7442bfffa9ed3eec2c5daa0de8d68fd70329b905346b0ef92847a8d47eed0eed48906c7708d0d3bc073a8290975886b401ba43b9c354ad06aa7dfa00a5ce8eaf36b872b22288c458878d3c3e408052579d94c96ff86a4fb8caf6aa231ac1cd2d8c6d4beb375b47b199"}]}, 0xbe)

02:17:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xffffff7f}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3209.187040][T21492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3209.289804][T21492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3209.365676][T30821] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 3209.393850][T21493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3209.766464][T30821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3209.797970][T30821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3209.833219][T30821] usb 4-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.40
[ 3209.853160][T30821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3209.877835][T30821] usb 4-1: config 0 descriptor??
[ 3210.437434][T30821] ntrig 0003:1B96:0013.0074: unknown main item tag 0x0
[ 3210.467078][T30821] ntrig 0003:1B96:0013.0074: hidraw0: USB HID v0.00 Device [HID 1b96:0013] on usb-dummy_hcd.3-1/input0
[ 3210.719906][T30821] usb 4-1: USB disconnect, device number 112
02:17:38 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
shutdown(r2, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1a, 0x10, r2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x20601, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0xc1, 0x6, 0x0, 0x0, 0x9, 0x6044, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0xb814, 0x1, 0x8e, 0x3, 0x12a0ca40, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x516e}, r1, 0x6, r0, 0xa)
syz_open_dev$cec(0x0, 0x0, 0x2)

02:17:38 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x541b, 0xc)

02:17:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xffffff9e}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:38 executing program 0:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

02:17:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="e995fad84018fbff536bff017425349d0ec725ceeb2ccc"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x4c}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @random="b067f0999e41", {0x0, 0x2}}, 0x9, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0x94, "dd70c97348c98be36d8f505e7e4f57a16c8be86ec48a6c16ff3d9ad6208b2b543912de45bf200e7583065e7442bfffa9ed3eec2c5daa0de8d68fd70329b905346b0ef92847a8d47eed0eed48906c7708d0d3bc073a8290975886b401ba43b9c354ad06aa7dfa00a5ce8eaf36b872b22288c458878d3c3e408052579d94c96ff86a4fb8caf6aa231ac1cd2d8c6d4beb375b47b199"}]}, 0xbe)

02:17:38 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0x13, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0)

[ 3211.432165][T21502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xfffffff0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3211.766280][T30821] usb 4-1: new high-speed USB device number 113 using dummy_hcd
02:17:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="e995fad84018fbff536bff017425349d0ec725ceeb2ccc"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x4c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @random="b067f0999e41", {0x0, 0x2}}, 0x9, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0x94, "dd70c97348c98be36d8f505e7e4f57a16c8be86ec48a6c16ff3d9ad6208b2b543912de45bf200e7583065e7442bfffa9ed3eec2c5daa0de8d68fd70329b905346b0ef92847a8d47eed0eed48906c7708d0d3bc073a8290975886b401ba43b9c354ad06aa7dfa00a5ce8eaf36b872b22288c458878d3c3e408052579d94c96ff86a4fb8caf6aa231ac1cd2d8c6d4beb375b47b199"}]}, 0xbe)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="e995fad84018fbff536bff017425349d0ec725ceeb2ccc"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x4c}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @random="b067f0999e41", {0x0, 0x2}}, 0x9, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0x94, "dd70c97348c98be36d8f505e7e4f57a16c8be86ec48a6c16ff3d9ad6208b2b543912de45bf200e7583065e7442bfffa9ed3eec2c5daa0de8d68fd70329b905346b0ef92847a8d47eed0eed48906c7708d0d3bc073a8290975886b401ba43b9c354ad06aa7dfa00a5ce8eaf36b872b22288c458878d3c3e408052579d94c96ff86a4fb8caf6aa231ac1cd2d8c6d4beb375b47b199"}]}, 0xbe) (async)

02:17:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xfffffffc}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3212.016904][T21518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xfffffffe}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3212.166429][T30821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3212.182422][T21521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3212.229076][T30821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3212.301261][T21521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3212.321395][T30821] usb 4-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.40
[ 3212.370579][T30821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3212.455734][T30821] usb 4-1: config 0 descriptor??
[ 3212.489926][T21525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0xffffffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3213.078858][T30821] ntrig 0003:1B96:0013.0075: unknown main item tag 0x0
[ 3213.097713][T30821] ntrig 0003:1B96:0013.0075: hidraw0: USB HID v0.00 Device [HID 1b96:0013] on usb-dummy_hcd.3-1/input0
[ 3213.325626][T30821] usb 4-1: USB disconnect, device number 113
02:17:43 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
shutdown(r2, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1a, 0x10, r2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x20601, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0xc1, 0x6, 0x0, 0x0, 0x9, 0x6044, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0xb814, 0x1, 0x8e, 0x3, 0x12a0ca40, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x516e}, r1, 0x6, r0, 0xa)
syz_open_dev$cec(0x0, 0x0, 0x2)

02:17:43 executing program 0:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

02:17:43 executing program 2:
io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)={&(0x7f0000000080)={[0x4d6]}, 0x8})

02:17:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24e28100", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'gretap0\x00', <r3=>0x0, 0x7, 0x8, 0x1, 0x3, {{0x2c, 0x4, 0x1, 0x13, 0xb0, 0x65, 0x0, 0x3f, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xbc, 0x1, 0x4, [{@remote, 0x80000000}, {@loopback, 0x8000}, {@rand_addr=0x64010101, 0xaa1}, {@local, 0xfff}, {@local, 0xc89}]}, @timestamp_prespec={0x44, 0x4c, 0x99, 0x3, 0x8, [{@rand_addr=0x64010100, 0x200}, {@multicast2, 0x79}, {@remote, 0x2}, {@multicast2, 0x12a1}, {@broadcast, 0x1}, {@empty, 0x6}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0x23, 0x7d, [@multicast2, @remote, @multicast2, @local, @empty, @loopback, @broadcast, @private=0xa010100]}, @noop]}}}}})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008084}, 0x80000)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:17:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:43 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1b96, 0x13, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0)

[ 3216.799208][T21537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3216.890542][T21537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:17:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0)
clock_gettime(0x0, &(0x7f0000009300))
recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000010c0)=""/2, 0x2}, {&(0x7f0000001100)=""/93, 0x5d}], 0x2}}], 0x1, 0x0, 0x0)

[ 3216.969616][T21537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3217.085984][T30821] usb 4-1: new high-speed USB device number 114 using dummy_hcd
02:17:44 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}}, 0x0)

02:17:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24e28100", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'gretap0\x00', <r3=>0x0, 0x7, 0x8, 0x1, 0x3, {{0x2c, 0x4, 0x1, 0x13, 0xb0, 0x65, 0x0, 0x3f, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xbc, 0x1, 0x4, [{@remote, 0x80000000}, {@loopback, 0x8000}, {@rand_addr=0x64010101, 0xaa1}, {@local, 0xfff}, {@local, 0xc89}]}, @timestamp_prespec={0x44, 0x4c, 0x99, 0x3, 0x8, [{@rand_addr=0x64010100, 0x200}, {@multicast2, 0x79}, {@remote, 0x2}, {@multicast2, 0x12a1}, {@broadcast, 0x1}, {@empty, 0x6}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0x23, 0x7d, [@multicast2, @remote, @multicast2, @local, @empty, @loopback, @broadcast, @private=0xa010100]}, @noop]}}}}})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008084}, 0x80000)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24e28100", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'gretap0\x00', 0x0, 0x7, 0x8, 0x1, 0x3, {{0x2c, 0x4, 0x1, 0x13, 0xb0, 0x65, 0x0, 0x3f, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xbc, 0x1, 0x4, [{@remote, 0x80000000}, {@loopback, 0x8000}, {@rand_addr=0x64010101, 0xaa1}, {@local, 0xfff}, {@local, 0xc89}]}, @timestamp_prespec={0x44, 0x4c, 0x99, 0x3, 0x8, [{@rand_addr=0x64010100, 0x200}, {@multicast2, 0x79}, {@remote, 0x2}, {@multicast2, 0x12a1}, {@broadcast, 0x1}, {@empty, 0x6}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0x23, 0x7d, [@multicast2, @remote, @multicast2, @local, @empty, @loopback, @broadcast, @private=0xa010100]}, @noop]}}}}}) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008084}, 0x80000) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

02:17:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3217.486627][T30821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3217.521044][T21553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3217.531291][T30821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3217.574513][T30821] usb 4-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.40
[ 3217.633735][T30821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3217.666599][T30821] usb 4-1: config 0 descriptor??
[ 3218.199623][T30821] ntrig 0003:1B96:0013.0076: unknown main item tag 0x0
[ 3218.226456][T30821] ntrig 0003:1B96:0013.0076: hidraw0: USB HID v0.00 Device [HID 1b96:0013] on usb-dummy_hcd.3-1/input0
[ 3218.438424][T30821] usb 4-1: USB disconnect, device number 114
[ 3218.475724][T21541] udevd[21541]: setting owner of /dev/bus/usb/004/114 to uid=0, gid=0 failed: No such file or directory
[ 3219.551509][ T1040] device hsr_slave_0 left promiscuous mode
[ 3219.568213][ T1040] device hsr_slave_1 left promiscuous mode
[ 3219.638818][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3219.665468][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3219.705942][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3219.713408][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3219.792232][ T1040] device bridge_slave_1 left promiscuous mode
[ 3219.825504][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3219.837265][ T1040] device bridge_slave_0 left promiscuous mode
[ 3219.843492][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3219.898497][ T1040] device veth1_macvtap left promiscuous mode
[ 3219.911509][ T1040] device veth0_macvtap left promiscuous mode
[ 3219.925045][ T1040] device veth1_vlan left promiscuous mode
[ 3219.940386][ T1040] device veth0_vlan left promiscuous mode
02:17:47 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0)

02:17:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:17:47 executing program 0:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000380)=ANY=[@ANYBLOB="255fa4c6aea3c320274cefa276c140b90bd8b664a62e4d8fdbb50a7b0cc8747f577af215af3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='afs\x00', 0x0, 0x0)

02:17:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x7b7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)

02:17:47 executing program 1:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x7f, '\x00', @p_u8}})

[ 3220.150297][T21571] kAFS: unable to lookup cell '_¤Æ®£Ã 'Lï¢vÁ@¹ضd¦.M�Ûµ
[ 3220.150297][T21571] {ÈtWzò¯'
02:17:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x7b7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)

02:17:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x7b7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)

02:17:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x7b7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)

02:17:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x7b7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)

02:17:47 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa, 0x77, 0xfa, 0x40, 0x403, 0xb8d8, 0xf04e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0x93, 0x5a}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

[ 3221.152813][ T1040] team0 (unregistering): Port device team_slave_1 removed
[ 3221.201246][ T1040] team0 (unregistering): Port device team_slave_0 removed
[ 3221.248625][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3221.291711][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3221.345512][T18322] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 3221.574208][ T1040] bond0 (unregistering): Released all slaves
[ 3221.887896][T18322] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=f0.4e
[ 3221.901956][T18322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3221.920575][T18322] usb 2-1: Product: syz
[ 3221.929415][T18322] usb 2-1: Manufacturer: syz
[ 3221.939873][T18322] usb 2-1: SerialNumber: syz
[ 3221.966919][T18322] usb 2-1: config 0 descriptor??
[ 3222.686171][T18322] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[ 3222.901503][T18322] usb 2-1: USB disconnect, device number 96
[ 3235.937182][T21593] chnl_net:caif_netlink_parms(): no params data found
[ 3236.082068][T21593] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3236.089441][T21593] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3236.098132][T21593] device bridge_slave_0 entered promiscuous mode
[ 3236.108808][T21593] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3236.155668][T21593] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3236.165060][T21593] device bridge_slave_1 entered promiscuous mode
[ 3236.232490][T21593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3236.251129][T21593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3236.329656][T21593] team0: Port device team_slave_0 added
[ 3236.361387][T21593] team0: Port device team_slave_1 added
[ 3236.416252][T21593] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3236.423228][T21593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3236.486407][T21593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3236.526099][T21593] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3236.533235][T21593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3236.596141][T21593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3236.686872][T21593] device hsr_slave_0 entered promiscuous mode
[ 3236.694127][T21593] device hsr_slave_1 entered promiscuous mode
[ 3236.717052][T21593] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3236.724853][T21593] Cannot create hsr debugfs directory
[ 3237.118385][T21593] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3237.159848][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3237.169294][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3237.193816][T21593] 8021q: adding VLAN 0 to HW filter on device team0
[ 3237.225133][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3237.236948][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3237.256581][T17663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3237.263669][T17663] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3237.306599][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3237.316397][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3237.336518][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3237.355832][T17663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3237.362919][T17663] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3237.385880][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3237.458053][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3237.477333][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3237.497868][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3237.516906][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3237.547092][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3237.571571][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3237.596760][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3237.624506][T21593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3237.657085][T21593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3237.676470][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3237.686375][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3237.706878][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3237.758833][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3237.777830][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3237.778082][T10772] Bluetooth: hci1: command 0x0409 tx timeout
[ 3237.813341][T21593] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3237.867116][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3237.886618][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3237.943460][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3237.956649][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3237.979566][T21593] device veth0_vlan entered promiscuous mode
[ 3237.997433][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3238.007707][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3238.035044][T21593] device veth1_vlan entered promiscuous mode
[ 3238.121075][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3238.131176][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3238.147249][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3238.166274][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3238.190136][T21593] device veth0_macvtap entered promiscuous mode
[ 3238.230505][T21593] device veth1_macvtap entered promiscuous mode
[ 3238.285761][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3238.305726][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.326190][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3238.356739][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.375737][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3238.395480][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.417820][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3238.446586][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.466523][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3238.504968][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.527148][T21593] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3238.538808][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3238.556923][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3238.577893][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3238.596301][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3238.619401][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3238.631685][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.656295][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3238.689021][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.703467][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3238.726089][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.757632][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3238.775752][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.796028][T21593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3238.816047][T21593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3238.852991][T21593] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3238.881644][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3238.893033][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3239.109275][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3239.127825][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3239.192890][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3239.249437][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3239.268535][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3239.300336][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3239.476804][T21600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3239.865683][T10772] Bluetooth: hci1: command 0x041b tx timeout
[ 3240.810200][  T951] device hsr_slave_0 left promiscuous mode
[ 3240.827649][  T951] device hsr_slave_1 left promiscuous mode
[ 3240.839107][  T951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3240.855658][  T951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3240.906443][  T951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3240.913897][  T951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3240.982604][  T951] device bridge_slave_1 left promiscuous mode
[ 3241.005487][  T951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3241.076215][  T951] device bridge_slave_0 left promiscuous mode
[ 3241.082458][  T951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3241.265719][  T951] device veth1_macvtap left promiscuous mode
[ 3241.271869][  T951] device veth0_macvtap left promiscuous mode
[ 3241.289438][  T951] device veth1_vlan left promiscuous mode
[ 3241.295343][  T951] device veth0_vlan left promiscuous mode
[ 3242.192522][  T951] team0 (unregistering): Port device team_slave_1 removed
[ 3242.238011][  T951] team0 (unregistering): Port device team_slave_0 removed
[ 3242.277806][  T951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3242.310004][  T951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3242.536265][  T951] bond0 (unregistering): Released all slaves
[ 3243.384077][T21605] chnl_net:caif_netlink_parms(): no params data found
[ 3243.642093][T21605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3243.675790][T21605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3243.715633][T21605] device bridge_slave_0 entered promiscuous mode
[ 3243.750384][T21605] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3243.775800][T21605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3243.805547][T21605] device bridge_slave_1 entered promiscuous mode
[ 3243.903844][T21605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3243.946912][T21605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3244.071612][T21605] team0: Port device team_slave_0 added
[ 3244.098937][T21605] team0: Port device team_slave_1 added
[ 3244.168779][T21605] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3244.205771][T21605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3244.270003][T21605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3244.305472][T21605] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3244.312445][T21605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3244.375332][T21605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3244.482392][T21605] device hsr_slave_0 entered promiscuous mode
[ 3244.507259][T21605] device hsr_slave_1 entered promiscuous mode
[ 3244.545949][T21605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3244.553664][T21605] Cannot create hsr debugfs directory
[ 3245.066390][T10772] Bluetooth: hci1: command 0x0409 tx timeout
[ 3245.085719][T21605] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3245.146280][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3245.156030][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3245.190856][T21605] 8021q: adding VLAN 0 to HW filter on device team0
[ 3245.229649][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3245.239910][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3245.276310][T18322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3245.283403][T18322] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3245.337016][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3245.345224][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3245.386245][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3245.394842][T18322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3245.402002][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3245.477841][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3245.497286][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3245.536981][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3245.548046][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3245.616902][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3245.626883][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3245.656275][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3245.686167][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3245.716275][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3245.731946][T21605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3245.767358][T21605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3245.800594][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3245.811032][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3245.860728][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3245.870090][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3245.907378][T21605] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3245.967826][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3245.978731][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3246.067720][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3246.078174][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3246.101830][T21605] device veth0_vlan entered promiscuous mode
[ 3246.110727][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3246.127046][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3246.154209][T21605] device veth1_vlan entered promiscuous mode
[ 3246.236702][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3246.251465][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3246.267245][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3246.306890][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3246.329754][T21605] device veth0_macvtap entered promiscuous mode
[ 3246.362962][T21605] device veth1_macvtap entered promiscuous mode
[ 3246.433439][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3246.465837][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3246.505723][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3246.545944][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3246.585505][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3246.615756][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3246.636057][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3246.658062][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3246.685461][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3246.705420][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3246.738320][T21605] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3246.765637][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3246.774146][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3246.806587][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3246.836487][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3246.869061][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3246.915742][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3246.945614][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3246.975529][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3246.995983][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3247.015470][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3247.045511][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3247.065389][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3247.085934][T21605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3247.105413][T21605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3247.135896][T16935] Bluetooth: hci1: command 0x041b tx timeout
[ 3247.143808][T21605] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3247.176618][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3247.186596][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3247.461075][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3247.495909][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3247.541613][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3247.599493][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3247.611233][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3247.650002][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3247.802048][T21612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3247.877775][T21612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3247.948254][T21612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24e28100", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'gretap0\x00', <r3=>0x0, 0x7, 0x8, 0x1, 0x3, {{0x2c, 0x4, 0x1, 0x13, 0xb0, 0x65, 0x0, 0x3f, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xbc, 0x1, 0x4, [{@remote, 0x80000000}, {@loopback, 0x8000}, {@rand_addr=0x64010101, 0xaa1}, {@local, 0xfff}, {@local, 0xc89}]}, @timestamp_prespec={0x44, 0x4c, 0x99, 0x3, 0x8, [{@rand_addr=0x64010100, 0x200}, {@multicast2, 0x79}, {@remote, 0x2}, {@multicast2, 0x12a1}, {@broadcast, 0x1}, {@empty, 0x6}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0x23, 0x7d, [@multicast2, @remote, @multicast2, @local, @empty, @loopback, @broadcast, @private=0xa010100]}, @noop]}}}}})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008084}, 0x80000) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:18:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x7b7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)

02:18:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x7b7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)

02:18:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x7}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:15 executing program 2:
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

02:18:15 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa, 0x77, 0xfa, 0x40, 0x403, 0xb8d8, 0xf04e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0x93, 0x5a}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

[ 3248.047367][T21615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:15 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003e40)=@getneightbl={0x14, 0x42, 0x100, 0x0, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
connect$inet(0xffffffffffffffff, &(0x7f0000004b00)={0x2, 0x0, @remote}, 0x10)

02:18:15 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0x80405600, &(0x7f0000000180))

[ 3248.219400][T21635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:15 executing program 2:
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

02:18:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140))

[ 3248.425560][T21214] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 3248.507264][T21638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={<r3=>r0})
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42010045}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xfc, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffeed}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x880}, 0x24000000)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
syz_80211_inject_frame(&(0x7f0000000580)=@broadcast, &(0x7f00000005c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x3414}, @device_b, @device_b}, 0x10)
nanosleep(&(0x7f0000000040)={r4, r5+60000000}, &(0x7f0000000540))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:18:15 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003e40)=@getneightbl={0x14, 0x42, 0x100, 0x0, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
connect$inet(0xffffffffffffffff, &(0x7f0000004b00)={0x2, 0x0, @remote}, 0x10)

02:18:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xe}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140))

02:18:15 executing program 2:
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[ 3248.702494][T21656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3248.755545][T30821] wlan1: authenticate with 08:02:11:00:00:00
[ 3248.785736][T30821] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3248.804735][T21656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3248.836468][T17239] wlan1: authenticated
[ 3248.841221][T16935] mac80211_hwsim hwsim113 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 3248.875857][T17239] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3248.884654][T21662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3248.903111][T17239] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 3248.937748][T17239] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
[ 3248.985795][T21214] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=f0.4e
[ 3248.994878][T21214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3249.015424][T21214] usb 2-1: Product: syz
[ 3249.019637][T21214] usb 2-1: Manufacturer: syz
[ 3249.024248][T21214] usb 2-1: SerialNumber: syz
[ 3249.046470][T21214] usb 2-1: config 0 descriptor??
[ 3249.075733][T17239] wlan1: association with 08:02:11:00:00:00 timed out
[ 3249.216354][T16935] Bluetooth: hci1: command 0x040f tx timeout
[ 3249.787045][T21214] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[ 3250.055269][T21214] usb 2-1: USB disconnect, device number 97
02:18:17 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa, 0x77, 0xfa, 0x40, 0x403, 0xb8d8, 0xf04e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0x93, 0x5a}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

02:18:17 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003e40)=@getneightbl={0x14, 0x42, 0x100, 0x0, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
connect$inet(0xffffffffffffffff, &(0x7f0000004b00)={0x2, 0x0, @remote}, 0x10)

02:18:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xf}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140))

02:18:17 executing program 2:
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

02:18:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 32)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (rerun: 32)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={<r3=>r0})
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42010045}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xfc, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffeed}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x880}, 0x24000000) (async)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0}) (async)
syz_80211_inject_frame(&(0x7f0000000580)=@broadcast, &(0x7f00000005c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x3414}, @device_b, @device_b}, 0x10)
nanosleep(&(0x7f0000000040)={r4, r5+60000000}, &(0x7f0000000540)) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (rerun: 32)

02:18:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3250.754298][T21670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={<r3=>r0})
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42010045}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xfc, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffeed}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x880}, 0x24000000)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
syz_80211_inject_frame(&(0x7f0000000580)=@broadcast, &(0x7f00000005c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x3414}, @device_b, @device_b}, 0x10)
nanosleep(&(0x7f0000000040)={r4, r5+60000000}, &(0x7f0000000540))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={r0}) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42010045}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xfc, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffeed}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x880}, 0x24000000) (async)
clock_gettime(0x0, &(0x7f0000000000)) (async)
syz_80211_inject_frame(&(0x7f0000000580)=@broadcast, &(0x7f00000005c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x3414}, @device_b, @device_b}, 0x10) (async)
nanosleep(&(0x7f0000000040)={r4, r5+60000000}, &(0x7f0000000540)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

02:18:17 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003e40)=@getneightbl={0x14, 0x42, 0x100, 0x0, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
connect$inet(0xffffffffffffffff, &(0x7f0000004b00)={0x2, 0x0, @remote}, 0x10)

02:18:17 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003e40)=@getneightbl={0x14, 0x42, 0x100, 0x0, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
connect$inet(0xffffffffffffffff, &(0x7f0000004b00)={0x2, 0x0, @remote}, 0x10)

02:18:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140))

02:18:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xf0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3250.980853][T21690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3251.010903][T16935] wlan1: authenticate with 08:02:11:00:00:00
[ 3251.023830][T16935] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3251.065515][T21214] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 3251.091113][T21690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3251.101529][T15847] wlan1: authenticated
[ 3251.113997][T16935] mac80211_hwsim hwsim113 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 3251.155811][T15847] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3251.177940][T21690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3251.275557][   T54] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 3251.283960][   T54] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 3251.296660][T18322] Bluetooth: hci1: command 0x0419 tx timeout
[ 3251.304451][T21690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3251.312285][   T54] wlan1: associated
[ 3251.625831][T21214] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=f0.4e
[ 3251.644662][T21214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3251.665976][T21214] usb 2-1: Product: syz
[ 3251.670189][T21214] usb 2-1: Manufacturer: syz
[ 3251.674795][T21214] usb 2-1: SerialNumber: syz
[ 3251.716379][T21214] usb 2-1: config 0 descriptor??
[ 3252.406857][   T54] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 3252.476553][T21214] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[ 3252.778303][T21214] usb 2-1: USB disconnect, device number 98
[ 3252.806455][   T54] device hsr_slave_0 left promiscuous mode
[ 3252.815869][   T54] device hsr_slave_1 left promiscuous mode
[ 3252.837269][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3252.844834][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3252.868774][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3252.887720][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3252.908053][   T54] device bridge_slave_1 left promiscuous mode
[ 3252.914319][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3252.947372][   T54] device bridge_slave_0 left promiscuous mode
[ 3252.956262][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3252.983274][   T54] device veth1_macvtap left promiscuous mode
[ 3252.997654][   T54] device veth0_macvtap left promiscuous mode
[ 3253.003794][   T54] device veth1_vlan left promiscuous mode
[ 3253.025566][   T54] device veth0_vlan left promiscuous mode
02:18:20 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa, 0x77, 0xfa, 0x40, 0x403, 0xb8d8, 0xf04e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0x93, 0x5a}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

02:18:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f0000000580)={0x0, 0x0, @ioapic})

02:18:20 executing program 0:
r0 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_team\x00', 0x10)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)

02:18:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x300}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:20 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003e40)=@getneightbl={0x14, 0x42, 0x100, 0x0, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
connect$inet(0xffffffffffffffff, &(0x7f0000004b00)={0x2, 0x0, @remote}, 0x10)

02:18:20 executing program 0:
mbind(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1ffe000000, 0x7ff, 0x0)

02:18:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f0000000580)={0x0, 0x0, @ioapic})

[ 3253.736317][T21214] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 3253.927666][   T54] team0 (unregistering): Port device team_slave_1 removed
[ 3254.029770][   T54] team0 (unregistering): Port device team_slave_0 removed
[ 3254.109826][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3254.193211][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3254.266468][T21214] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=f0.4e
[ 3254.284655][T21214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3254.315914][T21214] usb 2-1: Product: syz
[ 3254.330913][T21214] usb 2-1: Manufacturer: syz
[ 3254.348236][T21214] usb 2-1: SerialNumber: syz
[ 3254.373007][T21214] usb 2-1: config 0 descriptor??
[ 3254.501222][   T54] bond0 (unregistering): Released all slaves
[ 3255.150829][T21214] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[ 3255.528665][T10772] usb 2-1: USB disconnect, device number 99
[ 3255.873286][T21720] chnl_net:caif_netlink_parms(): no params data found
[ 3256.201793][T21720] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3256.216056][T21720] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3256.236117][T21720] device bridge_slave_0 entered promiscuous mode
[ 3256.280712][T21720] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3256.305350][T21720] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3256.313908][T21720] device bridge_slave_1 entered promiscuous mode
[ 3256.428230][T21720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3256.469633][T21720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3256.596935][T21720] team0: Port device team_slave_0 added
[ 3256.636410][T21720] team0: Port device team_slave_1 added
[ 3256.729130][T21720] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3256.755822][T21720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3256.835349][T21720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3256.878866][T21720] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3256.905607][T21720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3256.995860][T21720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3257.138928][T21720] device hsr_slave_0 entered promiscuous mode
[ 3257.166277][T21720] device hsr_slave_1 entered promiscuous mode
[ 3257.205813][T21720] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3257.213438][T21720] Cannot create hsr debugfs directory
[ 3257.458945][ T9175] Bluetooth: hci1: command 0x0409 tx timeout
[ 3257.787203][T21720] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3257.837731][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3257.856165][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3257.890649][T21720] 8021q: adding VLAN 0 to HW filter on device team0
[ 3257.927517][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3257.956561][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3257.985908][T10772] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3257.993002][T10772] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3258.037202][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3258.066745][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3258.096616][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3258.126023][T10772] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3258.133115][T10772] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3258.166561][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3258.208280][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3258.252404][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3258.287984][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3258.326775][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3258.356286][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3258.375556][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3258.387903][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3258.416238][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3258.430514][T21720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3258.472983][T21720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3258.508152][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3258.518870][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3258.630420][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3258.639102][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3258.681734][T21720] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3258.767064][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3258.777626][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3258.858266][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3258.876701][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3258.899700][T21720] device veth0_vlan entered promiscuous mode
[ 3258.909804][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3258.919849][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3258.959903][T21720] device veth1_vlan entered promiscuous mode
[ 3259.047720][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3259.059496][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3259.106377][T21720] device veth0_macvtap entered promiscuous mode
[ 3259.141975][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3259.152130][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3259.190032][T21720] device veth1_macvtap entered promiscuous mode
[ 3259.199943][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3259.216181][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3259.285466][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3259.318082][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.335538][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3259.368651][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.396248][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3259.409103][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.435874][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3259.457596][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.488216][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3259.505328][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.536102][T21214] Bluetooth: hci1: command 0x041b tx timeout
[ 3259.539900][T21720] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3259.557634][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3259.568493][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3259.599887][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3259.615490][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.645341][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3259.665347][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.675177][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3259.705888][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.736522][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3259.755775][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.776680][T21720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3259.805336][T21720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3259.827242][T21720] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3259.846488][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3259.868109][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3260.080911][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3260.119569][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3260.155559][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3260.218895][T17239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3260.231006][T17239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3260.267856][T30821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3260.436746][T21727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3260.470554][T30821] wlan1: authenticate with 08:02:11:00:00:00
[ 3260.482994][T30821] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3260.499588][T21727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3260.515800][T17239] wlan1: authenticated
[ 3260.534286][T30821] mac80211_hwsim hwsim115 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 3260.576248][T17239] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3260.598960][T21727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3260.688180][T21728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3260.698360][  T951] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 3260.716143][  T951] wlan1: associated
[ 3260.762491][T21726] syz-executor.4: vmalloc error: size 12288, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[ 3260.817564][T21726] CPU: 0 PID: 21726 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0
[ 3260.826401][T21726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3260.836913][T21726] Call Trace:
[ 3260.840198][T21726]  <TASK>
[ 3260.843132][T21726]  dump_stack_lvl+0xcd/0x134
[ 3260.847746][T21726]  warn_alloc.cold+0x87/0x17a
[ 3260.852441][T21726]  ? zone_watermark_ok_safe+0x290/0x290
[ 3260.858003][T21726]  ? __kmalloc_node+0x62/0x390
[ 3260.862804][T21726]  ? __vmalloc_node_range+0x574/0xab0
[ 3260.868202][T21726]  __vmalloc_node_range+0x883/0xab0
[ 3260.873427][T21726]  ? vfree_atomic+0xe0/0xe0
[ 3260.877944][T21726]  ? rcu_read_lock_sched_held+0x3a/0x70
[ 3260.883508][T21726]  ? kernel_clone+0xe7/0xab0
[ 3260.888111][T21726]  copy_process+0x926/0x75a0
[ 3260.892718][T21726]  ? kernel_clone+0xe7/0xab0
[ 3260.897321][T21726]  ? lock_chain_count+0x20/0x20
[ 3260.902188][T21726]  ? lock_chain_count+0x20/0x20
[ 3260.907059][T21726]  ? find_held_lock+0x2d/0x110
[ 3260.911859][T21726]  ? __cleanup_sighand+0xb0/0xb0
[ 3260.916822][T21726]  ? kernel_clone+0x314/0xab0
[ 3260.921513][T21726]  kernel_clone+0xe7/0xab0
[ 3260.925938][T21726]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 3260.931935][T21726]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 3260.937930][T21726]  ? create_io_thread+0xf0/0xf0
[ 3260.942796][T21726]  ? find_held_lock+0x2d/0x110
[ 3260.947578][T21726]  __do_compat_sys_ia32_clone+0xac/0xe0
[ 3260.953142][T21726]  ? pci_biosrom_size+0x90/0x90
[ 3260.958028][T21726]  ? rcu_read_lock_sched_held+0x3a/0x70
[ 3260.963591][T21726]  ? syscall_trace_enter.constprop.0+0x134/0x270
[ 3260.969937][T21726]  do_int80_syscall_32+0x46/0x90
[ 3260.974898][T21726]  entry_INT80_compat+0x71/0x76
[ 3260.979761][T21726] RIP: 0023:0xf6f5b204
[ 3260.983836][T21726] Code: 8b 44 24 04 89 41 08 c7 41 04 00 00 00 00 53 56 57 8b 74 24 24 8b 54 24 20 8b 5c 24 18 8b 7c 24 28 b8 78 00 00 00 89 19 cd 80 <5f> 5e 5b 85 c0 0f 8c 61 81 00 00 74 01 c3 89 f5 ff d3 e8 00 00 00
[ 3261.003465][T21726] RSP: 002b:00000000f7590a30 EFLAGS: 00000292 ORIG_RAX: 0000000000000078
[ 3261.012000][T21726] RAX: ffffffffffffffda RBX: 00000000003d0f00 RCX: 00000000f572b7a4
[ 3261.019988][T21726] RDX: 00000000f572bba8 RSI: 00000000f7590a7c RDI: 00000000f572bba8
[ 3261.027973][T21726] RBP: 00000000f7036000 R08: 0000000000000000 R09: 0000000000000000
[ 3261.035965][T21726] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[ 3261.043945][T21726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 3261.051941][T21726]  </TASK>
[ 3261.162967][T21726] Mem-Info:
[ 3261.178886][T21726] active_anon:8483 inactive_anon:278889 isolated_anon:0
[ 3261.178886][T21726]  active_file:4384 inactive_file:46906 isolated_file:0
[ 3261.178886][T21726]  unevictable:774 dirty:6 writeback:0
[ 3261.178886][T21726]  slab_reclaimable:20633 slab_unreclaimable:122675
[ 3261.178886][T21726]  mapped:48643 shmem:29322 pagetables:7909 bounce:0
[ 3261.178886][T21726]  kernel_misc_reclaimable:0
[ 3261.178886][T21726]  free:1094584 free_pcp:7103 free_cma:0
[ 3261.267775][T21726] Node 0 active_anon:33924kB inactive_anon:1114648kB active_file:17464kB inactive_file:187624kB unevictable:1560kB isolated(anon):0kB isolated(file):0kB mapped:194572kB dirty:20kB writeback:0kB shmem:114836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 745472kB writeback_tmp:0kB kernel_stack:23060kB pagetables:31632kB all_unreclaimable? no
[ 3261.334404][T21726] Node 1 active_anon:8kB inactive_anon:908kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:144kB pagetables:4kB all_unreclaimable? no
[ 3261.409085][T21726] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3261.475828][T21726] lowmem_reserve[]: 0 2645 2645 2645 2645
[ 3261.481745][T21726] Node 0 DMA32 free:415020kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:33924kB inactive_anon:1114648kB active_file:17464kB inactive_file:187624kB unevictable:1560kB writepending:20kB present:3129332kB managed:2716760kB mlocked:24kB bounce:0kB free_pcp:27236kB local_pcp:11476kB free_cma:0kB
[ 3261.563180][T21726] lowmem_reserve[]: 0 0 0 0 0
[ 3261.568774][T21726] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3261.615707][ T9175] Bluetooth: hci1: command 0x040f tx timeout
[ 3261.620732][T21726] lowmem_reserve[]: 0 0 0 0 0
[ 3261.648838][T21726] Node 1 Normal free:3947956kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:908kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3261.703566][T21726] lowmem_reserve[]: 0 0 0 0 0
[ 3261.715449][T21726] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 3261.746001][T21726] Node 0 DMA32: 4831*4kB (UME) 2534*8kB (UME) 872*16kB (UM) 696*32kB (UME) 282*64kB (UME) 115*128kB (UME) 43*256kB (UME) 25*512kB (ME) 18*1024kB (M) 17*2048kB (M) 56*4096kB (UM) = 415020kB
[ 3261.786226][T21726] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 3261.815522][T21726] Node 1 Normal: 139*4kB (UE) 43*8kB (UE) 29*16kB (UE) 165*32kB (UME) 87*64kB (UME) 30*128kB (UME) 5*256kB (U) 7*512kB (U) 1*1024kB (U) 1*2048kB (M) 958*4096kB (ME) = 3947956kB
[ 3261.856544][T21726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3261.879356][T21726] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[ 3261.895575][T21726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3261.915684][T21726] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3261.936886][T21726] 40712 total pagecache pages
[ 3261.946045][T21726] 0 pages in swap cache
[ 3261.956027][T21726] Swap cache stats: add 0, delete 0, find 0/0
[ 3261.972755][T21726] Free swap  = 0kB
[ 3261.977355][T21726] Total swap = 0kB
[ 3261.985778][T21726] 2097051 pages RAM
[ 3261.999735][T21726] 0 pages HighMem/MovableOnly
[ 3262.004697][T21726] 384516 pages reserved
[ 3262.016831][T21726] 0 pages cma reserved
02:18:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000acb7ff241212ad9f9b0b2fb22a92c85503ab3cd9dae0d55a3ead56ca736f28d034ab11ec2d52386fc36cf87ff5335819142bcf991fbcb48a5a", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x54, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x36}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x60}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x16}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x3b}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x80)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000600)={'wlan0\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:18:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f0000000580)={0x0, 0x0, @ioapic})

02:18:29 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r1, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000380)=0x90)

02:18:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x500}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:29 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003e40)=@getneightbl={0x14, 0x42, 0x100, 0x0, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
connect$inet(0xffffffffffffffff, &(0x7f0000004b00)={0x2, 0x0, @remote}, 0x10)

02:18:29 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d010009050f1f0100000000090583030091"], 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0)

02:18:29 executing program 0:
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x82, 0x0)
io_setup(0xa, &(0x7f00000000c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x960000, 0x0, 0x8, 0x0, r0, &(0x7f00000001c0)="10", 0x1}])

02:18:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3262.234993][T21749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:29 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={<r2=>0x0}, &(0x7f0000000500)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2}, 0x8)

02:18:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f0000000580)={0x0, 0x0, @ioapic})

[ 3262.361634][T21749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3262.385746][T30821] usb 2-1: new high-speed USB device number 100 using dummy_hcd
02:18:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x700}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3262.469465][T21749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:29 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/cgroups\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0xffffffff, 0x0)

[ 3262.685404][T30821] usb 2-1: Using ep0 maxpacket: 8
[ 3262.805835][T30821] usb 2-1: config 0 has an invalid interface number: 65 but max is 0
[ 3262.813975][T30821] usb 2-1: config 0 has no interface number 0
[ 3262.835491][T30821] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
02:18:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000acb7ff241212ad9f9b0b2fb22a92c85503ab3cd9dae0d55a3ead56ca736f28d034ab11ec2d52386fc36cf87ff5335819142bcf991fbcb48a5a", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x54, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x36}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x60}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x16}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x3b}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x80)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:18:29 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x300, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0)

02:18:29 executing program 0:
r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
rt_sigsuspend(&(0x7f0000000000), 0x8)
write$apparmor_current(r0, 0x0, 0x0)

02:18:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:29 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7b, 0x4b, 0xb, 0x10, 0x1d50, 0x60a1, 0x9c83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x2f, 0xb1}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3262.876930][T30821] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3262.943073][T30821] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 33024, setting to 1024
[ 3262.961505][T30821] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 3263.021467][T30821] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[ 3263.031315][T30821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3263.050956][T30821] usb 2-1: config 0 descriptor??
[ 3263.115053][T30821] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input214
[ 3263.320391][T21214] usb 2-1: USB disconnect, device number 100
[ 3263.335569][    C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 3263.343833][T21214] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 3263.356479][T10772] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 3263.635984][T10772] usb 4-1: Using ep0 maxpacket: 16
[ 3263.696674][T21214] Bluetooth: hci1: command 0x0419 tx timeout
02:18:30 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d010009050f1f0100000000090583030091"], 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0)

02:18:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x300, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0)

02:18:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xb8c}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000acb7ff241212ad9f9b0b2fb22a92c85503ab3cd9dae0d55a3ead56ca736f28d034ab11ec2d52386fc36cf87ff5335819142bcf991fbcb48a5a", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x54, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x36}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x60}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x16}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x3b}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:18:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x50}}, 0x0)

02:18:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x50}}, 0x0)

[ 3263.945043][T21798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3263.966538][T10772] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=9c.83
02:18:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xe00}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3263.996322][T10772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3264.045737][T10772] usb 4-1: Product: syz
[ 3264.049952][T10772] usb 4-1: Manufacturer: syz
[ 3264.054573][T10772] usb 4-1: SerialNumber: syz
02:18:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x50}}, 0x0)

[ 3264.123380][T10772] usb 4-1: config 0 descriptor??
02:18:31 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x300, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0)

02:18:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xf00}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x50}}, 0x0)

[ 3264.315415][ T9175] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 3264.565872][ T9175] usb 2-1: Using ep0 maxpacket: 8
[ 3264.636273][T10772] airspy 4-1:0.0: Board ID: 00
[ 3264.641225][T10772] airspy 4-1:0.0: Firmware version: 
[ 3264.685913][ T9175] usb 2-1: config 0 has an invalid interface number: 65 but max is 0
[ 3264.698261][ T9175] usb 2-1: config 0 has no interface number 0
[ 3264.712957][ T9175] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 3264.737460][ T9175] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3264.763146][ T9175] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 33024, setting to 1024
[ 3264.790530][ T9175] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 3264.821168][ T9175] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[ 3264.843878][ T9175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3264.856172][T10772] airspy 4-1:0.0: usb_control_msg() failed -71 request 11
[ 3264.876859][ T9175] usb 2-1: config 0 descriptor??
[ 3264.876994][T10772] airspy 4-1:0.0: Registered as swradio16
[ 3264.913751][T10772] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 3264.930903][ T9175] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input215
[ 3264.960260][T10772] usb 4-1: USB disconnect, device number 115
[ 3265.299671][T10772] usb 2-1: USB disconnect, device number 101
[ 3265.305452][    C1] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 3265.314012][T10772] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
02:18:32 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0xc011, r0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0)

[ 3265.397217][T21725] udevd[21725]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory
[ 3265.438461][T21725] udevd[21725]: setting owner of /dev/input/js0 to uid=0, gid=1003 failed: No such file or directory
02:18:32 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d010009050f1f0100000000090583030091"], 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0)

02:18:32 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x300, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0)

02:18:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008021100000700021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218240406089c02000200"], 0x3e)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r4 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x100c0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x25c, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a921577050d3c64f3378cae46fe8f2437168104e84193996"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e23ad272a83120b898bb20e8877b446764e45ca6fa25b621"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eac0e06be1b7638f24d03dafd81ae1f5ac5543bc07bbbfda"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a45ef2e57a9c36e99b44234b9399a13a927a004b5bf0e6f9"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b99a5967735dbca293802f9dccd6b91b37aeec53f223f5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "354173f5ed81fedd3eb39bf0859a2684984608c21a3568d5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e3d73ea9468ee7ec02200ceca687875edc13356e3069b6cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a0d032995d0871f2990c8199cc88afe96f20a6830bc0c35"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4800}, 0x85)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:18:32 executing program 0:
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
ioctl$sock_SIOCOUTQNSD(r0, 0x541b, &(0x7f0000000040))

02:18:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1824}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:32 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0xc011, r0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0)

02:18:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x2418}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3265.931939][T21825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3265.943323][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[ 3265.949897][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
02:18:33 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0xc011, r0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0)

02:18:33 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x10, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0)

02:18:33 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0xc011, r0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0)

[ 3266.101040][T21825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x3f00}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3266.207140][T21825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3266.256156][T10772] usb 2-1: new high-speed USB device number 102 using dummy_hcd
02:18:33 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0xc011, r0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0)

[ 3266.525447][T10772] usb 2-1: Using ep0 maxpacket: 8
[ 3266.675871][T10772] usb 2-1: config 0 has an invalid interface number: 65 but max is 0
[ 3266.690297][T10772] usb 2-1: config 0 has no interface number 0
[ 3266.713375][T10772] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 3266.724888][T10772] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3266.736642][T10772] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 33024, setting to 1024
[ 3266.765783][T10772] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 3266.812895][T10772] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[ 3266.846679][T10772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3266.898604][T10772] usb 2-1: config 0 descriptor??
[ 3266.949550][T10772] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input216
[ 3267.307308][T16356] usb 2-1: USB disconnect, device number 102
[ 3267.327910][T16356] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
02:18:34 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410017ff5d010009050f1f0100000000090583030091"], 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0)

02:18:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008021100000700021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218240406089c02000200"], 0x3e)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r4 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x100c0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x25c, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a921577050d3c64f3378cae46fe8f2437168104e84193996"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e23ad272a83120b898bb20e8877b446764e45ca6fa25b621"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eac0e06be1b7638f24d03dafd81ae1f5ac5543bc07bbbfda"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a45ef2e57a9c36e99b44234b9399a13a927a004b5bf0e6f9"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b99a5967735dbca293802f9dccd6b91b37aeec53f223f5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "354173f5ed81fedd3eb39bf0859a2684984608c21a3568d5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e3d73ea9468ee7ec02200ceca687875edc13356e3069b6cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a0d032995d0871f2990c8199cc88afe96f20a6830bc0c35"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4800}, 0x85) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 64)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (rerun: 64)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:18:34 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0xc011, r0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0)

02:18:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:34 executing program 2:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(r1, 0x34)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x2, 0x3, 0x4, 0x1, 0x10000, {}, {0x3, 0x1, 0x81, 0x2, 0x4, 0x1, "0529ff5a"}, 0x40, 0x2, @userptr=0x1, 0x100, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))

02:18:34 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0xc011, r0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0)

[ 3267.948192][T21852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:35 executing program 0:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0844123, &(0x7f0000000000)=0x3)

02:18:35 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}})

02:18:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0b}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3268.052648][T21849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3268.070395][T21849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3268.179974][T21849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:35 executing program 0:
perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r3=>0x0})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1aaf9, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x18cc9}, 0x0)

02:18:35 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @gre={{0x8, 0x2}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0)

[ 3268.254426][T21849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3268.323409][T21849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3268.336348][ T9175] usb 2-1: new high-speed USB device number 103 using dummy_hcd
02:18:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xf000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3268.419109][T21849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3268.466662][T21869] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 3268.507567][T21849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3268.587986][ T9175] usb 2-1: Using ep0 maxpacket: 8
[ 3268.699402][T21849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3268.709663][ T9175] usb 2-1: config 0 has an invalid interface number: 65 but max is 0
[ 3268.739009][ T9175] usb 2-1: config 0 has no interface number 0
[ 3268.773573][ T9175] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 3268.830171][ T9175] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3268.863194][ T9175] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 33024, setting to 1024
[ 3268.912638][ T9175] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 3268.942921][ T9175] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb
[ 3268.956411][ T9175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3268.976036][ T9175] usb 2-1: config 0 descriptor??
[ 3269.092596][ T9175] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input217
[ 3269.418196][T16926] usb 2-1: USB disconnect, device number 103
[ 3269.436775][T16926] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
02:18:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x30000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3270.163826][ T1040] device hsr_slave_0 left promiscuous mode
[ 3270.200240][ T1040] device hsr_slave_1 left promiscuous mode
[ 3270.220967][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3270.249187][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3270.279674][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3270.298079][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3270.320415][ T1040] device bridge_slave_1 left promiscuous mode
[ 3270.335098][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3270.358464][ T1040] device bridge_slave_0 left promiscuous mode
[ 3270.371779][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3270.410305][ T1040] device veth1_macvtap left promiscuous mode
[ 3270.424896][ T1040] device veth0_macvtap left promiscuous mode
[ 3270.438502][ T1040] device veth1_vlan left promiscuous mode
[ 3270.452148][ T1040] device veth0_vlan left promiscuous mode
[ 3271.098855][ T1040] team0 (unregistering): Port device team_slave_1 removed
[ 3271.142016][ T1040] team0 (unregistering): Port device team_slave_0 removed
[ 3271.179621][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3271.223982][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3271.569290][ T1040] bond0 (unregistering): Released all slaves
[ 3286.644717][T21885] chnl_net:caif_netlink_parms(): no params data found
[ 3286.820019][T21885] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3286.835511][T21885] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3286.856416][T21885] device bridge_slave_0 entered promiscuous mode
[ 3286.878564][T21885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3286.897267][T21885] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3286.917860][T21885] device bridge_slave_1 entered promiscuous mode
[ 3286.981969][T21885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3287.010949][T21885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3287.088491][T21885] team0: Port device team_slave_0 added
[ 3287.118266][T21885] team0: Port device team_slave_1 added
[ 3287.175672][T21885] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3287.182649][T21885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3287.245632][T21885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3287.275718][T21885] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3287.282696][T21885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3287.345577][T21885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3287.424112][T21885] device hsr_slave_0 entered promiscuous mode
[ 3287.448166][T21885] device hsr_slave_1 entered promiscuous mode
[ 3287.465879][T21885] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3287.473472][T21885] Cannot create hsr debugfs directory
[ 3287.871389][T21885] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3287.910866][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3287.937187][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3287.951085][T21885] 8021q: adding VLAN 0 to HW filter on device team0
[ 3287.970783][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3287.987958][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3288.016594][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3288.023711][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3288.057941][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3288.066474][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3288.087422][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3288.105915][T18322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3288.113015][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3288.135932][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3288.166173][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3288.187474][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3288.208607][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3288.258333][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3288.268698][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3288.279624][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3288.296908][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3288.316579][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3288.344150][T21885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3288.376766][T21885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3288.392023][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3288.407354][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3288.425610][T10772] Bluetooth: hci1: command 0x0409 tx timeout
[ 3288.467792][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3288.485539][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3288.516690][T21885] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3288.584836][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3288.597943][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3288.659922][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3288.670156][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3288.690258][T21885] device veth0_vlan entered promiscuous mode
[ 3288.717771][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3288.727541][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3288.744428][T21885] device veth1_vlan entered promiscuous mode
[ 3288.830762][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3288.848541][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3288.867022][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3288.886029][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3288.909504][T21885] device veth0_macvtap entered promiscuous mode
[ 3288.932889][T21885] device veth1_macvtap entered promiscuous mode
[ 3288.991694][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3289.016371][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.045998][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3289.065341][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.075194][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3289.115952][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.137473][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3289.165858][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.176879][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3289.206299][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.227121][T21885] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3289.237654][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3289.257442][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3289.276270][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3289.285203][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3289.311366][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3289.337688][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.365489][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3289.385913][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.405443][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3289.433842][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.456245][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3289.485488][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.506369][T21885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3289.526228][T21885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3289.559672][T21885] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3289.583241][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3289.594657][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3289.828918][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3289.875783][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3289.915713][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3289.969598][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3289.988574][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3290.022914][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3290.177399][T21894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.268453][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.297246][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.337133][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.367468][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.397324][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.426879][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.457538][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.477409][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.505824][T16356] Bluetooth: hci1: command 0x041b tx timeout
[ 3290.507473][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.549259][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.578638][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.607347][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.627342][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.666972][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.696242][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.717175][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.748317][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.776225][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.798883][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.837213][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.858823][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.887769][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.917917][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.937261][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.967986][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3290.997914][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.028275][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.047027][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.087168][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.117281][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.136225][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.157862][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.188557][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.208479][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.237300][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.267975][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.301026][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.327166][T21893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008021100000700021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218240406089c02000200"], 0x3e)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r4 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x100c0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x25c, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a921577050d3c64f3378cae46fe8f2437168104e84193996"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e23ad272a83120b898bb20e8877b446764e45ca6fa25b621"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eac0e06be1b7638f24d03dafd81ae1f5ac5543bc07bbbfda"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a45ef2e57a9c36e99b44234b9399a13a927a004b5bf0e6f9"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b99a5967735dbca293802f9dccd6b91b37aeec53f223f5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "354173f5ed81fedd3eb39bf0859a2684984608c21a3568d5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e3d73ea9468ee7ec02200ceca687875edc13356e3069b6cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a0d032995d0871f2990c8199cc88afe96f20a6830bc0c35"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4800}, 0x85)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008021100000700021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218240406089c02000200"], 0x3e) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) (async)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x100c0, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x25c, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a921577050d3c64f3378cae46fe8f2437168104e84193996"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e23ad272a83120b898bb20e8877b446764e45ca6fa25b621"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eac0e06be1b7638f24d03dafd81ae1f5ac5543bc07bbbfda"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a45ef2e57a9c36e99b44234b9399a13a927a004b5bf0e6f9"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b99a5967735dbca293802f9dccd6b91b37aeec53f223f5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "354173f5ed81fedd3eb39bf0859a2684984608c21a3568d5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e3d73ea9468ee7ec02200ceca687875edc13356e3069b6cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a0d032995d0871f2990c8199cc88afe96f20a6830bc0c35"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4800}, 0x85) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

02:18:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6d, 0xe, {@with_ht={{{0x0, 0x2}, {}, @broadcast, @device_a, @random="ba9544f18c44"}}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}]]}, 0x90}}, 0x0)

02:18:58 executing program 2:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(r1, 0x34)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x2, 0x3, 0x4, 0x1, 0x10000, {}, {0x3, 0x1, 0x81, 0x2, 0x4, 0x1, "0529ff5a"}, 0x40, 0x2, @userptr=0x1, 0x100, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))

02:18:58 executing program 0:
perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r3=>0x0})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1aaf9, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x18cc9}, 0x0)

02:18:58 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(r1, 0x34)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x2, 0x3, 0x4, 0x1, 0x10000, {}, {0x3, 0x1, 0x81, 0x2, 0x4, 0x1, "0529ff5a"}, 0x40, 0x2, @userptr=0x1, 0x100, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))

02:18:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x34000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:58 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xa0}}, 0x0)

02:18:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x400300}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:58 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000002440)={&(0x7f0000002100), 0xc, &(0x7f0000002400)={&(0x7f0000002200)=@migrate={0x9c, 0x21, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, [@tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in=@loopback}]}, @replay_thresh={0x8}]}, 0x9c}}, 0x0)

[ 3291.683526][T21916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.805934][T21916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3291.921115][T21918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x240000, 0x0)
signalfd4(r0, &(0x7f0000000280), 0x8, 0x0)

[ 3292.030005][T21916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:18:59 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(r1, 0x34)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x2, 0x3, 0x4, 0x1, 0x10000, {}, {0x3, 0x1, 0x81, 0x2, 0x4, 0x1, "0529ff5a"}, 0x40, 0x2, @userptr=0x1, 0x100, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))

02:18:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r3 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000001000)='O', 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f0000001e80)=""/4096, 0x1000)
add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000001000)='O', 0x1, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c000096c0b1f66c6af1ba00", @ANYRES16=r5, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$P9_RSTATu(r6, &(0x7f0000000580)={0x1a2, 0x7d, 0x0, {{0x0, 0x86, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, '', 0x29, 'p\x02\x00\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00', 0x29, 'p\x02\x00\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00', 0x1, '$'}, 0x107, '/dev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xb99\x0e\xa8O\x93C\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x981\x9f0\x11\x84G\xaa\x9a\xa5~\xb0\xa0{t\xdf\x99\xae\"sR\n(\x0e\x19\xe4\xbb\xc9\b\xb9\xc29\x161\x1c\x98t\xf1N\x96\xce\x81jf\x9bJps\x85\xc2Y\xcc\xab#\xba\xd2$\xb3\x8e\x12\b\x05\xb49\x9f\xdb\x1b~\xb2\x9c\x1e\xfd\x89\xc1\xfbM\x98[\xd2\xba\x19\xd2\xd5r\xcf\x8a\xeeV\xf3\xb0\xa2\x91B\x7f\x14\xfc\\\x88\x86i\xffV\x94l\xb84\xd9g2\xaal{E\xd5\xed\xa5\n\x13\xe6B\x98\xc4\x86R\x1e\xd6\xa2\xa3\x1b@\x11\xfa\xef\xb4\x88\x1e\xde\x1fs<\b\xbc\xc9\x15\xef\x1f6\xb3\xe9\xd8\x0e\"\xe7O\x95J\xccd\xfb#\xf2\x96\x05n\x0e\x14\x04KT\f\x95\x16\xc3\xac\xcd\x11\xa0\xb0o(u\xe0\xca@\xaf)t\xcf', 0xee00, 0xee00}}, 0x1a2)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x1402, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001)

02:18:59 executing program 0:
perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r3=>0x0})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1aaf9, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x18cc9}, 0x0)

[ 3292.408894][T21933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3292.455736][T10772] wlan1: authenticate with 08:02:11:00:00:00
[ 3292.462767][T10772] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3292.499468][ T3790] wlan1: authenticated
[ 3292.500026][T21937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3292.503913][T21214] mac80211_hwsim hwsim117 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 3292.565514][ T3790] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3292.576362][T10772] Bluetooth: hci1: command 0x040f tx timeout
02:18:59 executing program 2:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(r1, 0x34)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x2, 0x3, 0x4, 0x1, 0x10000, {}, {0x3, 0x1, 0x81, 0x2, 0x4, 0x1, "0529ff5a"}, 0x40, 0x2, @userptr=0x1, 0x100, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))

02:18:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:59 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x280, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9b29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

02:18:59 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(r1, 0x34)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x2, 0x3, 0x4, 0x1, 0x10000, {}, {0x3, 0x1, 0x81, 0x2, 0x4, 0x1, "0529ff5a"}, 0x40, 0x2, @userptr=0x1, 0x100, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))

[ 3292.662165][ T3790] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 3292.662614][T21937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3292.679899][ T3790] wlan1: associated
02:18:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:18:59 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x280, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9b29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

02:19:00 executing program 0:
perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r3=>0x0})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1aaf9, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x18cc9}, 0x0)

02:19:00 executing program 1:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@generic, &(0x7f0000000000)=0x80, 0x80000)
preadv(r0, 0x0, 0x0, 0x80000001, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000406400000000001f0000122200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000"])
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4d87a, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2)

02:19:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:19:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r3 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000001000)='O', 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f0000001e80)=""/4096, 0x1000)
add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000001000)='O', 0x1, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c000096c0b1f66c6af1ba00", @ANYRES16=r5, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$P9_RSTATu(r6, &(0x7f0000000580)={0x1a2, 0x7d, 0x0, {{0x0, 0x86, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, '', 0x29, 'p\x02\x00\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00', 0x29, 'p\x02\x00\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00', 0x1, '$'}, 0x107, '/dev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xb99\x0e\xa8O\x93C\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x981\x9f0\x11\x84G\xaa\x9a\xa5~\xb0\xa0{t\xdf\x99\xae\"sR\n(\x0e\x19\xe4\xbb\xc9\b\xb9\xc29\x161\x1c\x98t\xf1N\x96\xce\x81jf\x9bJps\x85\xc2Y\xcc\xab#\xba\xd2$\xb3\x8e\x12\b\x05\xb49\x9f\xdb\x1b~\xb2\x9c\x1e\xfd\x89\xc1\xfbM\x98[\xd2\xba\x19\xd2\xd5r\xcf\x8a\xeeV\xf3\xb0\xa2\x91B\x7f\x14\xfc\\\x88\x86i\xffV\x94l\xb84\xd9g2\xaal{E\xd5\xed\xa5\n\x13\xe6B\x98\xc4\x86R\x1e\xd6\xa2\xa3\x1b@\x11\xfa\xef\xb4\x88\x1e\xde\x1fs<\b\xbc\xc9\x15\xef\x1f6\xb3\xe9\xd8\x0e\"\xe7O\x95J\xccd\xfb#\xf2\x96\x05n\x0e\x14\x04KT\f\x95\x16\xc3\xac\xcd\x11\xa0\xb0o(u\xe0\xca@\xaf)t\xcf', 0xee00, 0xee00}}, 0x1a2) (async)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x1402, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001)

02:19:00 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x280, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9b29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

02:19:00 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x280, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9b29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

[ 3293.452530][T21968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3293.542952][T21964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:19:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:19:00 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000300)=0x98)

02:19:00 executing program 2:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(r1, 0x34)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x2, 0x3, 0x4, 0x1, 0x10000, {}, {0x3, 0x1, 0x81, 0x2, 0x4, 0x1, "0529ff5a"}, 0x40, 0x2, @userptr=0x1, 0x100, 0x0, <r2=>0xffffffffffffffff})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))

02:19:00 executing program 0:
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
io_setup(0x5, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0xc12, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}])
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)

02:19:00 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

02:19:00 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0)

02:19:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:19:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r3 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000001000)='O', 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f0000001e80)=""/4096, 0x1000)
add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000001000)='O', 0x1, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c000096c0b1f66c6af1ba00", @ANYRES16=r5, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$P9_RSTATu(r6, &(0x7f0000000580)={0x1a2, 0x7d, 0x0, {{0x0, 0x86, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, '', 0x29, 'p\x02\x00\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00', 0x29, 'p\x02\x00\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00', 0x1, '$'}, 0x107, '/dev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xb99\x0e\xa8O\x93C\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x981\x9f0\x11\x84G\xaa\x9a\xa5~\xb0\xa0{t\xdf\x99\xae\"sR\n(\x0e\x19\xe4\xbb\xc9\b\xb9\xc29\x161\x1c\x98t\xf1N\x96\xce\x81jf\x9bJps\x85\xc2Y\xcc\xab#\xba\xd2$\xb3\x8e\x12\b\x05\xb49\x9f\xdb\x1b~\xb2\x9c\x1e\xfd\x89\xc1\xfbM\x98[\xd2\xba\x19\xd2\xd5r\xcf\x8a\xeeV\xf3\xb0\xa2\x91B\x7f\x14\xfc\\\x88\x86i\xffV\x94l\xb84\xd9g2\xaal{E\xd5\xed\xa5\n\x13\xe6B\x98\xc4\x86R\x1e\xd6\xa2\xa3\x1b@\x11\xfa\xef\xb4\x88\x1e\xde\x1fs<\b\xbc\xc9\x15\xef\x1f6\xb3\xe9\xd8\x0e\"\xe7O\x95J\xccd\xfb#\xf2\x96\x05n\x0e\x14\x04KT\f\x95\x16\xc3\xac\xcd\x11\xa0\xb0o(u\xe0\xca@\xaf)t\xcf', 0xee00, 0xee00}}, 0x1a2)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x1402, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000001000)='O', 0x1, 0xffffffffffffffff) (async)
keyctl$read(0x2, r3, &(0x7f0000001e80)=""/4096, 0x1000) (async)
add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000001000)='O', 0x1, 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c000096c0b1f66c6af1ba00", @ANYRES16=r5, @ANYBLOB="0b0b29ad700012dcdf251f"], 0x6c}}, 0x0) (async)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
dup2(0xffffffffffffffff, 0xffffffffffffffff) (async)
write$P9_RSTATu(r6, &(0x7f0000000580)={0x1a2, 0x7d, 0x0, {{0x0, 0x86, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, '', 0x29, 'p\x02\x00\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00', 0x29, 'p\x02\x00\xff\xeb\t\xb55\x1f[\xde1@\x00\x00\x00\x00\x18{\x82\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00', 0x1, '$'}, 0x107, '/dev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xb99\x0e\xa8O\x93C\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x981\x9f0\x11\x84G\xaa\x9a\xa5~\xb0\xa0{t\xdf\x99\xae\"sR\n(\x0e\x19\xe4\xbb\xc9\b\xb9\xc29\x161\x1c\x98t\xf1N\x96\xce\x81jf\x9bJps\x85\xc2Y\xcc\xab#\xba\xd2$\xb3\x8e\x12\b\x05\xb49\x9f\xdb\x1b~\xb2\x9c\x1e\xfd\x89\xc1\xfbM\x98[\xd2\xba\x19\xd2\xd5r\xcf\x8a\xeeV\xf3\xb0\xa2\x91B\x7f\x14\xfc\\\x88\x86i\xffV\x94l\xb84\xd9g2\xaal{E\xd5\xed\xa5\n\x13\xe6B\x98\xc4\x86R\x1e\xd6\xa2\xa3\x1b@\x11\xfa\xef\xb4\x88\x1e\xde\x1fs<\b\xbc\xc9\x15\xef\x1f6\xb3\xe9\xd8\x0e\"\xe7O\x95J\xccd\xfb#\xf2\x96\x05n\x0e\x14\x04KT\f\x95\x16\xc3\xac\xcd\x11\xa0\xb0o(u\xe0\xca@\xaf)t\xcf', 0xee00, 0xee00}}, 0x1a2) (async)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x1402, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) (async)

02:19:01 executing program 0:
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
io_setup(0x5, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0xc12, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}])
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)

[ 3294.040926][T21985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:19:01 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x902)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="ae88bff824f400005a90f501bbfed6033c7c3f07962c22772e11b44e69ffff0000dd2ac8bbe462920000c300ffbfc796", 0x30}], 0x1)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/47, 0x2f}, {0x0, 0x3a0}], 0x2)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x24, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x85, 0x4}, 0x0, 0x0, 0x0})

02:19:01 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1100}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0)

02:19:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3294.142039][T21985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3294.259274][T21985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:19:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3294.394819][T22003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3294.666432][T10772] Bluetooth: hci1: command 0x0419 tx timeout
02:19:01 executing program 0:
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
io_setup(0x5, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0xc12, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}])
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)

02:19:01 executing program 1:
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/5, 0x5})
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080), 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x0, 0x0, 0x7)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a004100, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x1000000}])
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

02:19:01 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000017021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:19:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:19:01 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x902)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="ae88bff824f400005a90f501bbfed6033c7c3f07962c22772e11b44e69ffff0000dd2ac8bbe462920000c300ffbfc796", 0x30}], 0x1)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/47, 0x2f}, {0x0, 0x3a0}], 0x2)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x24, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x85, 0x4}, 0x0, 0x0, 0x0})

[ 3294.859699][T22017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:19:02 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020f"]})

02:19:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x9000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3294.968855][T22022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:19:02 executing program 1:
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/5, 0x5})
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080), 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x0, 0x0, 0x7)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a004100, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x1000000}])
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

[ 3295.068992][T22017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:19:02 executing program 0:
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
io_setup(0x5, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0xc12, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}])
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)

02:19:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xe000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:19:02 executing program 1:
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/5, 0x5})
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080), 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x0, 0x0, 0x7)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a004100, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x1000000}])
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

[ 3295.366115][T16356] usb 3-1: new high-speed USB device number 107 using dummy_hcd
02:19:02 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000017021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 64)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (rerun: 64)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

02:19:02 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000000))

02:19:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:19:02 executing program 1:
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/5, 0x5})
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080), 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x0, 0x0, 0x7)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a004100, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x1000000}])
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

[ 3295.560838][T22039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:19:02 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x902)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="ae88bff824f400005a90f501bbfed6033c7c3f07962c22772e11b44e69ffff0000dd2ac8bbe462920000c300ffbfc796", 0x30}], 0x1)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/47, 0x2f}, {0x0, 0x3a0}], 0x2)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x24, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x85, 0x4}, 0x0, 0x0, 0x0})

[ 3295.615585][T16356] usb 3-1: Using ep0 maxpacket: 8
02:19:02 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000200))

[ 3295.696749][T16356] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 3295.708407][T22045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3295.727765][T22045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3295.787364][T16356] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3295.848671][T16356] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3295.907036][T16356] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 3295.941709][T16356] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 3295.979999][T16356] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 3296.001825][T16356] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 3296.211151][T16356] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3296.231824][T16356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3296.261669][T16356] usb 3-1: Product: syz
[ 3296.272082][T16356] usb 3-1: Manufacturer: syz
[ 3296.282647][T16356] usb 3-1: SerialNumber: syz
[ 3296.595639][T16356] cdc_ncm 3-1:1.0: bind() failure
[ 3296.604458][T16356] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 3296.637261][T16356] cdc_ncm 3-1:1.1: bind() failure
[ 3296.686559][T16356] usb 3-1: USB disconnect, device number 107
02:19:04 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005f100)={0x0, [], 0x0, "b67d5166ab9c79"})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
syncfs(r3)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, <r4=>0x0}, &(0x7f0000000380)=0x7)
setuid(r4)
socket$inet6_udp(0xa, 0x2, 0x0)
listen(0xffffffffffffffff, 0x5)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000007ec0)=@abs, 0x6e, &(0x7f0000007fc0)=[{&(0x7f0000007f40)=""/41, 0x29}, {0x0}], 0x2, &(0x7f0000008000)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r5=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x2, 0x0, &(0x7f0000008400)={0x77359400})
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000cc00)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002800)="f5990184899894c1e4d315711cfec6f1063d684b0911e6c9a3ce798779765148b5f878af3b2846d3d623ee4394c4297fc71893a2d5cb57cab7d99ccfe1912fd5e70abfad298d7d26ba38e9cfb0eb5da8c520dac7d146106c102e3d0f37d61533b15add3e", 0x64}, {&(0x7f0000002900)}, {&(0x7f0000002a00)="ae4c8d443d40a9ecfce992ae0f51280c2dda08876f4ab2f14fab4f952c60370ed174f127744c287fdeb015dbe92b7a85acbe38115bb8b3abc19437ed8d65d4410af52bd8aff8c348bc9f683cd6b639a84755bb82", 0x54}, {0x0}], 0x4, &(0x7f0000008440)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xa8, 0x801}}, {{&(0x7f0000002dc0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40001}}, {{&(0x7f0000008900)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000008b40)=[{&(0x7f0000008980)}, {&(0x7f0000008b00)="2951de098f35a18411748cd8f49d98da", 0x10}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="1800f78e281133424ede000042fb12c229feb9e188e0776424b491845242d6d3f084106cbc539e494878e70a0163872abe4b3184d4207ca39a2ba5315f9a8422ccba82f92c8b57ac4f033f879fbdc0bdbf8a355ce69ac0a7fd8316ed97af2a24d6e6f323d344ea81499b66b098a61081ef205a657e83d5ab76fc487f03e9a1bea4f313d25c1b5cc95a52284af7ffffffffffffffeb2facf2c8a8bbb96ce80b5316af87d526a8f8bd5cb5e70c3407e8", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2c0000000100", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32], 0x44, 0x4000000}}, {{&(0x7f0000008c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000b080)=[{&(0x7f0000002b40)="af00004c4562534d7565c1009ab2b8061a009330f485431ac330a00361904167ac16c092ad24233d3740f5fd525ee568a9fb8ac68d43a8bbd10d38e069ac61a32ff1b630cb801584bedd160f20087918fe4cf2df753a84331983eb771839ceb374d048b93b8c8ee60ee5ebf296191b14b79227d047e4e3990acdef97fdcf08f68d4a9006bc268036ad6b73e4b9758714ddfe2a3b54fb5340cead3217aeecb0ced05d1e79798de5c6782a", 0xaa}, {&(0x7f0000008d40)}, {&(0x7f0000008dc0)="683557018a738f5617307a5cbfe75017ba5317f184808f7b63e1f124fcf7702481cc6fab582655d666c9327247200cc0d2c873d91664479d87c163c761a3867f838fb70eb4bb1ebc49033d85561ff9bc8e6b63c5e923621b8617feb8bc5149bd147683c72518ae775839871a4af24f", 0x6f}, {&(0x7f0000008ec0)="c626575b6a5bfbba87fd3999d92868bb04052bd08bbe73f1155c2481b32b85c531de80de5ec41b475474279dee01ab19f9bfba6992893827445945536e27c82bfbe0075dc95b967889f3d74d1e8f514b59982b294502c2159d68b2e608c408aa50225635b3e1ee4773cc7f120868c24a64ba", 0x72}, {&(0x7f0000008f40)="114b72ee50332ec7498f1a27cdb7398d267697d872460c32db406a1fbd9549a0d8a4945e7e8e06167df03d63aeb70b83fcd7157a5d17d814098dc5c438ebe7ac3e87298ff451", 0x46}, {&(0x7f0000008fc0)}, {&(0x7f0000009fc0)}, {&(0x7f000000a000)="d2bf108836f242df765b7c0938c82b5272a13c8c3b466e4918cd399871202756ea723e748e08b6a9e1cb47e5ec1404d953321f976f8a283d8b3c69b61ca375fcc72e80a6add6faac00174495fec067f0e47ce625a6db82ff92e39b916cabc5f2505f90301503e152b874cdb3568a83cadb82ef3dc1c4d9a99120cb24ee779040039aaa68dc6780b7a27ed9b00ddb268f6a69322fb49161cb7f98a58bfde14fec5285d3e7d3fe6e75548df9c0145c5609e2e481251a83128af643dc7906e8b16d53d637a047fd46c2bf3e7f0c5628a3c7e87e4eb91d15f34629f2f591239dcc45bd5529fb383ab8566b273170efee52a255d09ac0240d04eb45566cae107e5676020961119725ea028d84f0645cb4d0a0a2c120423ef171b62e1c1cceb0e3aaa7bf02905f5c15ec0f9b626a3359c95a3c6b113d80347f4e0cf60d17de235c02e73612e74276b4ef2777ab36a6582e2ce0c6fa479da04e71603fb698d26c1ef34cf20a053b03b3bb573720799945cd5a48cb6eca85875c5cbda600d1768f0ea90f7477f43917d3af9c864179ce972165ec537b6bb1578806def388480b74f626bc51267934ef77dbf8a45eaf93389d2f4dd210ee2ddfbee987e042ce0cf41e0a03877fbc4aafd9524147396035dc1a488d48a9df31b2fe8c188fc1059b5bf7bf0266a76deda97d5a8d0081311f8969477bf4c33aff895e605c276c2dd469b7de00d510e60e3cb45e0f390360087452b6289d695ede2bf054ec206061fe9dc565c876ac96d661fac8de8f23685eb255ae36c7774ae31c3ef0892470990ee815e7638ad0dc479834b8043fb0ac7b9e96bc1b5e2a621b514ab4ea9ee73ca1e765a4ffa0d7827e90e32ee8bcbcbfd19b987065ed2f96408272fcd42570b8ebba6d2345ba09e3598d3e063e88eee5be8a93e8fc42940f63c340113bd9eff795710c1d2d1bd3221988513506f6381d46ccdce60a39384b200f71776edb40f01c3ffd8f80ac62410431c010a2fcadf6259777e8e58677bd7d0f8982e461125d4ead6d5a4b27f311bc9832b62f976972127781872a6c98d6217e0a49d925a50c2f01d9569901c8ab0dfef8d3b5ea212d4131c0c0c1e4573600914f3e5452157d66f026bf0afed40aa6db71b3142a9f6db726408d4d46c466b3ec5541f2d185b48bfb7f9a6c8bf172821ed4945bb056e188fd3ab83c33249101559d1ffe5aac5fbcf9f50dbe24c03cfa413b4d416f8e4c9956b80647c0c019c16f01995c05d98b6fb5464030677d8ef3566e8197368fa412b514a98f57f88a17d9dc4afc4ba0cc091a8c7b1e0f2ad78518b36788e60f9650c49eede3276271c367fab274bc8f0a8a64bf28d9153e744ed3cbc9af8e55d936e999465aef77e7c9608d7eb7a2cd24853440875d5d7ab0d551bf260925dae0f56f1259adc693a469449e11a9b8df74e7089d3dd850e6ccc6995a03ee38d53845cd312628aaeff68bcce77fb3f7b92d21603bc44840a0a2e6d9e491858db34b5a8039b308b3de05bca5688a43d6303ac8aee643f3f5b3b20f3146e2417403a53ef543fb8f30c6f0fbe17e30bcc8de2a4b40db3b8e4c1933ceb6b3ac5902bab5d40faf1daa28839e68eb96286da1d08de95fbb807df457967bbb38e0287f6d373dc5647c07a7b161aa3146f8a508cf9e8d289c773460343f224b92e08aacf81b6b9fd6a8da49724628d0cc9d067022b17eb6699d8dbaaae102a695e26e317c60a623d5241608ac7ff7c1d09fee20474193a30ddf0164d2d0750766cc07a5878bae191d3dcaf16dde741562fafff91d7052018c3f7481e8ac2dba7aa507e1d52640c3efa876119b06dc3710c9de2e28f177425db2d38becf4274bdc897b61eedec59949214ac0fd1eb16f5cc8f298eb01f8c7da85dbfbc59b9eef5b9721ac4842b2493510af8bccd5311a7b1f07e68132a6174cddfc57dbd4eff3b4331bddf51f5b0b019c1fe58319c41ef508ff6f7f20a6facfba1c7f32297ada9eaa530c0f87b32aec09c6415a0a82d0fc2bb1ad34f933bc60d008f919347f7ec6a2a9fbe9589bc8e0d8ab59f23595bf6b903a360bb51460ac95cc9a866c87641e0e0d94bcbc0836bdb15e4dd46b51033ff2e848bcec16ec63058b94979fd6664268d67ec459f6a84d9c36f9efeaaa51526217a77291a53b943b4cf4c8f2f6277debe10f8f6e35f0ef7067d7f2ab14276dee6297ec608b00ecc8beb586ead9a800c05734085edb1189b8a14a72b555b5ca942c498673130620a67fc570d370709566eecd78e0710b21884c6e9f2ee03d00054f01212f4b4f870e609658926e8c1d6957dc1fc600d83d7487ec4e66a0d673682bd40b178097cf4addc08769f3a9af7b96b2bad9a1dfaed76efb84efcfe264e2808347d7369a6ddffe7af46a3cc9b23da0b45272ef76b7ef00cfe91515feaf826a8726359877036e25c48cc0ec496cc493f5ecdfc4c47e56bd5038ee581e8d8bb0dd21a61bc3b73aa5b5e44f268ae46771557ff9b17a696aac3df641d11d5ee770a51d5282922081fd6a3912363c31dc0f10c3dd307ce36f85be3af1c3c3c5835c04c10d259f8d7d2b11b8f552a90adc20def89283602403d16a357dabaa48efe09e769c02e9f18a1d741be7bdbc81d13ab4d5348d3043eb98eca3e5e8d36b95600c3ecae2fd4b9609351acde95ae208e6252762f33af8fd1ffc9c35c97f55fc9780ce97095d8a110073e076b27d60efca19b3d1b0c9b8190adbdf38d85071a21381b4b3a17c6589d2339623de2a7a868ec9c6f9206baa1d6bca4f2584b7e8ba2421e7f9893b53b347dca3d908ca31ca6060a781409a142253a8de51dfe1516b34121692da947f9ad5f07ab3c8f7c8e098bf65d5d007cc7e7cffbf671f23b59515a64fb2b5114b7263c67175c098bf07e35afdb91a626bcbdbefa0ced2a1cd6c131ac5d83ddd11b0090b2bc255e1d2d21818c0c944e250ebcaff7c0af9919cf224dcca0e7fe665b097690a0be3ed121e6da5f86c444f8627840c5fc5390f1e9979ac457a70226c90df60de9a0c65be4ca4ef7a74bbd26eb26dfce12ef45748449fd386b262df03b6b3a6e676ddca3fad319fdfaaa892162c5c7229352b7c118c38508dc6d7d07037de7bae4fa96eb760708c6225bec204b1f772627660df2fc987b0f81249a7790ab3c45cbeb2a220409743e7e7d2c7b0dba0954244af7c335d9e6c77271910e4f2e3db11d2fa8f5ce71defecb872886bed965adf49952dd94863e0969b6f3ee6caf8706afc30d261554a68193e296d014c414ddb86746f1b2a8e098f96301dd1909067b08c173e666061fffa8a9dbb34cf0042f983e0e26d82af3abfdb8cfb1df6a0af4fa394ddf90e48a4d57c89e85112ed8daadb2841d582c38af77aff65d18392bd1e95026aeb2ea93c8976f75491f14e1a52a25ed2e91a5165fda013484f99c426f133d8ff3368239866091286e2d520e823922026b91f4ba73be1939a1d33a1775ae6f1ad4e4c400d851af61abb0823826096231504176dae57442309580ee7123f4cd043e716efae12eb4c41a5990650f9263d079fb8c165daf1455dd9b04f800cf5c1106bfd76513d28f1d22aeecdc314ea226c317069d1a28d34d7123d212d7ebd730fb368122ad9b706195b51954896efb3198c85763262a37a7c204828e526e451a5397b8a358bd030454025386eb88f6e69a99a737891d51e1c560abf7af5c27aa9c3054114108fe2597a99f560166fc649730fb497578b8ed55bb5d95f036a74e849b8ddc14411dd6a30ac72328cf136cfd6fe496f15c75309049bfc7adda78430a40133112e4282643419994131eac475f25845eda6e5f07837793e2af40780324427c44413803019c2a140003d93f51047c7f88688f63d63aa9b69021d6dfce162a807e822121691bcc60ac84134a3198887ea756175cb50f85940edc6d7f07db4d058a00f83835b8a352378b63772d39da34e031814f9610a09697b12bd59d9cca1fcccf7605038890ab083a3df9da3d93b180a3c235f80240f15f2064891d45a23c85e19346a2b57c1de6b29d6608402d8e8025da4e1143724004a40b21eca51c7895f30035d890aed659ec38bef54f227e5d8b080cdc824720a5f5c4741289fbe77cdd680f88f219c03b4e677da8f12d7c26c58742faefac11322bfa32f9d3038fd43f9b28387d805ddf6febe8af2b2543cf2ecbb3ea05ad5c9e8e4c5c7be833afc1b6a30cd428b2507e9061c4955b508b2bcbe12e5029c545f5f9540fde13ff00482fc804bce54f9b6bba57b3fe5fcb30d0588365b662a80edfcfb1a34d782ab20507f74fbad2618416380e7fdaa9d00779381a31da18e2bad7e5ea8e5c01fdeb1d41e0f2fb56a2e8bc91235d35df13a5053111a6aa947701cf0cf742284bac8ea2af68965041a2b5f0f194450308c1b89a3505f9143dca641ea61ebe7cb81792a252b4e770b0304e71435631e4f3abb992ced65db6fc72b1ae35c379ba3bc0451bf8fb69a291ab9bba14f1060cead16f0da7051fc19d84a822a98371d140b9d0d4d3d89ba6fd33330ccb12d0dd937a3b18f1817ced992987fd3b878674df7f4684c82cf14b83a5035df57ab0e3bcd37d253a6f80528f864840b547b05920e93caf6cd9c7d16ae0f87eb50cc10d4df8860194950894f6a517493632aace3e72fc43c470a9a8f80c3c21ee6c08f2630c799c6356fed33276543366b001a41d162448b14b2bce042ce2ceb1154b92c87176439ca5c72da50d331a9360f173506f822726628ab267051385e25738dab0ca43e4b9fc2da5d5d5a1926e609c10501e4bc9927d3ba1b78ff1ff822d3be846fd07d423a24b081146c80fad28f3debf13787908c3e9d657978aebdc2f9da74ded40f8de3ee37be3930acc1eae0e5bbf276740a0edb7d54dab7b5ac01f9bb20edf3a06bf21e9ef193d37e717fd0f85ea1c102e19376a0d8c7f737435ea7cc5974ddcc18cc5098392a45af922699d4aef94505a9d49f8826c5fc196b822e0a176ad1ff226bfc4a77d8c232478e7f69400dddcc59cbccd8615547477251ee1c5f372322b1f885aaf46449aca7e3ae7f12612de203f703b279582f4e4a53b456d04a841e039ef9b45934a12dc22b0f35f81d8c9a60b9152bc6d4078fd62576f513e814fdaaa8c18ed6a75e4d3478594b10562cf4bdc09b6f00759fbe990ee4b45f0579783d3c44754947267d7ea10793de6220a49c526ad91aafa036932fa5ed2e25418b98abf7e7e4d596687e32e57e943dc8ff061648f352ea983fc5053b1171d77c1ac569a01f59fb1ca21698e8c53d991719cbba6929a1f67be8b4d59d2032193aedf0466ee66804e1da937afa4a885dc69d5bcf667ab2f3e5e6fea3876881c4e91f75fbd0b960714826b2a2a04315b5781f3dab256c1eab088ee4749c59a1e3bf6ce5709aa66afad41bffebb93b1453a070a4810d3de5449a280353f2ea4c4a348189fcfc2caadddc3aa3c558476563147aeb9f1b106368bc8c7e8f3be415807da5e4b143659517489af201d159dd43ad5044b543500e9a697c34f507807bd7f0f3292dadce9765b9d62a9a282686c14a048cf0f825b71873118fd35a341bf6c65a6ff8c4452aeee0496da347daf32647b4f1c0561e58360ef48df2c0908b387c149fc8f0a551ad03bf26cfc74013569315419824bb98591a15c4ea566d340d165a54ef6aeb3e0d7775ba431289116aa0cb7a2ee4d360e0b29f9d8d546e295d6d53804a0725b3e39fa7d1df88425af839f32e517824941827f528ab5ec0300955e3", 0xff8}, {&(0x7f000000b000)="fafa63e6a1ff5b11736d6131187aa6b812b0f220b93cf41946682af42d4f9c27a0e3924fde55288423f2a6f747bdd2d070b2366336e6e8ea93e8259a031bfdf97bf2f24dd671b189a5badd5ebaece01e309100655f49ca6037b557461060e374", 0x60}], 0x9, &(0x7f000000b280)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f000000c580)=[{&(0x7f000000b380)="8564d4959964e913b41d8063a37551c447a9861da7e57c424dc93e3e72a2ad2187e1485a39ea35db083b35e994168c88f85166fed2eb6510885be2b6ee5e0e51008fbaf96db023683538d4df66dc7e4f51dca61bd6329e311388e803845b76dbee0739e25dc2a2c2073fdc308f27cb0c2aca7b57f2907b18bb1f799ba489b68d28", 0x81}, {&(0x7f000000b480)}, {&(0x7f000000b4c0)="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", 0x5a2}], 0x3, &(0x7f000000c600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x88}}, {{&(0x7f000000c6c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f000000cb40)=[{&(0x7f000000c840)="42f970f4f78b42d65691c481587d43641ccd49efa8975262a49bde57afd9b4cfe4f563894080e7f6f1d81134669b149335ad25b72dcd865fd287d24c90eec5b2eff413d3703b38c30aad62b43a06e943baab3821b491c4232e9d037bc2c4e22e339a5e5f9f01650d42e7b11e0adcdf3016db0c13ac1d635361bdc47b0104b27a2947153737c81de23441b622204e6eb84acc5119a6deefa63020715cddb370f6322096c5b465e2271533174c3e8bd0e97eb08521eff187dac058c7f375a78c313e5de74197", 0xc5}, {0x0}, {0x0}], 0x3, &(0x7f0000002180)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYBLOB="180000000100000002eee9d2160000", @ANYRES32, @ANYRES32=r4], 0x34}}], 0x6, 0x20000084)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)

02:19:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24180000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

02:19:04 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
io_setup(0xf7d, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000040)="27c593d9137240", 0x7}])

02:19:04 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x141281)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230302740a000500000002000020d3"])

[ 3297.196841][ T3790] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
02:19:04 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x902)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="ae88bff824f400005a90f501bbfed6033c7c3f07962c22772e11b44e69ffff0000dd2ac8bbe462920000c300ffbfc796", 0x30}], 0x1)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/47, 0x2f}, {0x0, 0x3a0}], 0x2)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x24, &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x85, 0x4}, 0x0, 0x0, 0x0})

[ 3297.283210][T22061] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 3297.343511][T22061] vhci_hcd: invalid port number 10
02:19:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

[ 3297.365107][T22061] vhci_hcd: invalid port number 10
[ 3297.477533][T22065] hub 9-0:1.0: USB hub found
[ 3297.521349][T22065] hub 9-0:1.0: 8 ports detected
[ 3297.659037][ T3790] device hsr_slave_0 left promiscuous mode
[ 3297.678669][ T3790] device hsr_slave_1 left promiscuous mode
[ 3297.687259][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3297.704731][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3297.729335][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3297.765981][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3297.787630][ T3790] device bridge_slave_1 left promiscuous mode
[ 3297.802489][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3297.836989][ T3790] device bridge_slave_0 left promiscuous mode
[ 3297.843428][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3297.890616][ T3790] device veth1_macvtap left promiscuous mode
[ 3297.906158][ T3790] device veth0_macvtap left promiscuous mode
[ 3297.925554][ T3790] device veth1_vlan left promiscuous mode
[ 3297.931423][ T3790] device veth0_vlan left promiscuous mode
[ 3298.598915][ T3790] team0 (unregistering): Port device team_slave_1 removed
[ 3298.660627][ T3790] team0 (unregistering): Port device team_slave_0 removed
[ 3298.701239][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3298.766615][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3299.021314][ T3790] bond0 (unregistering): Released all slaves
[ 3313.597354][T22079] chnl_net:caif_netlink_parms(): no params data found
[ 3313.782543][T22079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3313.806653][T22079] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3313.815073][T22079] device bridge_slave_0 entered promiscuous mode
[ 3313.839647][T22079] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3313.855965][T22079] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3313.875722][T22079] device bridge_slave_1 entered promiscuous mode
[ 3313.940961][T22079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3313.969807][T22079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3314.067757][T22079] team0: Port device team_slave_0 added
[ 3314.078088][T22079] team0: Port device team_slave_1 added
[ 3314.104417][T22079] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3314.113973][T22079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3314.140849][T22079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3314.155157][T22079] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3314.162709][T22079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3314.218052][T22079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3314.288866][T22079] device hsr_slave_0 entered promiscuous mode
[ 3314.306512][T22079] device hsr_slave_1 entered promiscuous mode
[ 3314.320264][T22079] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3314.335493][T22079] Cannot create hsr debugfs directory
[ 3314.733642][T22079] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3314.777699][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3314.788579][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3314.805143][T22079] 8021q: adding VLAN 0 to HW filter on device team0
[ 3314.832692][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3314.857962][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3314.867310][T16356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3314.874392][T16356] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3314.916987][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3314.926400][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3314.946241][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3314.966280][T16356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3314.973372][T16356] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3314.997247][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3315.028281][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3315.066742][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3315.087170][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3315.116852][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3315.126230][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3315.156694][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3315.176599][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3315.195524][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3315.204127][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3315.226207][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3315.249655][T22079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3315.296553][T10772] Bluetooth: hci1: command 0x0409 tx timeout
[ 3315.336442][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3315.344226][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3315.369658][T22079] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3315.421001][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3315.436274][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3315.489589][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3315.506540][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3315.535091][T22079] device veth0_vlan entered promiscuous mode
[ 3315.556917][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3315.567804][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3315.599047][T22079] device veth1_vlan entered promiscuous mode
[ 3315.617892][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3315.680240][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3315.697477][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3315.721330][T22079] device veth0_macvtap entered promiscuous mode
[ 3315.750019][T22079] device veth1_macvtap entered promiscuous mode
[ 3315.805592][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3315.825560][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3315.856396][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3315.875569][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3315.895359][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3315.915357][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3315.925196][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3315.964598][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3315.987761][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3316.005507][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3316.036994][T22079] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3316.050056][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3316.067653][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3316.086377][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3316.107344][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3316.129791][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3316.155332][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3316.165181][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3316.196037][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3316.216544][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3316.235830][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3316.264933][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3316.285859][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3316.305340][T22079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3316.335332][T22079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3316.366448][T22079] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3316.379023][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3316.398281][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3316.623647][ T3790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3316.654615][ T3790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3316.695892][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3316.761270][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3316.771469][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3316.807146][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3316.968072][T22088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3316.998647][T22089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3317.027815][T22089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3317.100606][T22089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3317.386219][T16356] Bluetooth: hci1: command 0x041b tx timeout
[ 3318.290833][ T1040] device hsr_slave_0 left promiscuous mode
[ 3318.309934][ T1040] device hsr_slave_1 left promiscuous mode
[ 3318.326086][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3318.333556][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3318.365730][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3318.373195][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3318.402949][ T1040] device bridge_slave_1 left promiscuous mode
[ 3318.416749][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3318.430281][ T1040] device bridge_slave_0 left promiscuous mode
[ 3318.445487][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3318.476685][ T1040] device veth1_macvtap left promiscuous mode
[ 3318.482768][ T1040] device veth0_macvtap left promiscuous mode
[ 3318.506029][ T1040] device veth1_vlan left promiscuous mode
[ 3318.511888][ T1040] device veth0_vlan left promiscuous mode
[ 3319.104923][ T1040] team0 (unregistering): Port device team_slave_1 removed
[ 3319.158911][ T1040] team0 (unregistering): Port device team_slave_0 removed
[ 3319.199934][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3319.276258][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3319.606824][ T1040] bond0 (unregistering): Released all slaves
[ 3327.380960][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[ 3327.387466][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
[ 3334.481062][T22096] chnl_net:caif_netlink_parms(): no params data found
[ 3334.624672][T22096] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3334.642738][T22096] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3334.666821][T22096] device bridge_slave_0 entered promiscuous mode
[ 3334.680319][T22096] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3334.687474][T22096] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3334.696326][T22096] device bridge_slave_1 entered promiscuous mode
[ 3334.729831][T22096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3334.755043][T22096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3334.802158][T22096] team0: Port device team_slave_0 added
[ 3334.829219][T22096] team0: Port device team_slave_1 added
[ 3334.873036][T22096] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3334.898205][T22096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3334.945330][T22096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3334.969062][T22096] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3334.995353][T22096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3335.045394][T22096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3335.132351][T22096] device hsr_slave_0 entered promiscuous mode
[ 3335.157108][T22096] device hsr_slave_1 entered promiscuous mode
[ 3335.163919][T22096] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3335.185913][T22096] Cannot create hsr debugfs directory
[ 3335.410514][T22096] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3335.417902][T22096] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3335.425336][T22096] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3335.432420][T22096] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3335.575766][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3335.583868][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3335.750724][T22096] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3335.790633][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3335.801034][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3335.821423][T22096] 8021q: adding VLAN 0 to HW filter on device team0
[ 3335.858441][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3335.876563][T21214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3335.895774][T21214] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3335.902868][T21214] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3335.938310][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3335.956574][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3335.976300][T18322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3335.983397][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3336.006503][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3336.046103][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3336.056935][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3336.087328][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3336.117055][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3336.127561][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3336.147202][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3336.166153][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3336.186595][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3336.214602][T22096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3336.246545][T22096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3336.263767][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3336.265692][T16926] Bluetooth: hci1: command 0x0409 tx timeout
[ 3336.287284][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3336.329111][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3336.346462][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3336.370143][T22096] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3336.439447][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3336.450396][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3336.506868][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3336.517047][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3336.547299][T22096] device veth0_vlan entered promiscuous mode
[ 3336.567576][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3336.587118][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3336.613011][T22096] device veth1_vlan entered promiscuous mode
[ 3336.702123][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3336.712984][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3336.740718][T22096] device veth0_macvtap entered promiscuous mode
[ 3336.766828][T22096] device veth1_macvtap entered promiscuous mode
[ 3336.813520][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3336.846314][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3336.865771][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3336.886094][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3336.905481][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3336.935518][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3336.955535][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3336.985475][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3337.005997][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3337.026046][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3337.058232][T22096] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3337.081015][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3337.092679][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3337.116358][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3337.126518][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3337.149549][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3337.175637][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3337.200306][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3337.225809][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3337.246235][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3337.265462][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3337.299523][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3337.325491][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3337.345450][T22096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3337.366421][T22096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3337.387390][T22096] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3337.403089][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3337.416900][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3337.641669][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3337.685633][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3337.742174][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3337.797424][ T3790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3337.825780][ T3790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3337.862647][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3338.007696][T22103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.028966][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.067247][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.088384][T22106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.099603][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.137029][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.158599][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.197839][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.218919][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.247922][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.277705][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.307481][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.329455][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.340902][T16935] Bluetooth: hci1: command 0x041b tx timeout
[ 3338.367766][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.387900][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.426576][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.456591][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.477923][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3338.529883][T22104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3339.880394][   T54] device hsr_slave_0 left promiscuous mode
[ 3339.906370][   T54] device hsr_slave_1 left promiscuous mode
[ 3339.948672][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3339.978692][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3340.019669][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3340.065877][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3340.078651][   T54] device bridge_slave_1 left promiscuous mode
[ 3340.084915][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3340.116573][   T54] device bridge_slave_0 left promiscuous mode
[ 3340.122826][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3340.161872][   T54] device veth1_macvtap left promiscuous mode
[ 3340.177483][   T54] device veth0_macvtap left promiscuous mode
[ 3340.183606][   T54] device veth1_vlan left promiscuous mode
[ 3340.207245][   T54] device veth0_vlan left promiscuous mode
[ 3340.784195][   T54] team0 (unregistering): Port device team_slave_1 removed
[ 3340.835722][   T54] team0 (unregistering): Port device team_slave_0 removed
[ 3340.879877][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3340.912864][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3341.149001][   T54] bond0 (unregistering): Released all slaves
[ 3388.832045][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[ 3388.838853][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
[ 3396.580485][T22119] chnl_net:caif_netlink_parms(): no params data found
[ 3396.708697][T22119] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3396.727572][T22119] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3396.739117][T22119] device bridge_slave_0 entered promiscuous mode
[ 3396.781614][T22119] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3396.789464][T22119] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3396.797956][T22119] device bridge_slave_1 entered promiscuous mode
[ 3396.847037][T22119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3396.879704][T22119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3396.958194][T22119] team0: Port device team_slave_0 added
[ 3396.986431][T22119] team0: Port device team_slave_1 added
[ 3397.030910][T22119] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3397.047696][T22119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3397.115773][T22119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3397.138195][T22119] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3397.145166][T22119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3397.215342][T22119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3397.302989][T22119] device hsr_slave_0 entered promiscuous mode
[ 3397.320256][T22119] device hsr_slave_1 entered promiscuous mode
[ 3397.336267][T22119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3397.343944][T22119] Cannot create hsr debugfs directory
[ 3397.609454][T22119] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3397.616589][T22119] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3397.623975][T22119] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3397.631111][T22119] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3397.678885][T16926] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3397.697449][T16926] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3397.864604][T22119] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3397.906795][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3397.919757][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3397.941182][T22119] 8021q: adding VLAN 0 to HW filter on device team0
[ 3397.969988][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3397.989092][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3398.007110][T16926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3398.014304][T16926] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3398.063174][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3398.076477][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3398.095669][T16356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3398.102771][T16356] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3398.126852][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3398.157095][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3398.177653][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3398.207653][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3398.248734][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3398.258959][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3398.276679][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3398.296232][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3398.326341][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3398.340333][T16935] Bluetooth: hci1: command 0x0409 tx timeout
[ 3398.342839][T22119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3398.387671][T22119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3398.403625][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3398.417099][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3398.473358][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3398.490768][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3398.527278][T22119] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3398.583227][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3398.593886][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3398.637521][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3398.656374][T10772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3398.680047][T22119] device veth0_vlan entered promiscuous mode
[ 3398.696141][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3398.716667][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3398.733216][T22119] device veth1_vlan entered promiscuous mode
[ 3398.824290][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3398.836034][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3398.860131][T22119] device veth0_macvtap entered promiscuous mode
[ 3398.878647][T22119] device veth1_macvtap entered promiscuous mode
[ 3398.940907][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3398.966010][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3398.985803][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3399.005608][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3399.036340][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3399.058463][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3399.075336][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3399.100520][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3399.125332][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3399.155610][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3399.176987][T22119] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3399.188247][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3399.207771][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3399.226579][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3399.240112][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3399.260744][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3399.299550][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3399.309966][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3399.345330][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3399.355182][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3399.385334][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3399.415662][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3399.435321][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3399.445161][T22119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3399.475325][T22119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3399.509562][T22119] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3399.523692][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3399.556454][T16926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3399.783951][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3399.803551][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3399.852610][T22124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3399.919041][T17239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3399.936874][T17239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3399.974702][T22124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3400.146364][T22128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3400.418869][T18322] Bluetooth: hci1: command 0x041b tx timeout
[ 3401.422062][T17239] device hsr_slave_0 left promiscuous mode
[ 3401.437795][T17239] device hsr_slave_1 left promiscuous mode
[ 3401.460194][T17239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3401.475654][T17239] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3401.495874][T17239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3401.503335][T17239] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3401.531932][T17239] device bridge_slave_1 left promiscuous mode
[ 3401.545536][T17239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3401.557231][T17239] device bridge_slave_0 left promiscuous mode
[ 3401.563478][T17239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3401.609732][T17239] device veth1_macvtap left promiscuous mode
[ 3401.625955][T17239] device veth0_macvtap left promiscuous mode
[ 3401.632087][T17239] device veth1_vlan left promiscuous mode
[ 3401.655582][T17239] device veth0_vlan left promiscuous mode
[ 3402.234341][T17239] team0 (unregistering): Port device team_slave_1 removed
[ 3402.279805][T17239] team0 (unregistering): Port device team_slave_0 removed
[ 3402.323943][T17239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3402.359978][T17239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3402.652598][T17239] bond0 (unregistering): Released all slaves
[ 3404.225225][T22132] chnl_net:caif_netlink_parms(): no params data found
[ 3404.498656][T22132] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3404.525431][T22132] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3404.533916][T22132] device bridge_slave_0 entered promiscuous mode
[ 3404.578673][T22132] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3404.605680][T22132] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3404.614366][T22132] device bridge_slave_1 entered promiscuous mode
[ 3404.739929][T22132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3404.776848][T22132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3404.939099][T22132] team0: Port device team_slave_0 added
[ 3404.980534][T22132] team0: Port device team_slave_1 added
[ 3405.045699][T22132] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3405.052686][T22132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3405.145504][T22132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3405.190382][T22132] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3405.218744][T22132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3405.305365][T22132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3405.452949][T22132] device hsr_slave_0 entered promiscuous mode
[ 3405.486541][T22132] device hsr_slave_1 entered promiscuous mode
[ 3405.505389][T22132] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3405.513086][T22132] Cannot create hsr debugfs directory
[ 3405.855992][T18322] Bluetooth: hci1: command 0x0409 tx timeout
[ 3406.139603][T22132] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3406.198716][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3406.217515][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3406.254460][T22132] 8021q: adding VLAN 0 to HW filter on device team0
[ 3406.282373][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3406.292691][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3406.313967][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3406.321140][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3406.343252][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3406.370470][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3406.386354][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3406.405654][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3406.412742][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3406.487962][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3406.498900][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3406.556618][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3406.591268][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3406.626393][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3406.658704][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3406.707679][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3406.736120][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3406.744771][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3406.804394][T22132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3406.846724][T22132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3406.885909][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3406.926209][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3406.976103][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3406.983673][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3407.011042][T22132] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3407.050673][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3407.061481][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3407.097716][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3407.107477][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3407.129750][T22132] device veth0_vlan entered promiscuous mode
[ 3407.138696][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3407.148938][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3407.168476][T22132] device veth1_vlan entered promiscuous mode
[ 3407.209796][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3407.219732][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3407.229868][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3407.246715][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3407.270859][T22132] device veth0_macvtap entered promiscuous mode
[ 3407.310271][T22132] device veth1_macvtap entered promiscuous mode
[ 3407.349935][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3407.376519][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.395464][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3407.425593][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.446621][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3407.465726][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.485639][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3407.517100][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.545268][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3407.575578][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.597655][T22132] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3407.610242][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3407.631768][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3407.657225][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3407.668142][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3407.690157][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3407.716383][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.735573][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3407.765740][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.785683][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3407.807490][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.836635][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3407.855573][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.875555][T22132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3407.905494][T22132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3407.927438][T22132] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3407.934912][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3407.945926][T19927] Bluetooth: hci1: command 0x041b tx timeout
[ 3407.953665][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3408.200647][  T951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3408.247086][  T951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3408.289085][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3408.353190][  T951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3408.364595][  T951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3408.404192][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3408.618573][T22139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.648309][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.689404][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.717450][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.746861][T22139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.768187][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.804117][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.837113][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.858095][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.887250][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.909544][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.937671][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.957630][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3408.987730][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3409.046175][T22140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3410.346129][  T951] device hsr_slave_0 left promiscuous mode
[ 3410.357505][  T951] device hsr_slave_1 left promiscuous mode
[ 3410.377861][  T951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3410.395803][  T951] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3410.406682][  T951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3410.414135][  T951] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3410.446388][  T951] device bridge_slave_1 left promiscuous mode
[ 3410.452644][  T951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3410.477817][  T951] device bridge_slave_0 left promiscuous mode
[ 3410.484061][  T951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3410.537954][  T951] device veth1_macvtap left promiscuous mode
[ 3410.544037][  T951] device veth0_macvtap left promiscuous mode
[ 3410.566238][  T951] device veth1_vlan left promiscuous mode
[ 3410.572092][  T951] device veth0_vlan left promiscuous mode
[ 3411.170543][  T951] team0 (unregistering): Port device team_slave_1 removed
[ 3411.241459][  T951] team0 (unregistering): Port device team_slave_0 removed
[ 3411.291580][  T951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3411.359032][  T951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3411.676211][  T951] bond0 (unregistering): Released all slaves
[ 3413.130920][T22144] chnl_net:caif_netlink_parms(): no params data found
[ 3413.428707][T22144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3413.446365][T22144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3413.475650][T22144] device bridge_slave_0 entered promiscuous mode
[ 3413.528080][T22144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3413.555922][T22144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3413.585959][T22144] device bridge_slave_1 entered promiscuous mode
[ 3413.676296][T22144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3413.728369][T22144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3413.869740][T22144] team0: Port device team_slave_0 added
[ 3413.909186][T22144] team0: Port device team_slave_1 added
[ 3413.999669][T22144] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3414.025946][T22144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3414.106240][T22144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3414.156295][T22144] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3414.163359][T22144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3414.265543][T22144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3414.402633][T22144] device hsr_slave_0 entered promiscuous mode
[ 3414.446228][T22144] device hsr_slave_1 entered promiscuous mode
[ 3414.475545][T22144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3414.483158][T22144] Cannot create hsr debugfs directory
[ 3414.735469][T19927] Bluetooth: hci1: command 0x0409 tx timeout
[ 3415.094342][T22144] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3415.186951][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3415.207092][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3415.241031][T22144] 8021q: adding VLAN 0 to HW filter on device team0
[ 3415.279053][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3415.289966][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3415.306192][ T4205] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3415.313283][ T4205] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3415.376492][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3415.386638][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3415.416532][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3415.436205][T16935] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3415.443302][T16935] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3415.478847][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3415.488653][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3415.538487][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3415.568342][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3415.606564][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3415.636297][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3415.680389][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3415.696411][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3415.705018][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3415.756304][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3415.764918][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3415.820623][T22144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3415.911919][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3415.920995][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3415.948679][T22144] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3416.009934][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3416.021231][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3416.079855][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3416.090808][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3416.120604][T22144] device veth0_vlan entered promiscuous mode
[ 3416.129660][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3416.139644][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3416.179274][T22144] device veth1_vlan entered promiscuous mode
[ 3416.200301][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3416.266439][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3416.279749][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3416.310846][T22144] device veth0_macvtap entered promiscuous mode
[ 3416.340763][T22144] device veth1_macvtap entered promiscuous mode
[ 3416.386702][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3416.416884][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.436315][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3416.455549][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.485520][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3416.505371][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.515211][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3416.555976][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.575908][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3416.595395][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.617499][T22144] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3416.628158][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3416.647631][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 3416.670418][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3416.696662][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3416.719311][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3416.736234][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.767029][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3416.785744][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.806913][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3416.825921][T19927] Bluetooth: hci1: command 0x041b tx timeout
[ 3416.837618][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.855884][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3416.876049][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.904593][T22144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3416.935554][T22144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3416.956868][T22144] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3416.972283][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3416.987287][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3417.232824][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3417.268621][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3417.347009][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3417.373860][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3417.397710][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3417.435351][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3417.588020][T22152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.619924][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.662556][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.688159][T22155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.697205][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.732746][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.769135][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.797745][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.816116][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.837944][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.873940][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.907680][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.927429][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.956742][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3417.977262][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3418.001815][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3418.027743][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3418.057454][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3418.077370][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3418.111679][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3418.166252][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
2021/12/14 02:21:05 executor 4 failed 11 times:
executor 4: exit status 67
SYZFAIL: netlink_send_ext: bad netlink ack type
type=41 (errno 22: Invalid argument)
SYZFAIL: child failed
 (errno 0: Success)
loop exited with status 67