y_handle_at(r5, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r6, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x40c, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0xa}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x80c0) (async) r7 = open(&(0x7f0000000280)='./file1\x00', 0x280000, 0x102) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendmsg$unix(r7, &(0x7f0000000c40)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)}, {&(0x7f0000000480)="4734fe2b85ce5ae1575e3a423a382b049d7e4991ea245ae22258b581f808618942f738c008c272eb744546187ee78915c7cba309b4bd303730eddcd08c34dad4eef7033696be1d2ed6dfeeb573f1d07061e8d84f8060ef4f5e37777fb2a97a3bbdad92da77b111ee432489134479dd9eb289783b6dee06e4dc8538adbc8bd852b26dad87ddaa5f4b42f93a6a9d6f185bb065fa42a24f911b7d181db567bdeaea1d6296818939eefc5e731a7f379dee4d7c5c604b462ccf3389dff6adc55391453bfd55ad81b427f1d335f876f7", 0xcd}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001000000000000000fd5d3faadf2d04fea6e83ab40e90100000000000000ed78e4e5e6253599442431aea3bb9aee6e3a9de5020000000000009f814d49a206a9f217b0408908d495d2a30abceb34546148e9220b856ddd0baf62976c70d9e008177e9a45ff922323d956aed7da8535880e4be19857b10c27332238f87baab8bd5c69a9410ccfa507f7890332d1acb4aea1d178baa6c261d35f9b016d0272ae", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f8"], 0xa8, 0x4000800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000280)='GPL\x00', 0x401, 0x34, &(0x7f0000000300)=""/52, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r7, 0xffffffffffffffff]}, 0x80) (async) getpeername$packet(r5, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000bc0)=0x14) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c00)={0x0, @remote, @remote}, &(0x7f0000000c40)=0xc) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xe0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x46081}, 0x8800) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108031100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) (async) syz_80211_inject_frame(&(0x7f00000005c0)=@broadcast, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x42) preadv(r0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000000980)=""/127, 0x7f}], 0x2, 0xfffffff9, 0x5d) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 607.972630][T18437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.996231][T18438] "syz-executor.1" (18438) uses obsolete ecb(arc4) skcipher 04:19:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2, {0x9}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2ea, 0x62}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r4 = open$dir(&(0x7f00000002c0)='./bus\x00', 0x400080, 0x20) fcntl$setsig(r4, 0xa, 0x30) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@ctrl_frame=@ba={{}, {0x1}, @device_a, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x7}, {0xd}, "7af72ecff4921a104ab272cd5b2660d5484a0936974127ec4ce0dff28ae7972982083f18ce91735bf8a5dee3cfdcbfb9be80b1aafacbb2a5a6a9a2b111935b7148e9c43a9fb776ed4e0960a1df3de1cc8d4b2f5578cd150c5f335cac6cf99eb96d41e788abf20788587ea536d2142b43ce323df69db64fecd32fbc9d7ca5008f"}}, 0x94) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r5, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x8, 0x1, 0x1, 0x1000}}, @void, @void, @void, @void}, 0x3e) [ 608.036915][T18437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.060129][T18447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.072237][T18447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0xe6) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x124, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x12}}}}, [@NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x36}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xfffffffb, 0x0, 0x6, 0x3f]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x31be4c1e, 0x3, 0x80, 0x3, 0xa7b, 0x8, 0x6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x800]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a7}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x100}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}]}, @NL80211_ATTR_CQM={0x80, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x334}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3, 0x0, 0x2, 0x1000, 0x0, 0x3]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x800, 0xfffffe00, 0x101, 0xfffffffb, 0x5, 0x5, 0x8000]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 608.083186][T18451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.091399][T18437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.093280][T18451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:06 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2, {0x9}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2, {0x9}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2ea, 0x62}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r4 = open$dir(&(0x7f00000002c0)='./bus\x00', 0x400080, 0x20) fcntl$setsig(r4, 0xa, 0x30) (async) fcntl$setsig(r4, 0xa, 0x30) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@ctrl_frame=@ba={{}, {0x1}, @device_a, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x7}, {0xd}, "7af72ecff4921a104ab272cd5b2660d5484a0936974127ec4ce0dff28ae7972982083f18ce91735bf8a5dee3cfdcbfb9be80b1aafacbb2a5a6a9a2b111935b7148e9c43a9fb776ed4e0960a1df3de1cc8d4b2f5578cd150c5f335cac6cf99eb96d41e788abf20788587ea536d2142b43ce323df69db64fecd32fbc9d7ca5008f"}}, 0x94) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r5, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) open_by_handle_at(r5, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x8, 0x1, 0x1, 0x1000}}, @void, @void, @void, @void}, 0x3e) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x8, 0x1, 0x1, 0x1000}}, @void, @void, @void, @void}, 0x3e) 04:19:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x3f000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 608.478323][T18453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.485634][T18455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.497684][T18455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.502774][T18456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.533701][T18453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.588555][T18453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0xe6) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x124, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x12}}}}, [@NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x36}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xfffffffb, 0x0, 0x6, 0x3f]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x31be4c1e, 0x3, 0x80, 0x3, 0xa7b, 0x8, 0x6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x800]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a7}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x100}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}]}, @NL80211_ATTR_CQM={0x80, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x334}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3, 0x0, 0x2, 0x1000, 0x0, 0x3]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x800, 0xfffffe00, 0x101, 0xfffffffb, 0x5, 0x5, 0x8000]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:06 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x246842, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x40ae) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x80000000, 0x2b, &(0x7f0000000540)=""/43, 0x40f00, 0x1f, '\x00', 0x0, 0x3b, r0, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x6, 0x401, 0x40}, 0x10, 0xffffffffffffffff}, 0x80) fstat(r0, &(0x7f0000000300)) r5 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x9}, 0x48) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendto$unix(r6, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0xfff6) recvfrom$unix(r6, &(0x7f0000000740)=""/252, 0xfc, 0x0, 0x0, 0x0) unshare(0x6c060000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind$alg(r5, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(xeta-generic)\x00'}, 0x58) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="6f07425bc9ec1213db1af9a553d014a643542ffb397c826712b48f2516607f05cd33903a063c4a3df0d67689a70534971292204e681d3af207555863a7807639a9cf54e59da21b80eb870c4dc848924216cddbd2f81955e29765e33f676c57a585551fff626056f0dd229e6a1cfaee3e", 0x70, 0x8000, &(0x7f0000000380)={0xa, 0x4e22, 0x5, @local, 0x200}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r7, 0x0, 0x0) [ 608.743868][T18458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.755266][T18458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2, {0x9}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2ea, 0x62}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8004) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2ea, 0x62}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r4 = open$dir(&(0x7f00000002c0)='./bus\x00', 0x400080, 0x20) fcntl$setsig(r4, 0xa, 0x30) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@ctrl_frame=@ba={{}, {0x1}, @device_a, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x7}, {0xd}, "7af72ecff4921a104ab272cd5b2660d5484a0936974127ec4ce0dff28ae7972982083f18ce91735bf8a5dee3cfdcbfb9be80b1aafacbb2a5a6a9a2b111935b7148e9c43a9fb776ed4e0960a1df3de1cc8d4b2f5578cd150c5f335cac6cf99eb96d41e788abf20788587ea536d2142b43ce323df69db64fecd32fbc9d7ca5008f"}}, 0x94) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@ctrl_frame=@ba={{}, {0x1}, @device_a, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x7}, {0xd}, "7af72ecff4921a104ab272cd5b2660d5484a0936974127ec4ce0dff28ae7972982083f18ce91735bf8a5dee3cfdcbfb9be80b1aafacbb2a5a6a9a2b111935b7148e9c43a9fb776ed4e0960a1df3de1cc8d4b2f5578cd150c5f335cac6cf99eb96d41e788abf20788587ea536d2142b43ce323df69db64fecd32fbc9d7ca5008f"}}, 0x94) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r5, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x8, 0x1, 0x1, 0x1000}}, @void, @void, @void, @void}, 0x3e) [ 608.830441][T18465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.851988][T18464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.864276][T18467] "syz-executor.1" (18467) uses obsolete ecb(arc4) skcipher 04:19:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x44000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 608.926563][T18470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.988965][T18471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.047995][T18470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0xe6) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x124, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x12}}}}, [@NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x36}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xfffffffb, 0x0, 0x6, 0x3f]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x31be4c1e, 0x3, 0x80, 0x3, 0xa7b, 0x8, 0x6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x800]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a7}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x100}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}]}, @NL80211_ATTR_CQM={0x80, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x334}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3, 0x0, 0x2, 0x1000, 0x0, 0x3]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x800, 0xfffffe00, 0x101, 0xfffffffb, 0x5, 0x5, 0x8000]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 609.100526][T18474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="34407194", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 609.140933][T18478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.151886][T18478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x15}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x24004004) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 609.196713][T18480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.208606][T18480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x58000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 609.369689][T18482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.425538][T18482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="34407194", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="34407194", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) [ 609.476251][T18484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.481853][T18482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.487343][T18484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.493851][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="34407194", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:07 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x246842, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x40ae) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x80000000, 0x2b, &(0x7f0000000540)=""/43, 0x40f00, 0x1f, '\x00', 0x0, 0x3b, r0, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x6, 0x401, 0x40}, 0x10, 0xffffffffffffffff}, 0x80) fstat(r0, &(0x7f0000000300)) r5 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x9}, 0x48) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendto$unix(r6, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0xfff6) recvfrom$unix(r6, &(0x7f0000000740)=""/252, 0xfc, 0x0, 0x0, 0x0) unshare(0x6c060000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind$alg(r5, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(xeta-generic)\x00'}, 0x58) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="6f07425bc9ec1213db1af9a553d014a643542ffb397c826712b48f2516607f05cd33903a063c4a3df0d67689a70534971292204e681d3af207555863a7807639a9cf54e59da21b80eb870c4dc848924216cddbd2f81955e29765e33f676c57a585551fff626056f0dd229e6a1cfaee3e", 0x70, 0x8000, &(0x7f0000000380)={0xa, 0x4e22, 0x5, @local, 0x200}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r7, 0x0, 0x0) 04:19:07 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x15}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x24004004) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 609.608479][T18491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.613017][T18490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.618360][T18492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.630702][T18491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.630815][T18492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.740768][T18498] "syz-executor.1" (18498) uses obsolete ecb(arc4) skcipher 04:19:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x60000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 609.820960][T18501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.887650][T18501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000020000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 609.945553][T18502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:07 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x15}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x24004004) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 609.971074][T18504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.973233][T18507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.980839][T18504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.988076][T18506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xee120000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 610.267077][T18510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000020000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (rerun: 64) 04:19:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x14}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x25) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 610.314109][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.318284][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.322282][T18516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.322306][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.322941][T18515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.328824][T18515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.330278][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.341436][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.345333][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.349315][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.353200][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.357227][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.361195][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.365493][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.369827][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.373913][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.376948][T18510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.377892][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.385464][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.390532][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.394497][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.398508][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.402471][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.406943][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.411244][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.415068][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.418967][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.422782][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.427337][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.431173][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.435119][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.439429][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.443274][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.448119][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.451910][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.455611][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.459833][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.463931][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:08 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x246842, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x40ae) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x80000000, 0x2b, &(0x7f0000000540)=""/43, 0x40f00, 0x1f, '\x00', 0x0, 0x3b, r0, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x6, 0x401, 0x40}, 0x10, 0xffffffffffffffff}, 0x80) fstat(r0, &(0x7f0000000300)) r5 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x9}, 0x48) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendto$unix(r6, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0xfff6) recvfrom$unix(r6, &(0x7f0000000740)=""/252, 0xfc, 0x0, 0x0, 0x0) unshare(0x6c060000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind$alg(r5, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(xeta-generic)\x00'}, 0x58) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="6f07425bc9ec1213db1af9a553d014a643542ffb397c826712b48f2516607f05cd33903a063c4a3df0d67689a70534971292204e681d3af207555863a7807639a9cf54e59da21b80eb870c4dc848924216cddbd2f81955e29765e33f676c57a585551fff626056f0dd229e6a1cfaee3e", 0x70, 0x8000, &(0x7f0000000380)={0xa, 0x4e22, 0x5, @local, 0x200}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r7, 0x0, 0x0) [ 610.468794][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.472987][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.476807][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.480774][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.485600][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.489889][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.494283][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.499578][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.504721][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.510214][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.515442][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.521464][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.526732][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.532300][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.537318][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.542515][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.547574][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.552531][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.558090][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.563151][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.568417][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.573539][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.581347][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.586584][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.592154][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.592607][T18520] "syz-executor.1" (18520) uses obsolete ecb(arc4) skcipher [ 610.597821][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.604678][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.609523][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.613289][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.618099][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.621837][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.625725][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x14}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x25) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x14}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x25) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) [ 610.672266][T18522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 610.693463][T18522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x14}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x25) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 32) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 610.743035][T18536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a12bb9a76fda9261f537e5ccb020ec243065fb77e024200b3f5bf9313ba36c9f4f0ad9a66775658c77fb380b50ead13944bd0f7109000d7d44b00ee278790500000000000000000000000000000000356fabb60bfa8e9ca8144093ff1a0e6e2491f94efa2625c6b57be27fb9d27fe6688c61ca918f193e345e1212dae5901a1e44d770a6c215b0120eeb73cad57e12c806dcaa31c1b70257d2904d65a27d", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b000000100100800a0000000202020202020000"], 0x40}}, 0x0) r3 = openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x402800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 610.770461][T18538] __nla_validate_parse: 1 callbacks suppressed [ 610.770475][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 610.782933][T18538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.794097][T18538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.804945][T18536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.860977][T18536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000020000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 611.024457][T18540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.037046][T18541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a12bb9a76fda9261f537e5ccb020ec243065fb77e024200b3f5bf9313ba36c9f4f0ad9a66775658c77fb380b50ead13944bd0f7109000d7d44b00ee278790500000000000000000000000000000000356fabb60bfa8e9ca8144093ff1a0e6e2491f94efa2625c6b57be27fb9d27fe6688c61ca918f193e345e1212dae5901a1e44d770a6c215b0120eeb73cad57e12c806dcaa31c1b70257d2904d65a27d", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b000000100100800a0000000202020202020000"], 0x40}}, 0x0) (async) r3 = openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x402800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 611.115348][T18543] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.117474][T18544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 04:19:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a12bb9a76fda9261f537e5ccb020ec243065fb77e024200b3f5bf9313ba36c9f4f0ad9a66775658c77fb380b50ead13944bd0f7109000d7d44b00ee278790500000000000000000000000000000000356fabb60bfa8e9ca8144093ff1a0e6e2491f94efa2625c6b57be27fb9d27fe6688c61ca918f193e345e1212dae5901a1e44d770a6c215b0120eeb73cad57e12c806dcaa31c1b70257d2904d65a27d", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b000000100100800a0000000202020202020000"], 0x40}}, 0x0) r3 = openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x402800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 611.144314][T18548] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.150133][T18548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="24a773204698305c0622d100933b00"/25, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:09 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps_rollup\x00') [ 611.362060][T18555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:09 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x3) getpgrp(r4) ptrace$setopts(0x4206, r4, 0x1, 0x4) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) getrlimit(0x2, &(0x7f0000000280)) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xb) sync() [ 611.362074][T18552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.377922][T18555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.414605][T18559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.480982][T18552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e74943a66edb3c32"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'dvmrp0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x1, 0xd2, "c47c103798358a958cfa12e479dd39c1e892f4f96ea072f92a920ceb5996ae33e87cebe7df5e82feba0058961c4dc21ab7e32f1340a98197424426d4ee18a0a1ac3bef5530ec55babc4b4069079f54cd27a6cbf8b1e3745769f149320332643be4b2f33047b23c4a0a2e9dd19c21c444cba46bb69881e78b46b2ff36971bd003847ec1a658dd7a85fdde1dba7c7bfa23f55aa2c318194a0cb8e6d754f6859b1251024a6113def6a5bdd73880751117a1c13e50e83088681ac02ea64448c9deafcc9f28108e07ec5ab305abb23ca633aba868"}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendfile(r6, r4, 0x0, 0x5) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x394, r5, 0x8, 0x7, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TESTDATA={0xa4, 0x45, "4e0820968325176325e3cecf6e1d6ae08938cc21fe1a14fd3307edd866368a1e0c547f9cdde0ef8c3a33011a1fd8861aed69b7f87c29cc8922d2e3d3fb5547ab15b74dfd3fac96c83919414e85f607210245c1c242ec0878a4759b52974b53c9d6745376029e6c43f3e115b0b04e1510cf9c811532f860e95ca380422ba49807e1937e088e6261f0c4f481114cc4b1d1d7d8dbea10ad7cdcfe2129752f49a85b"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x24, 0x45, "47627a2944638ddbf012b66fe4433a5c612c69e7d022c586eb3cabc332570b6b"}, @NL80211_ATTR_TESTDATA={0xea, 0x45, "63a0c26c9b6a646812e436f85d8121509711cb6619915915d09219fea3f74898cbdf1213b9b34cd48a193237861ce31910396b3de86d9ef6b5aee0c25537c66ec7b9648e1c53f1c44f12e046ba6c22a302d66b7100a39b86d23459db09a4d78a18dc20555f67ea9f675a9f0ee49acf316fcca2077af431c299760e46ca41a58caa2f5ca2706f9599c51bee8d217462dadb36c066483ef2630b062a2c273933729bc839a0619b8efe4414a392f25d149906f1cb3f2e781ffcf6a25f405297f14690dc2434380cfc599c1b6cf90dc6e8dcd9c9739650157ad0ffa72ae6e60423f9dd973a7334ae"}, @NL80211_ATTR_TESTDATA={0x1a, 0x45, "86b3be0ce493e442e8cfe4fde8d6f7aca4d456b6b1bc"}, @NL80211_ATTR_TESTDATA={0xb7, 0x45, "1d696bf9407da254954c78d6ceb0cb80ae151f250918cbb3a913fdc9f59c8ec273195696715e371e478b778a3b8d6b27ec52b71c1bef969759a46abbf0df82ad7151738b12e564c45c6b71a153684d0ebb9f4bf07bee8578d2bf0b0e8abb5de02e3eca71c13137b04f0a6ce637f15fd5e45832b5d69b4a7243c9827fcefd1fe4ffdce97be7184ac5232d547306955264693338586daaac2efcda50d4637c46df3b713db54a338eb20f78a9282d9bce8f1964ed"}, @NL80211_ATTR_TESTDATA={0x96, 0x45, "821a98c8504a02cff2f7a7ec674e3f43cf89bbfc72253ea72111731a100ba99e1cb57b0ef48b162396f37eb0bc787770e036a6b62790d9740daf4e26554f3f21168c442c4473643f137b90b48567d4bf401e5cf5f096e8c56a2d1dca17567e3fa6faf4b3cdd2f5f6de5ec78071d90047745798ee3ad836e2ba7cd1bfb5c2c4f9389d2ef920d1a5834d7f2103eb115c1e45e0"}, @NL80211_ATTR_TESTDATA={0x1d, 0x45, "a2d2d45ff5cbc7651fd70c0cb8d15ff2f298a9729d3f1d8a9e"}, @NL80211_ATTR_TESTDATA={0x32, 0x45, "72483d6d680ac90390621e259a84c5e9ef168fb9d2b9b55bacae066bec6df4d492df9e3fb3ae87117f88bb70c7f7"}]}, 0x394}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_IE={0x12, 0x2a, [@challenge={0x10, 0x1, 0x46}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x88}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044800}, 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x800000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x37, "15a57e4cf05c924dfd2e4b3f9644c1688f9f7501441bdc97ce279db3d68c74444669f659d4bde3bde422a7ca70435dcef70caea95d2f62"}, {0xdd, 0x82, "3ffc4ece9cbf24a26629a88189080ed3a97390cc2e5ed3d997139b3e975d88205655996589ffc59a9e648e6421482c36e67a85aa2f00bcc73797bac46f54e12de91a81fc3408f8dacaa6f0dfd80254fd36c7ab74f808d96bac93226893bf933516bbdd045179944c6e184194626fcf20b089c0d8dc351ed54002236a9b030786a0c6"}]}, 0xf3) [ 611.496757][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.563014][T18567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.574460][T18567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="24a773204698305c0622d100933b00"/25, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 611.723327][T18569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.731395][T18571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 611.801746][T18573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.856936][T18573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e74943a66edb3c32"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'dvmrp0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x1, 0xd2, "c47c103798358a958cfa12e479dd39c1e892f4f96ea072f92a920ceb5996ae33e87cebe7df5e82feba0058961c4dc21ab7e32f1340a98197424426d4ee18a0a1ac3bef5530ec55babc4b4069079f54cd27a6cbf8b1e3745769f149320332643be4b2f33047b23c4a0a2e9dd19c21c444cba46bb69881e78b46b2ff36971bd003847ec1a658dd7a85fdde1dba7c7bfa23f55aa2c318194a0cb8e6d754f6859b1251024a6113def6a5bdd73880751117a1c13e50e83088681ac02ea64448c9deafcc9f28108e07ec5ab305abb23ca633aba868"}}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendfile(r6, r4, 0x0, 0x5) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x394, r5, 0x8, 0x7, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TESTDATA={0xa4, 0x45, "4e0820968325176325e3cecf6e1d6ae08938cc21fe1a14fd3307edd866368a1e0c547f9cdde0ef8c3a33011a1fd8861aed69b7f87c29cc8922d2e3d3fb5547ab15b74dfd3fac96c83919414e85f607210245c1c242ec0878a4759b52974b53c9d6745376029e6c43f3e115b0b04e1510cf9c811532f860e95ca380422ba49807e1937e088e6261f0c4f481114cc4b1d1d7d8dbea10ad7cdcfe2129752f49a85b"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x24, 0x45, "47627a2944638ddbf012b66fe4433a5c612c69e7d022c586eb3cabc332570b6b"}, @NL80211_ATTR_TESTDATA={0xea, 0x45, "63a0c26c9b6a646812e436f85d8121509711cb6619915915d09219fea3f74898cbdf1213b9b34cd48a193237861ce31910396b3de86d9ef6b5aee0c25537c66ec7b9648e1c53f1c44f12e046ba6c22a302d66b7100a39b86d23459db09a4d78a18dc20555f67ea9f675a9f0ee49acf316fcca2077af431c299760e46ca41a58caa2f5ca2706f9599c51bee8d217462dadb36c066483ef2630b062a2c273933729bc839a0619b8efe4414a392f25d149906f1cb3f2e781ffcf6a25f405297f14690dc2434380cfc599c1b6cf90dc6e8dcd9c9739650157ad0ffa72ae6e60423f9dd973a7334ae"}, @NL80211_ATTR_TESTDATA={0x1a, 0x45, "86b3be0ce493e442e8cfe4fde8d6f7aca4d456b6b1bc"}, @NL80211_ATTR_TESTDATA={0xb7, 0x45, "1d696bf9407da254954c78d6ceb0cb80ae151f250918cbb3a913fdc9f59c8ec273195696715e371e478b778a3b8d6b27ec52b71c1bef969759a46abbf0df82ad7151738b12e564c45c6b71a153684d0ebb9f4bf07bee8578d2bf0b0e8abb5de02e3eca71c13137b04f0a6ce637f15fd5e45832b5d69b4a7243c9827fcefd1fe4ffdce97be7184ac5232d547306955264693338586daaac2efcda50d4637c46df3b713db54a338eb20f78a9282d9bce8f1964ed"}, @NL80211_ATTR_TESTDATA={0x96, 0x45, "821a98c8504a02cff2f7a7ec674e3f43cf89bbfc72253ea72111731a100ba99e1cb57b0ef48b162396f37eb0bc787770e036a6b62790d9740daf4e26554f3f21168c442c4473643f137b90b48567d4bf401e5cf5f096e8c56a2d1dca17567e3fa6faf4b3cdd2f5f6de5ec78071d90047745798ee3ad836e2ba7cd1bfb5c2c4f9389d2ef920d1a5834d7f2103eb115c1e45e0"}, @NL80211_ATTR_TESTDATA={0x1d, 0x45, "a2d2d45ff5cbc7651fd70c0cb8d15ff2f298a9729d3f1d8a9e"}, @NL80211_ATTR_TESTDATA={0x32, 0x45, "72483d6d680ac90390621e259a84c5e9ef168fb9d2b9b55bacae066bec6df4d492df9e3fb3ae87117f88bb70c7f7"}]}, 0x394}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_IE={0x12, 0x2a, [@challenge={0x10, 0x1, 0x46}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x88}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044800}, 0x1) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x800000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x37, "15a57e4cf05c924dfd2e4b3f9644c1688f9f7501441bdc97ce279db3d68c74444669f659d4bde3bde422a7ca70435dcef70caea95d2f62"}, {0xdd, 0x82, "3ffc4ece9cbf24a26629a88189080ed3a97390cc2e5ed3d997139b3e975d88205655996589ffc59a9e648e6421482c36e67a85aa2f00bcc73797bac46f54e12de91a81fc3408f8dacaa6f0dfd80254fd36c7ab74f808d96bac93226893bf933516bbdd045179944c6e184194626fcf20b089c0d8dc351ed54002236a9b030786a0c6"}]}, 0xf3) [ 611.906338][T18576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.911513][T18573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e74943a66edb3c32"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e74943a66edb3c32"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'dvmrp0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x1, 0xd2, "c47c103798358a958cfa12e479dd39c1e892f4f96ea072f92a920ceb5996ae33e87cebe7df5e82feba0058961c4dc21ab7e32f1340a98197424426d4ee18a0a1ac3bef5530ec55babc4b4069079f54cd27a6cbf8b1e3745769f149320332643be4b2f33047b23c4a0a2e9dd19c21c444cba46bb69881e78b46b2ff36971bd003847ec1a658dd7a85fdde1dba7c7bfa23f55aa2c318194a0cb8e6d754f6859b1251024a6113def6a5bdd73880751117a1c13e50e83088681ac02ea64448c9deafcc9f28108e07ec5ab305abb23ca633aba868"}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendfile(r6, r4, 0x0, 0x5) (async) sendfile(r6, r4, 0x0, 0x5) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x394, r5, 0x8, 0x7, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TESTDATA={0xa4, 0x45, "4e0820968325176325e3cecf6e1d6ae08938cc21fe1a14fd3307edd866368a1e0c547f9cdde0ef8c3a33011a1fd8861aed69b7f87c29cc8922d2e3d3fb5547ab15b74dfd3fac96c83919414e85f607210245c1c242ec0878a4759b52974b53c9d6745376029e6c43f3e115b0b04e1510cf9c811532f860e95ca380422ba49807e1937e088e6261f0c4f481114cc4b1d1d7d8dbea10ad7cdcfe2129752f49a85b"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x24, 0x45, "47627a2944638ddbf012b66fe4433a5c612c69e7d022c586eb3cabc332570b6b"}, @NL80211_ATTR_TESTDATA={0xea, 0x45, "63a0c26c9b6a646812e436f85d8121509711cb6619915915d09219fea3f74898cbdf1213b9b34cd48a193237861ce31910396b3de86d9ef6b5aee0c25537c66ec7b9648e1c53f1c44f12e046ba6c22a302d66b7100a39b86d23459db09a4d78a18dc20555f67ea9f675a9f0ee49acf316fcca2077af431c299760e46ca41a58caa2f5ca2706f9599c51bee8d217462dadb36c066483ef2630b062a2c273933729bc839a0619b8efe4414a392f25d149906f1cb3f2e781ffcf6a25f405297f14690dc2434380cfc599c1b6cf90dc6e8dcd9c9739650157ad0ffa72ae6e60423f9dd973a7334ae"}, @NL80211_ATTR_TESTDATA={0x1a, 0x45, "86b3be0ce493e442e8cfe4fde8d6f7aca4d456b6b1bc"}, @NL80211_ATTR_TESTDATA={0xb7, 0x45, "1d696bf9407da254954c78d6ceb0cb80ae151f250918cbb3a913fdc9f59c8ec273195696715e371e478b778a3b8d6b27ec52b71c1bef969759a46abbf0df82ad7151738b12e564c45c6b71a153684d0ebb9f4bf07bee8578d2bf0b0e8abb5de02e3eca71c13137b04f0a6ce637f15fd5e45832b5d69b4a7243c9827fcefd1fe4ffdce97be7184ac5232d547306955264693338586daaac2efcda50d4637c46df3b713db54a338eb20f78a9282d9bce8f1964ed"}, @NL80211_ATTR_TESTDATA={0x96, 0x45, "821a98c8504a02cff2f7a7ec674e3f43cf89bbfc72253ea72111731a100ba99e1cb57b0ef48b162396f37eb0bc787770e036a6b62790d9740daf4e26554f3f21168c442c4473643f137b90b48567d4bf401e5cf5f096e8c56a2d1dca17567e3fa6faf4b3cdd2f5f6de5ec78071d90047745798ee3ad836e2ba7cd1bfb5c2c4f9389d2ef920d1a5834d7f2103eb115c1e45e0"}, @NL80211_ATTR_TESTDATA={0x1d, 0x45, "a2d2d45ff5cbc7651fd70c0cb8d15ff2f298a9729d3f1d8a9e"}, @NL80211_ATTR_TESTDATA={0x32, 0x45, "72483d6d680ac90390621e259a84c5e9ef168fb9d2b9b55bacae066bec6df4d492df9e3fb3ae87117f88bb70c7f7"}]}, 0x394}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x394, r5, 0x8, 0x7, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TESTDATA={0xa4, 0x45, "4e0820968325176325e3cecf6e1d6ae08938cc21fe1a14fd3307edd866368a1e0c547f9cdde0ef8c3a33011a1fd8861aed69b7f87c29cc8922d2e3d3fb5547ab15b74dfd3fac96c83919414e85f607210245c1c242ec0878a4759b52974b53c9d6745376029e6c43f3e115b0b04e1510cf9c811532f860e95ca380422ba49807e1937e088e6261f0c4f481114cc4b1d1d7d8dbea10ad7cdcfe2129752f49a85b"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x24, 0x45, "47627a2944638ddbf012b66fe4433a5c612c69e7d022c586eb3cabc332570b6b"}, @NL80211_ATTR_TESTDATA={0xea, 0x45, "63a0c26c9b6a646812e436f85d8121509711cb6619915915d09219fea3f74898cbdf1213b9b34cd48a193237861ce31910396b3de86d9ef6b5aee0c25537c66ec7b9648e1c53f1c44f12e046ba6c22a302d66b7100a39b86d23459db09a4d78a18dc20555f67ea9f675a9f0ee49acf316fcca2077af431c299760e46ca41a58caa2f5ca2706f9599c51bee8d217462dadb36c066483ef2630b062a2c273933729bc839a0619b8efe4414a392f25d149906f1cb3f2e781ffcf6a25f405297f14690dc2434380cfc599c1b6cf90dc6e8dcd9c9739650157ad0ffa72ae6e60423f9dd973a7334ae"}, @NL80211_ATTR_TESTDATA={0x1a, 0x45, "86b3be0ce493e442e8cfe4fde8d6f7aca4d456b6b1bc"}, @NL80211_ATTR_TESTDATA={0xb7, 0x45, "1d696bf9407da254954c78d6ceb0cb80ae151f250918cbb3a913fdc9f59c8ec273195696715e371e478b778a3b8d6b27ec52b71c1bef969759a46abbf0df82ad7151738b12e564c45c6b71a153684d0ebb9f4bf07bee8578d2bf0b0e8abb5de02e3eca71c13137b04f0a6ce637f15fd5e45832b5d69b4a7243c9827fcefd1fe4ffdce97be7184ac5232d547306955264693338586daaac2efcda50d4637c46df3b713db54a338eb20f78a9282d9bce8f1964ed"}, @NL80211_ATTR_TESTDATA={0x96, 0x45, "821a98c8504a02cff2f7a7ec674e3f43cf89bbfc72253ea72111731a100ba99e1cb57b0ef48b162396f37eb0bc787770e036a6b62790d9740daf4e26554f3f21168c442c4473643f137b90b48567d4bf401e5cf5f096e8c56a2d1dca17567e3fa6faf4b3cdd2f5f6de5ec78071d90047745798ee3ad836e2ba7cd1bfb5c2c4f9389d2ef920d1a5834d7f2103eb115c1e45e0"}, @NL80211_ATTR_TESTDATA={0x1d, 0x45, "a2d2d45ff5cbc7651fd70c0cb8d15ff2f298a9729d3f1d8a9e"}, @NL80211_ATTR_TESTDATA={0x32, 0x45, "72483d6d680ac90390621e259a84c5e9ef168fb9d2b9b55bacae066bec6df4d492df9e3fb3ae87117f88bb70c7f7"}]}, 0x394}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_IE={0x12, 0x2a, [@challenge={0x10, 0x1, 0x46}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x88}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044800}, 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x800000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x37, "15a57e4cf05c924dfd2e4b3f9644c1688f9f7501441bdc97ce279db3d68c74444669f659d4bde3bde422a7ca70435dcef70caea95d2f62"}, {0xdd, 0x82, "3ffc4ece9cbf24a26629a88189080ed3a97390cc2e5ed3d997139b3e975d88205655996589ffc59a9e648e6421482c36e67a85aa2f00bcc73797bac46f54e12de91a81fc3408f8dacaa6f0dfd80254fd36c7ab74f808d96bac93226893bf933516bbdd045179944c6e184194626fcf20b089c0d8dc351ed54002236a9b030786a0c6"}]}, 0xf3) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x800000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x37, "15a57e4cf05c924dfd2e4b3f9644c1688f9f7501441bdc97ce279db3d68c74444669f659d4bde3bde422a7ca70435dcef70caea95d2f62"}, {0xdd, 0x82, "3ffc4ece9cbf24a26629a88189080ed3a97390cc2e5ed3d997139b3e975d88205655996589ffc59a9e648e6421482c36e67a85aa2f00bcc73797bac46f54e12de91a81fc3408f8dacaa6f0dfd80254fd36c7ab74f808d96bac93226893bf933516bbdd045179944c6e184194626fcf20b089c0d8dc351ed54002236a9b030786a0c6"}]}, 0xf3) [ 611.936648][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.939190][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.998840][T18583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.008552][T18584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="24a773204698305c0622d100933b00"/25, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 612.057446][T18588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.066441][T18588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x74de}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}]}, 0x44}}, 0x0) 04:19:10 executing program 1: syz_clone(0x52800500, 0x0, 0x0, 0x0, 0x0, 0x0) [ 612.247281][T18591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:10 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), 0xffffffffffffffff) [ 612.308881][T18591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1c761e2622a61f9a6c24b675e92d2b34b91238f99df06fe3"}]]}, 0x68}}, 0xd0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000882848b960c121824"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000000802170a000108021100000008021100000000000000000000020202020202010882848b960c121824000000000000000000c903d6798a8702488efb37d73cf1cffba10e000000000000575930575b8618656ae2d9ab7a8ce4e71631492aeed0139edff30bda4afc22c534547455e046983f26ab778ee0314680d2ce236086181cd8c93c4458ddd81162694f2318a53b7f52d6184413670954d0fda4cfc81f1d"], 0x36) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x3938700}) 04:19:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x38}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) [ 612.333432][T18601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.345292][T18601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.346970][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:19:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x18, 0x0, 0x0) [ 612.371282][T18591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_b, @from_mac=@device_b, @device_b, {0x3, 0x81}}, {0x7, 0x0, 0x3, 0x0, 0x5}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @from_mac=@broadcast, @random="21b3e7953b1f", {0xa, 0x8}}, {0x2, 0x0, 0x0, 0x1, 0x4}}}, @a_msdu=[{@broadcast, @device_a, 0xe0, "51bf633ddfef596042d55938ffb570c34a2b7fef96e358eeb7df68eed004ea40154d968597950da4a8099b8495f5cbbd12686480747482ba3d5b26de9ce3d321d7ade0a305d59682d5b21e1baacc417de3cdbe5cb7ae82f2daad165f692b7bf5e42d44c9c91883a7b7d29fbe28271e08ed962dee19a18ee041b73058f85efb077c867dc83e3d3bae21027e7827f2309ed1627ced3d60869cc92aa73269148bcd5ca25c4af414a29d88ae9d818b7d2cfe3bb432432ace3c8cc449d1e6c68bc9da70c50e3118b14f536b2cf6a56037006dccbfb8a85422a5ad0990c12631c6ef99"}, {@device_b, @device_a, 0xa7, "7035f34d8c485cda5885fdc4211339901151558e07bd2e4994b520420236a8fd47aa9f5bc7f7622f2a501fae2af8ebc3698a6da13cdf7261f24dbf20204d11ee150738386fe67393e82411a236818e9338765e9297c9e2c2a23f27783254782cacafba07b8d3a576965c57634bbf73fdde6bfc0e4c61a8c68eca12d9ad40d4e02eb742be2c60c22995d9e493cf7b39f52ddb1bf8ed2678982a6fe3705430cb38d7524917e81595"}, {@broadcast, @broadcast, 0x1016, "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"}, {@device_a, @broadcast, 0x36, "bfccd044c78a0cf7ba244d88789683875fd98f4f66e9d4076c1489f930b47849486295282ea42649a1f1a465ef7bd8cb2605a6959224"}]}, 0x1230) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 612.394564][T18607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0010000000e8bd6efb250314000e002100240248ff050005001200", 0x2e}], 0x1}, 0x0) 04:19:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1c761e2622a61f9a6c24b675e92d2b34b91238f99df06fe3"}]]}, 0x68}}, 0xd0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000882848b960c121824"], 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000000802170a000108021100000008021100000000000000000000020202020202010882848b960c121824000000000000000000c903d6798a8702488efb37d73cf1cffba10e000000000000575930575b8618656ae2d9ab7a8ce4e71631492aeed0139edff30bda4afc22c534547455e046983f26ab778ee0314680d2ce236086181cd8c93c4458ddd81162694f2318a53b7f52d6184413670954d0fda4cfc81f1d"], 0x36) (async, rerun: 64) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async, rerun: 32) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x3938700}) (rerun: 32) [ 612.686734][T18609] validate_nla: 2 callbacks suppressed [ 612.686744][T18609] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 612.692739][T18609] team0: entered promiscuous mode [ 612.694618][T18609] team_slave_0: entered promiscuous mode [ 612.696765][T18609] team_slave_1: entered promiscuous mode [ 612.699153][T18609] bridge15: entered promiscuous mode [ 612.701193][T18609] bridge16: entered promiscuous mode 04:19:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_b, @from_mac=@device_b, @device_b, {0x3, 0x81}}, {0x7, 0x0, 0x3, 0x0, 0x5}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @from_mac=@broadcast, @random="21b3e7953b1f", {0xa, 0x8}}, {0x2, 0x0, 0x0, 0x1, 0x4}}}, @a_msdu=[{@broadcast, @device_a, 0xe0, "51bf633ddfef596042d55938ffb570c34a2b7fef96e358eeb7df68eed004ea40154d968597950da4a8099b8495f5cbbd12686480747482ba3d5b26de9ce3d321d7ade0a305d59682d5b21e1baacc417de3cdbe5cb7ae82f2daad165f692b7bf5e42d44c9c91883a7b7d29fbe28271e08ed962dee19a18ee041b73058f85efb077c867dc83e3d3bae21027e7827f2309ed1627ced3d60869cc92aa73269148bcd5ca25c4af414a29d88ae9d818b7d2cfe3bb432432ace3c8cc449d1e6c68bc9da70c50e3118b14f536b2cf6a56037006dccbfb8a85422a5ad0990c12631c6ef99"}, {@device_b, @device_a, 0xa7, "7035f34d8c485cda5885fdc4211339901151558e07bd2e4994b520420236a8fd47aa9f5bc7f7622f2a501fae2af8ebc3698a6da13cdf7261f24dbf20204d11ee150738386fe67393e82411a236818e9338765e9297c9e2c2a23f27783254782cacafba07b8d3a576965c57634bbf73fdde6bfc0e4c61a8c68eca12d9ad40d4e02eb742be2c60c22995d9e493cf7b39f52ddb1bf8ed2678982a6fe3705430cb38d7524917e81595"}, {@broadcast, @broadcast, 0x1016, "5da5d25e37c2b15f22a82e5bc525c81848199cb67fb784fac182f0f5f444e6f8b58a9cc3c4a0418b180c4da5b2802a9dd4c7d59a93c15172381cd0f327b948629b96d121b8073a3ee40f8ec5baa77abb3aac6cccf6d2521f4f7c13ee223e6d1190704115044d47e1634ad188b07e9035d2b07817271d701611bcd96afeaf0b9d7e635fbd577d8aa4f3a528c178df16ba6a7bdc07bcfe95bdc93853d9832b93f8e3c224d837bb20cdab06aa0dae07defb861dc091e2c75f8aec6160b8f2adc67beefe4523de6d3925d54f1bb9a13da923affc52ec38cb3ee3a69aa87bff8e5d052d2f6ac386a6f99d944e932d8019fae16601d08a3b7fc40188ab0e8df62df5d9b8b13fac590d86720ef3315edb4993035701aba7f5ba98637e3e53fb9c420996d7a5d14b387291321020ec1b71e928133d7f53b5476b57142ad63575c3ba6dc1cbc3e07629740308a390142fee2f35cee063d40e5d67283dbd5c3781f55878dc3827eacd53939c7dc781e5277af09b0f6edb6455b8a1d5f67fe4d64eb5afb9456715da4753b4e1bae8f8836434d91fd0abb07c110cabe8b69b990560c2e5acd57212d0fead6a07267ef0691ac91c38efbb8a325acb84476829855e2f0a7329f135172f12e770cf1cb836f515d835b0fd23eb46f0c339343188047a6cd94f68a20e7366dd5ada081e56088cf53a1faeab161b4472fcbf15df102837b73f22507c6ff93946e9cd178ee44b4d4db46f5f4951e45def6661c55a17858a8eb63e95537754e016a30406f90b44cd1e0d76f0496bb7d3888df69ff1f43ab6c50005b9a44c32ad2ed13f597e8cc301a558340f9e8d039a33bf405c189e1f973deb45a69374b2c10cd10ec74be6ebb8fca6be71c1f6d5de6a84d78d5e00b777da6c61e951990b9e29f5fa2ded02cc8a89cee04d8e0c3daf6e08a5271ad6b9ecaa1e7d3bba667dd2341847e9cdc5295ec0073ca1e682dfdec7d1008956a291df8c58362dc95ffca037a81366aab3fb0e0fad9ba8fca1ae2f562f5887e0d892a1f4c5e3d22f6183a99d6d4ddd28d6b1c6f24bf00ad21eea7b22dcf097d156aae21021ce17926d3bf37b2d1c8dc1e6ba35e6bf1d1ed799308b1c0e485704f0440340fb7bea4e4896083b5c9f879ba9333f2ccb5f614450ca4118e1e2e7ac93b3bfccac6b7b1d78d57b592f86943340886836dffbe61fa51dbde8ae9640e12a9b50f7d24d0dc74fcdaff44046b26b0cd07e72877f49fd951f5ab7c66971468939e7543faf554866c72016dc15099e7eecd3e9c3957426d0edc1e5954d0e58c437414e433ca21851edb3d9e30caecaaaebe8dbd9544b1c1e3a8b2f9c4185a72afcaa54188019d90e6cac325a6d7d51d888b9597df4469ca4c45258d97e09e58f8a49c3be67e010117cf5820b111270d95cf7d5cde5b37edfdd95b648560478c1dc1188d8f7c67de4efe8288de41615c2c0c4ab2c5abed21ca096bf007485b64645ea4059e90f53eec842738ddd65103ae65adc75ab790e3a8e86cb7490d10f9f23a0197c340270b8b6a79cf3ea003eb420a9faeb5b169239bd4877194566a55c7740a7592f775619df64a6b5c525242d77e8056632975eacacbc165506a0caf0975e35b11dd2c0527636febbcd627d8a5657f4ca30f8c0003950ae0d7b07fed835b2d4ee7d39c1587d1c9225eecb9b1bc5dd9a8252da2f1bec2072193f244cea4229d42080e7c0cfe0475c3d648c6b93e2f951128a410faeecd63109e7cb7d08506226ba6645e0a743ee4752076b0cb21a1318a30bf5ed4dc1eafe28322be929c5061552099f1afbb112aefd3224caa21f9c18c47ade485cc3b6b928163bb9a7a14c1de15a231dcfbdd83ed2671f39b1545497db02e5b1011e1f72cb15bd3ea2dbda1fbf48dbda92e32bf41952b9a7c06516eb098606205a33d9838c8abb57e89631cbc803ed83cd2c397594a6064d60915e00c577061186a5fb73ef0dc9156930b8e3805181dff5b5e718b6dda149fe30c32a951362238a948e18e0a379f6314a22045f464d71967b938035a1af4787406c92cfd49ddfdf1666ca2965cff5366bbdafe78f1a29fccbe061b9cbab311c68b5b1536a7d7de029970dc5aeaa15a57a36390068d3a8d7cf02b34613854a6adc3926bb2f8c16cd68298395615f3044f4685754452347da009ace0ad6fdd6d512a0e0699e25be5586e0aeef82d94ec74c74b498de54ecb509f51127a567134160fbca1128f6c8e22116b1bcdc4dafc3fb1812ffbc12f62df7a12a83de85969a99b1a80473c6bab72899744a1ecb7a83d1edeee3cf04eb0f435b6668a2a07e17ac425d2587d50a2464ec39ea195d4d924ad2b7e9d4cbf5d9c9188850551d04fbc30d2e8ff960bb6d7c805ca987ec416d9e493f5e97831ad932308202e1e12e17db440e5f76d8872edef3adc59c470bbfc7e8c5c2472ab6be44bc1c904e8afd6d1e7124e27eeec6d5b8e1366759959cc87b9d66ce262ad0f3162852da282c346cfc6e0169f928d3e2287d102e4e115e801db027a3f4f1e594e9fb4e7161fc7af6218eebaa2e753f34fa73b30d2f23e718ffe6c160515ef49e9ce31d127cee6c30c09e873fdaee02d88b3afff9f3237063a486b63057089e0bd06969b828e9ffc9d714bc1ef5a960b818f5c95dafc8af5ca1ae03b1a48ec26cc9d697a76ee86d9a20eab269c11761afc6fd847da35c471f64ca24b848a5a4c7fca3bfa10a520fa2e6e2adb9cf85cd13f93be49d0e93bfdfd6e2cd766ad4f29f99709aaf622eada6838a52c665b7de4db3b6bc0cbe38cac548a60d114cfaa6b368538753cce9a79d1dc7ad3cc958b15cb9b7ac295a64f42d2602f275635ee37bbdd1971309a294cc8ba6337a3049b564822f09f5541e5d7e8f01ce48b76bbe4f75a8b3b1de95989fecaf80fc40d3d1fbfab424b4415732e6b3d1767ac458720a145c2c7fb9604050cdb03a2bdece3f1e35aaa9ccbd9293e667fa9fef1282c5d2db3f81127e3e8d4c9cca42e6bd6dd6073554feca18592ef4322e6902423d846152e6ffa05a859ec1fc8118a2d762e3494c78c61a81bdafba0fd58290bdaecd6aa5d7252ae5b69ea81b2edb4caf1187c6ddae5f9beeb9160bbaf9e16accc6b3c4b424bfc323a52d59907ee7403d258b1a390ebbb87addb27f94726e21ca50c721a91a1e5fac3c507707a6cb94e7561e0aa0a13da1b1197bf26fd4b18208be327a75420801475e60b73b5492ecd61ecc60fc1a7a1e004a103215cb04cafd4b23e8950431ead7833638c39d6044213e9a9c43236e4ff8e9556087b171c727f79216b81644733e3ec55157d8b4f5698b2e2bec4ac486155529bbee347e6055afc255468884d1f8f1fe905569639818e664ee50eb6dcf23ddbeaafcc46e36d8a202c00283c55fc7924f50831dd8987781717ed506f42fc3429e9da8bde26901cc01802c6a8a4308eeee705896145c7ec08658a4a4d0184d551a422ed15f33554e1c582f46678885ee83ed1f7717d6142c7eccb97e816e8cd201ce0894308bcfff9154f1d0b629a1e778d26946db2f392bff8d1f2d98c1bbf35cb4412b5e14398b1e1aad5f4347f3c0bc61d41d8e8107d5d22bb659e01695073d369a08cafcc0c9be66d097c9dc4dadf194bc67916981dc99d79e5111ef23a1487eded0aead3ec7f202f0ca773a38a086722734ee3b20d8544cce65409ed8326ceb54494e17534d07ecfc835ecd29a921b56121aeafa90b134584507ed8f055708d9124b21b04d636da96039c4c65bc7cab5a7dc0af0aaa9efc74273707b7fa790321f9989df0e98c85da0186ad9003936b4de2e8c03840eb362ad53747d59bd5566af78627df4492619826b74f56dba2b70d70b71ca12b5551ac2e117fe2b3e2b61c88795913988dd1b2b91edbf42a94fe50203607eeb349deccb8ea37e750a187a8ecd798dd0695a46444587d785a9b77e31c780e25c152fbc90dfa31010acb765bb6875a47bb99874f751d03bbc260ceb5814908224be4f7748b4f43ba002c85072b895bba48fd42f1bdb1bd2c73185024aa6595035dd292a42e6b2853b392f647d9b6f6fa5253c98ed66688fd38eaa73fe635243620ad040676a15e1839dc378066ebacfacdf4a849b63a555b268e342bf169d3599e7379fd04529535bb1c035ccc44e7a79dc05613b99a76457c4bd0dcd5ef01291e1478d09e889b03b9bf81a0cc423e70fb9531beafa72f39d42c2bc0ce909e0d4332e34c06f6db2c15869f7b7ca78fbfa3ec57d5728ed812320366d3f521f1db841762d8a7e9e21e92c73cbb328a37d4ef33754857fbf326d5c1fa1ebc495658645f3a49345ca5d3929cca48424fcd5c421a81423096801f85f8ebee738c9c86c5875305d1e4aad5bd916862e60d1807b3a0d5c82bb5f02a33d395cce25ac387bad61d70897e6db18828597c83be9f21227880f1e7765fe80f156713d65abecccc7e09236fecfc8f3a6f84b00ae2f5edf4867e9bd053ef0b0acd999e11d06d8894a492fa5aa65ef7a4a56c04d99fa79b4ca06443743e8b36bc2e44384b0764bffbe98ebc545872a9b2679f1a2aed434f310b11fb2e6cb144246e21a34f7bec4a83401a813c879785aa62bd4f72e99475431dc9e6e9525c97a8c0e01c3b2bb23a5da0617e0c7945d28b3525606c9311db670af2645e5579e6b1fe151ea4f3c377bf265e4b7f9fd08ffb2b2bf1a4e3289aebc5f7610084b3817549aa3b005ff1f9b194c6af53b07834023b147467cda03414973a0d24add9d46abbe18999eefccb50916d8db3639c41ccba7b82a47b38c91d5f3a61c907f6c74dff0c76f491e361731d418eec18776ab486711d9b30a27a6554ce7f4072a8bef0082406f9120441d1ebfb09eb130eef3790d4c4286d8ab686d79550ac18d2d210f4c9166a6fa2046dde4492af9c923fc9b3761eef4201b713c4786523dc55aa935aa786504e2363fc3611879d8c85ea215cee888ffb76b93e2c8ad1bc92e3be13de8dafb8464332e9bc1bce397f8817b3ac1dad6123d34ffab3b41a1982bfc11e5c12fb4f6ebc30efdfdb91ecf95832a6339ee161e363bf0df1e50df3afd9a5bb26ecf98143f16bcdce12fd57dbb0c90715c526e3901e94e50869393e2cc2aa37680e099558a8254c766fe1f606cb6c9ca6761414d0c2ebffc6d9c588a6897202c6d937cbfad49d2958a86fbe6eda896418474ec6c2ee267bf56072256c38fc629f74e4aa37b76801b95a9f64ea486550596b0b13111ab8e1a6b326bfdc3e41c2cd5db71febf4448ca3481fce19ca5bfa6a714dd40a90c57deed02b080f85a25430c64c79ae0ece351de8e7511f6c901a170ab268463b18ea7bd2e1db8c988fb8bafa0058fd840b5ed127e5771b89886380e3674e60e18fd34d008f0dc5b54545f8e468b4c5e3cf38896f08738b2c7229be773ce993bdee3b01db09fd9d3e7da0c7d6ed5d4d2de7ff287322958b34830779765ee216b8348997b5fc4fb4735989e831015295ca7b34468776b283ff4ee05dc97a9ca73310303edbcd3770ed7c6ab1c51b08d84881125d1259655936849e2eb77e1bf495c06320b9a9f372ef50d30e5448aeb7bb9fba42a5b4229da03a387613dcb14b6ccbff3bc67e4c3ebfb22031e304f90fdd6b494f34668a5b1e0afc3d50013357b512a3c7051126c5e1175a06e066dfb86b04e2be7dbc4480793929c54d617d1b287422039c2859fadd5c993f1e03c46d870d04e684bdf5e97cd01f8c7e236de2b40ae2f421d3fd4aed997d2d964dd6f1654f6e18dfb02c9f047ef8bb16d4abb67cf693b1"}, {@device_a, @broadcast, 0x36, "bfccd044c78a0cf7ba244d88789683875fd98f4f66e9d4076c1489f930b47849486295282ea42649a1f1a465ef7bd8cb2605a6959224"}]}, 0x1230) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 612.703320][T18609] bridge17: entered promiscuous mode [ 612.705704][T18609] bridge18: entered promiscuous mode [ 612.707732][T18609] bond9: entered promiscuous mode 04:19:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0010000000e8bd6efb250314000e002100240248ff050005001200", 0x2e}], 0x1}, 0x0) [ 612.714556][T18612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.716967][T18613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.719898][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.724444][T18616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.730491][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.734487][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.735629][T18620] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 612.739513][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.745978][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.750701][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.755000][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.759083][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.763153][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0010000000e8bd6efb250314000e002100240248ff050005001200", 0x2e}], 0x1}, 0x0) [ 612.768038][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.771966][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.776680][T18621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.776721][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.784555][T18623] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 612.787799][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0010000000e8bd6efb250314000e002100240248ff050005001200", 0x2e}], 0x1}, 0x0) [ 612.792011][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.796623][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.800678][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.804649][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.808602][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.808984][T18625] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 612.812358][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.819252][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.823040][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.828372][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000b880)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8100}, {}, {0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4}}]}]}}]}, 0x74}}, 0x0) [ 612.832097][T18621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.833234][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.844729][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.849085][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.852627][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 612.852944][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.860374][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.865320][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.869298][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.873171][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.877242][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.881578][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.886227][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.890451][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.894312][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.898208][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.902259][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.906154][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.910170][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.914061][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.917965][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.922522][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.926653][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.930710][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.934734][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.938963][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.942947][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.946994][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.951175][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.955144][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.959289][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.963246][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.967196][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.971170][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.975196][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.979256][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.983302][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.987898][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.992812][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.996744][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.000914][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.004973][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.009121][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.012952][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.017025][T18614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:11 executing program 1: r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/4114, 0x1012) [ 613.165765][T18629] loop1: detected capacity change from 0 to 2048 [ 613.214929][T18632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.269892][T18632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1c761e2622a61f9a6c24b675e92d2b34b91238f99df06fe3"}]]}, 0x68}}, 0xd0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000882848b960c121824"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000000802170a000108021100000008021100000000000000000000020202020202010882848b960c121824000000000000000000c903d6798a8702488efb37d73cf1cffba10e000000000000575930575b8618656ae2d9ab7a8ce4e71631492aeed0139edff30bda4afc22c534547455e046983f26ab778ee0314680d2ce236086181cd8c93c4458ddd81162694f2318a53b7f52d6184413670954d0fda4cfc81f1d"], 0x36) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x3938700}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1c761e2622a61f9a6c24b675e92d2b34b91238f99df06fe3"}]]}, 0x68}}, 0xd0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000882848b960c121824"], 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000000802170a000108021100000008021100000000000000000000020202020202010882848b960c121824000000000000000000c903d6798a8702488efb37d73cf1cffba10e000000000000575930575b8618656ae2d9ab7a8ce4e71631492aeed0139edff30bda4afc22c534547455e046983f26ab778ee0314680d2ce236086181cd8c93c4458ddd81162694f2318a53b7f52d6184413670954d0fda4cfc81f1d"], 0x36) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x3938700}) (async) 04:19:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_b, @from_mac=@device_b, @device_b, {0x3, 0x81}}, {0x7, 0x0, 0x3, 0x0, 0x5}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @from_mac=@broadcast, @random="21b3e7953b1f", {0xa, 0x8}}, {0x2, 0x0, 0x0, 0x1, 0x4}}}, @a_msdu=[{@broadcast, @device_a, 0xe0, "51bf633ddfef596042d55938ffb570c34a2b7fef96e358eeb7df68eed004ea40154d968597950da4a8099b8495f5cbbd12686480747482ba3d5b26de9ce3d321d7ade0a305d59682d5b21e1baacc417de3cdbe5cb7ae82f2daad165f692b7bf5e42d44c9c91883a7b7d29fbe28271e08ed962dee19a18ee041b73058f85efb077c867dc83e3d3bae21027e7827f2309ed1627ced3d60869cc92aa73269148bcd5ca25c4af414a29d88ae9d818b7d2cfe3bb432432ace3c8cc449d1e6c68bc9da70c50e3118b14f536b2cf6a56037006dccbfb8a85422a5ad0990c12631c6ef99"}, {@device_b, @device_a, 0xa7, "7035f34d8c485cda5885fdc4211339901151558e07bd2e4994b520420236a8fd47aa9f5bc7f7622f2a501fae2af8ebc3698a6da13cdf7261f24dbf20204d11ee150738386fe67393e82411a236818e9338765e9297c9e2c2a23f27783254782cacafba07b8d3a576965c57634bbf73fdde6bfc0e4c61a8c68eca12d9ad40d4e02eb742be2c60c22995d9e493cf7b39f52ddb1bf8ed2678982a6fe3705430cb38d7524917e81595"}, {@broadcast, @broadcast, 0x1016, "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"}, {@device_a, @broadcast, 0x36, "bfccd044c78a0cf7ba244d88789683875fd98f4f66e9d4076c1489f930b47849486295282ea42649a1f1a465ef7bd8cb2605a6959224"}]}, 0x1230) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:11 executing program 1: r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/4114, 0x1012) [ 613.329998][T18631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.340158][T18639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.344582][T18637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.345251][T18635] loop1: detected capacity change from 0 to 2048 [ 613.352710][T18639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0xb, @random="1be5e8576e6137d3e774a2"}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x3b) 04:19:11 executing program 1: r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/4114, 0x1012) [ 613.382235][T18645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.393523][T18645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.399050][T18647] loop1: detected capacity change from 0 to 2048 04:19:11 executing program 1: r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/4114, 0x1012) [ 613.456415][T18649] loop1: detected capacity change from 0 to 2048 04:19:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x0, 0xffffffff, 0x0, 0x1}, 0x48) 04:19:11 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)='1', 0x1}, {&(0x7f0000000000)='z', 0x1}], 0x2) 04:19:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x36) 04:19:11 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)='1', 0x1}, {&(0x7f0000000000)='z', 0x1}], 0x2) [ 613.679062][T18658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.693058][T18658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0xb, @random="1be5e8576e6137d3e774a2"}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x3b) [ 613.713628][T18662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:11 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)='1', 0x1}, {&(0x7f0000000000)='z', 0x1}], 0x2) 04:19:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0xb, @random="1be5e8576e6137d3e774a2"}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x3b) [ 613.763332][T18672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.770514][T18653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.826213][T18653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:12 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)='1', 0x1}, {&(0x7f0000000000)='z', 0x1}], 0x2) 04:19:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x36) (async) 04:19:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000020080211000000000000000000000000006400010000061202f3da09f3a1226b02020202010882881ac09c811300deea339e8e96185c0a34d44e7a5a018aa26e4bdb2e89bde3b68ec84717c600b7297b68213d7e048fabea2111b6f7a8a873639b4fa041a459606572d14aa061386dc3874cdf5619530b"], 0x36) [ 614.152914][T18680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:12 executing program 1: r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000080)={0x2, 0x0, 0x8000}) creat(&(0x7f0000000040)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) [ 614.159746][T18679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.162714][T18680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.169527][T18679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.175815][T18683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x36) 04:19:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4, 0x5}}}]}, 0x34}}, 0x0) [ 614.201493][T18691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.204429][T18681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.216413][T18693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0x4004ae8b, &(0x7f0000003680)={{0x0, 0x0, 0x80}}) [ 614.267204][T18681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.322905][T18681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0xb}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:12 executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000000)) 04:19:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000020080211000000000000000000000000006400010000061202f3da09f3a1226b02020202010882881ac09c811300deea339e8e96185c0a34d44e7a5a018aa26e4bdb2e89bde3b68ec84717c600b7297b68213d7e048fabea2111b6f7a8a873639b4fa041a459606572d14aa061386dc3874cdf5619530b"], 0x36) 04:19:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="3900000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b0000121824"], 0x36) [ 614.641619][T18706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x39, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xd, 0x2, 0x0, 0x0, @str='\x04\x00\x17\x00\x04\x00\x03\x00\x00'}]}, 0x3c}}, 0x0) [ 614.644990][T18707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.654354][T18713] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 614.655957][T18707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.657678][T18713] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 04:19:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000020080211000000000000000000000000006400010000061202f3da09f3a1226b02020202010882881ac09c811300deea339e8e96185c0a34d44e7a5a018aa26e4bdb2e89bde3b68ec84717c600b7297b68213d7e048fabea2111b6f7a8a873639b4fa041a459606572d14aa061386dc3874cdf5619530b"], 0x36) 04:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x39, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xd, 0x2, 0x0, 0x0, @str='\x04\x00\x17\x00\x04\x00\x03\x00\x00'}]}, 0x3c}}, 0x0) [ 614.680711][T18716] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 614.683662][T18716] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 614.687294][T18718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.688080][T18710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x39, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xd, 0x2, 0x0, 0x0, @str='\x04\x00\x17\x00\x04\x00\x03\x00\x00'}]}, 0x3c}}, 0x0) [ 614.704192][T18718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.704363][T18722] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 614.711513][T18722] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 614.747091][T18710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.801867][T18710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x39, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xd, 0x2, 0x0, 0x0, @str='\x04\x00\x17\x00\x04\x00\x03\x00\x00'}]}, 0x3c}}, 0x0) 04:19:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="3900000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b0000121824"], 0x36) 04:19:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x300, 0x54) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="ee15339a", @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00fffeffff080001007063690011000200303030303a30303a31302e300000000008000b0001000000080001007063690011000200303030303a30303a31302e300000000008000b0002000000"], 0x84}, 0x1, 0x0, 0x0, 0xc804}, 0x4000050) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 615.120243][T18725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:13 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/138, 0x8a}], 0x1, &(0x7f0000000740)=""/53, 0x35}, 0x0) close(r1) [ 615.134110][T18726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.135617][T18730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.148962][T18730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.186846][T18731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x305, 0x0, 0x0, {0x5}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x3}]}, 0x1c}}, 0x0) 04:19:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) [ 615.241983][T18731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) [ 615.297280][T18731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 04:19:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="3900000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b0000121824"], 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="3900000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b0000121824"], 0x36) 04:19:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (rerun: 32) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x300, 0x54) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="ee15339a", @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00fffeffff080001007063690011000200303030303a30303a31302e300000000008000b0001000000080001007063690011000200303030303a30303a31302e300000000008000b0002000000"], 0x84}, 0x1, 0x0, 0x0, 0xc804}, 0x4000050) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (rerun: 64) 04:19:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) [ 615.624122][T18747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.635594][T18753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.640264][T18747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.643249][T18748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.648100][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.652148][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.656417][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.661287][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_getaddr={0x18, 0x16, 0x1985f2dbda417a47}, 0x18}}, 0x0) [ 615.665355][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.668981][T18750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:13 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) openat(r0, &(0x7f0000000300)='./file0\x00', 0x40c82, 0x17) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x5b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000009d00)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x14f5, &(0x7f0000001580)="$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") [ 615.673306][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.677502][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.683505][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.687470][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.692554][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.696785][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.708424][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.712931][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.716922][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.720438][T18750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.724733][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.728766][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.732899][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.737065][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.742059][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.746393][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.750414][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.754768][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.760446][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.769913][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.771476][T18750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.785355][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.799426][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.809910][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.813931][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.819179][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.823339][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.828123][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.832294][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.836701][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.841348][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.845289][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.849262][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.853358][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.857329][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.861301][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.865388][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.869370][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.873616][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.877675][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.881983][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.884787][T18763] loop1: detected capacity change from 0 to 256 [ 615.886004][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.892011][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.893359][T18763] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 615.895985][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.904296][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.909074][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.919167][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.924374][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.929385][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.934433][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.939465][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.945324][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.949468][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 615.954679][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.960456][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.964889][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.969064][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.973590][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.977702][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.981781][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.987622][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.992593][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.998280][T18766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.011883][T18766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0xf}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 616.166401][T18771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.223999][T18768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.280732][T18771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x300, 0x54) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="ee15339a", @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00fffeffff080001007063690011000200303030303a30303a31302e300000000008000b0001000000080001007063690011000200303030303a30303a31302e300000000008000b0002000000"], 0x84}, 0x1, 0x0, 0x0, 0xc804}, 0x4000050) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 616.338355][T18774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.343971][T18774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.357297][T18776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 616.391043][T18783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.402229][T18781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) openat(r0, &(0x7f0000000300)='./file0\x00', 0x40c82, 0x17) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x5b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000009d00)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") 04:19:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 616.664380][T18791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000c40)={0xa4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x6a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x6c, 0x5b, "5e491fa74629d871221cf910f89c79d83627e2518fc07e0fc6e6733dd9bdb258b6e90d43058fa3b98cd3769de9365c9484a6c0006edc3c4a05ce8353a87cdd33169385e7b8103d2035160a5bb6d1c9a4b1f63392aff882f47c319a9bb17cad48313d04af58886e68"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xed6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c074}, 0x24008010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000440)=[@in={0xa, 0x0, @local}], 0x10) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2b4, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000057d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private0}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf39}]}, @TIPC_NLA_SOCK={0x4}]}, 0x2b4}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x8c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={0x284, r4, 0x320, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff9d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x180}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x45}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9ff275227f0610f828f315f7711fd21eaadf1015e89a1"}}, @TIPC_NLA_NODE_ID={0x33, 0x3, "a19bb291753470a1839cdaaf83a45cd885865823add3a25ea011f34fd24a9682a4e8c85029f4d03a8962a39f8dac37"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0afe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x5}, 0x20008014) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r7, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 616.689901][T18794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.704157][T18794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x88100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x150, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_TID_CONFIG={0x130, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x77}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20040880}, 0x8850) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 616.730964][T18787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.755949][T18796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.770528][T18796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.787475][T18787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.789123][T18792] loop1: detected capacity change from 0 to 256 [ 616.805177][T18792] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) 04:19:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000c40)={0xa4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x6a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x6c, 0x5b, "5e491fa74629d871221cf910f89c79d83627e2518fc07e0fc6e6733dd9bdb258b6e90d43058fa3b98cd3769de9365c9484a6c0006edc3c4a05ce8353a87cdd33169385e7b8103d2035160a5bb6d1c9a4b1f63392aff882f47c319a9bb17cad48313d04af58886e68"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xed6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c074}, 0x24008010) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000440)=[@in={0xa, 0x0, @local}], 0x10) (async) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2b4, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000057d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private0}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf39}]}, @TIPC_NLA_SOCK={0x4}]}, 0x2b4}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x8c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={0x284, r4, 0x320, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff9d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x180}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x45}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9ff275227f0610f828f315f7711fd21eaadf1015e89a1"}}, @TIPC_NLA_NODE_ID={0x33, 0x3, "a19bb291753470a1839cdaaf83a45cd885865823add3a25ea011f34fd24a9682a4e8c85029f4d03a8962a39f8dac37"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0afe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x5}, 0x20008014) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r7, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 617.073566][T18798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x88100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x150, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_TID_CONFIG={0x130, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x77}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20040880}, 0x8850) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x88100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x150, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_TID_CONFIG={0x130, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x77}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20040880}, 0x8850) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) 04:19:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000c40)={0xa4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x6a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x6c, 0x5b, "5e491fa74629d871221cf910f89c79d83627e2518fc07e0fc6e6733dd9bdb258b6e90d43058fa3b98cd3769de9365c9484a6c0006edc3c4a05ce8353a87cdd33169385e7b8103d2035160a5bb6d1c9a4b1f63392aff882f47c319a9bb17cad48313d04af58886e68"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xed6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c074}, 0x24008010) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000440)=[@in={0xa, 0x0, @local}], 0x10) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2b4, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000057d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private0}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf39}]}, @TIPC_NLA_SOCK={0x4}]}, 0x2b4}}, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x8c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={0x284, r4, 0x320, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff9d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x180}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x45}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9ff275227f0610f828f315f7711fd21eaadf1015e89a1"}}, @TIPC_NLA_NODE_ID={0x33, 0x3, "a19bb291753470a1839cdaaf83a45cd885865823add3a25ea011f34fd24a9682a4e8c85029f4d03a8962a39f8dac37"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0afe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x5}, 0x20008014) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r7, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 617.108282][T18803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.119209][T18803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.158705][T18811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.172212][T18815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.227496][T18805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.286622][T18815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) openat(r0, &(0x7f0000000300)='./file0\x00', 0x40c82, 0x17) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x5b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000009d00)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x14f5, &(0x7f0000001580)="$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") 04:19:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x88100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x150, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_TID_CONFIG={0x130, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x77}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20040880}, 0x8850) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x5, 0x8, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x67, 0x0, 0x2, 0x0, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x10, 0x5b, 0x0, 0x3, [0x401, 0x0, 0x0]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x0, 0x10, @loopback, @empty, 0x80, 0x80, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x1d0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x94, 0x5, "ade82b5484ed904aefd1d9b6a53bd76fe8cdd3935474bd1b290fbdfe015a26472d8aa001f161ae0c1d73876a0fed2dc034760fc44313e96ec1e69c35793130ae95c1b0236c7079497b9fefb917d64a2b912d6c1313416dea7cd15d5a756f9ab77ba1990a414d1b9f39b226b5af0cf8fc409258f74cfa9b764d3f712ccb6081e5bb83fdc8c574166053269ece6f3d2626"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x1}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0x7c, 0x0, 0x100, 0x0, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}}, 0x4000804) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x5) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfffffff0000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r11 = open(&(0x7f0000000280)='./file1\x00', 0x280000, 0x102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendmsg$unix(r11, &(0x7f0000000c40)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)}, {&(0x7f0000000480)="4734fe2b85ce5ae1575e3a423a382b049d7e4991ea245ae22258b581f808618942f738c008c272eb744546187ee78915c7cba309b4bd303730eddcd08c34dad4eef7033696be1d2ed6dfeeb573f1d07061e8d84f8060ef4f5e37777fb2a97a3bbdad92da77b111ee432489134479dd9eb289783b6dee06e4dc8538adbc8bd852b26dad87ddaa5f4b42f93a6a9d6f185bb065fa42a24f911b7d181db567bdeaea1d6296818939eefc5e731a7f379dee4d7c5c604b462ccf3389dff6adc55391453bfd55ad81b427f1d335f876f7", 0xcd}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001000000000000000fd5d3faadf2d04fea6e83ab40e90100000000000000ed78e4e5e6253599442431aea3bb9aee6e3a9de5020000000000009f814d49a206a9f217b0408908d495d2a30abceb34546148e9220b856ddd0baf62976c70d9e008177e9a45ff922323d956aed7da8535880e4be19857b10c27332238f87baab8bd5c69a9410ccfa507f7890332d1acb4aea1d178baa6c261d35f9b016d0272ae", @ANYRES32, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f8"], 0xa8, 0x4000800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000280)='GPL\x00', 0x401, 0x34, &(0x7f0000000300)=""/52, 0x41100, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r11, 0xffffffffffffffff]}, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x624, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x80000000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1f}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x200}, @ETHTOOL_A_COALESCE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5}]}, 0x78}}, 0x4044000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 617.466063][T18822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.473114][T18818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.483041][T18822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.488321][T18818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 617.683107][T18825] loop1: detected capacity change from 0 to 256 [ 617.685850][T18830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.701180][T18825] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 617.743624][T18830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xff, 0x9, 0x3d, 0x1}}}, 0x3e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000e60702110000010802110000000802110000000000000000000000000064000100000602020202020201080900000000000000fe3ccbcaf560fc3c490ac21046bd7043d929994f821a0d4843a1020c6aaf2a8c2667"], 0x36) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) [ 617.799745][T18827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x5, 0x8, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x67, 0x0, 0x2, 0x0, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x10, 0x5b, 0x0, 0x3, [0x401, 0x0, 0x0]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x0, 0x10, @loopback, @empty, 0x80, 0x80, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x1d0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x94, 0x5, "ade82b5484ed904aefd1d9b6a53bd76fe8cdd3935474bd1b290fbdfe015a26472d8aa001f161ae0c1d73876a0fed2dc034760fc44313e96ec1e69c35793130ae95c1b0236c7079497b9fefb917d64a2b912d6c1313416dea7cd15d5a756f9ab77ba1990a414d1b9f39b226b5af0cf8fc409258f74cfa9b764d3f712ccb6081e5bb83fdc8c574166053269ece6f3d2626"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x1}, 0x40040) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x1d0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x94, 0x5, "ade82b5484ed904aefd1d9b6a53bd76fe8cdd3935474bd1b290fbdfe015a26472d8aa001f161ae0c1d73876a0fed2dc034760fc44313e96ec1e69c35793130ae95c1b0236c7079497b9fefb917d64a2b912d6c1313416dea7cd15d5a756f9ab77ba1990a414d1b9f39b226b5af0cf8fc409258f74cfa9b764d3f712ccb6081e5bb83fdc8c574166053269ece6f3d2626"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x1}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0x7c, 0x0, 0x100, 0x0, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}}, 0x4000804) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0x7c, 0x0, 0x100, 0x0, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}}, 0x4000804) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfffffff0000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfffffff0000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r11 = open(&(0x7f0000000280)='./file1\x00', 0x280000, 0x102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) (async) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendmsg$unix(r11, &(0x7f0000000c40)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)}, {&(0x7f0000000480)="4734fe2b85ce5ae1575e3a423a382b049d7e4991ea245ae22258b581f808618942f738c008c272eb744546187ee78915c7cba309b4bd303730eddcd08c34dad4eef7033696be1d2ed6dfeeb573f1d07061e8d84f8060ef4f5e37777fb2a97a3bbdad92da77b111ee432489134479dd9eb289783b6dee06e4dc8538adbc8bd852b26dad87ddaa5f4b42f93a6a9d6f185bb065fa42a24f911b7d181db567bdeaea1d6296818939eefc5e731a7f379dee4d7c5c604b462ccf3389dff6adc55391453bfd55ad81b427f1d335f876f7", 0xcd}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001000000000000000fd5d3faadf2d04fea6e83ab40e90100000000000000ed78e4e5e6253599442431aea3bb9aee6e3a9de5020000000000009f814d49a206a9f217b0408908d495d2a30abceb34546148e9220b856ddd0baf62976c70d9e008177e9a45ff922323d956aed7da8535880e4be19857b10c27332238f87baab8bd5c69a9410ccfa507f7890332d1acb4aea1d178baa6c261d35f9b016d0272ae", @ANYRES32, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f8"], 0xa8, 0x4000800}, 0x20000000) (async) sendmsg$unix(r11, &(0x7f0000000c40)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)}, {&(0x7f0000000480)="4734fe2b85ce5ae1575e3a423a382b049d7e4991ea245ae22258b581f808618942f738c008c272eb744546187ee78915c7cba309b4bd303730eddcd08c34dad4eef7033696be1d2ed6dfeeb573f1d07061e8d84f8060ef4f5e37777fb2a97a3bbdad92da77b111ee432489134479dd9eb289783b6dee06e4dc8538adbc8bd852b26dad87ddaa5f4b42f93a6a9d6f185bb065fa42a24f911b7d181db567bdeaea1d6296818939eefc5e731a7f379dee4d7c5c604b462ccf3389dff6adc55391453bfd55ad81b427f1d335f876f7", 0xcd}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001000000000000000fd5d3faadf2d04fea6e83ab40e90100000000000000ed78e4e5e6253599442431aea3bb9aee6e3a9de5020000000000009f814d49a206a9f217b0408908d495d2a30abceb34546148e9220b856ddd0baf62976c70d9e008177e9a45ff922323d956aed7da8535880e4be19857b10c27332238f87baab8bd5c69a9410ccfa507f7890332d1acb4aea1d178baa6c261d35f9b016d0272ae", @ANYRES32, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f8"], 0xa8, 0x4000800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000280)='GPL\x00', 0x401, 0x34, &(0x7f0000000300)=""/52, 0x41100, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r11, 0xffffffffffffffff]}, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x624, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x80000000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1f}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x200}, @ETHTOOL_A_COALESCE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5}]}, 0x78}}, 0x4044000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 617.841852][T18834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.852909][T18834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.870631][T18833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.881579][T18833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x13}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) (rerun: 32) open_by_handle_at(r2, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xff, 0x9, 0x3d, 0x1}}}, 0x3e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000e60702110000010802110000000802110000000000000000000000000064000100000602020202020201080900000000000000fe3ccbcaf560fc3c490ac21046bd7043d929994f821a0d4843a1020c6aaf2a8c2667"], 0x36) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) [ 618.197594][T18842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.199340][T18844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.217872][T18841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.259664][T18837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.316282][T18837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) openat(r0, &(0x7f0000000300)='./file0\x00', 0x40c82, 0x17) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x5b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000009d00)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x14f5, &(0x7f0000001580)="$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") 04:19:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x5, 0x8, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x67, 0x0, 0x2, 0x0, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x10, 0x5b, 0x0, 0x3, [0x401, 0x0, 0x0]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x0, 0x10, @loopback, @empty, 0x80, 0x80, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x1d0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x94, 0x5, "ade82b5484ed904aefd1d9b6a53bd76fe8cdd3935474bd1b290fbdfe015a26472d8aa001f161ae0c1d73876a0fed2dc034760fc44313e96ec1e69c35793130ae95c1b0236c7079497b9fefb917d64a2b912d6c1313416dea7cd15d5a756f9ab77ba1990a414d1b9f39b226b5af0cf8fc409258f74cfa9b764d3f712ccb6081e5bb83fdc8c574166053269ece6f3d2626"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x1}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0x7c, 0x0, 0x100, 0x0, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}}, 0x4000804) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x5) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfffffff0000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r11 = open(&(0x7f0000000280)='./file1\x00', 0x280000, 0x102) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) (async) sendmsg$unix(r11, &(0x7f0000000c40)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)}, {&(0x7f0000000480)="4734fe2b85ce5ae1575e3a423a382b049d7e4991ea245ae22258b581f808618942f738c008c272eb744546187ee78915c7cba309b4bd303730eddcd08c34dad4eef7033696be1d2ed6dfeeb573f1d07061e8d84f8060ef4f5e37777fb2a97a3bbdad92da77b111ee432489134479dd9eb289783b6dee06e4dc8538adbc8bd852b26dad87ddaa5f4b42f93a6a9d6f185bb065fa42a24f911b7d181db567bdeaea1d6296818939eefc5e731a7f379dee4d7c5c604b462ccf3389dff6adc55391453bfd55ad81b427f1d335f876f7", 0xcd}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001000000000000000fd5d3faadf2d04fea6e83ab40e90100000000000000ed78e4e5e6253599442431aea3bb9aee6e3a9de5020000000000009f814d49a206a9f217b0408908d495d2a30abceb34546148e9220b856ddd0baf62976c70d9e008177e9a45ff922323d956aed7da8535880e4be19857b10c27332238f87baab8bd5c69a9410ccfa507f7890332d1acb4aea1d178baa6c261d35f9b016d0272ae", @ANYRES32, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f8"], 0xa8, 0x4000800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000280)='GPL\x00', 0x401, 0x34, &(0x7f0000000300)=""/52, 0x41100, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r11, 0xffffffffffffffff]}, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x624, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x80000000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1f}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x200}, @ETHTOOL_A_COALESCE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5}]}, 0x78}}, 0x4044000) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 618.356917][T18847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.362043][T18847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xff, 0x9, 0x3d, 0x1}}}, 0x3e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000e60702110000010802110000000802110000000000000000000000000064000100000602020202020201080900000000000000fe3ccbcaf560fc3c490ac21046bd7043d929994f821a0d4843a1020c6aaf2a8c2667"], 0x36) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) open_by_handle_at(r2, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xff, 0x9, 0x3d, 0x1}}}, 0x3e) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000e60702110000010802110000000802110000000000000000000000000064000100000602020202020201080900000000000000fe3ccbcaf560fc3c490ac21046bd7043d929994f821a0d4843a1020c6aaf2a8c2667"], 0x36) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) [ 618.554999][T18854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.570644][T18854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.585683][T18852] loop1: detected capacity change from 0 to 256 04:19:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x20}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}}, 0x8080) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 618.600508][T18852] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) 04:19:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 618.660780][T18859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.674926][T18859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24044084}, 0x4040055) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x7, 0xf7, 0x32, 0x8001}}}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x2e) [ 618.716888][T18865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.720602][T18866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.731637][T18865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.776649][T18861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.833247][T18861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x20}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}}, 0x8080) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x20}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}}, 0x8080) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) [ 619.035832][T18868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24044084}, 0x4040055) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x7, 0xf7, 0x32, 0x8001}}}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x7, 0xf7, 0x32, 0x8001}}}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x2e) [ 619.054509][T18868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.074582][T18874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.081033][T18874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.093627][T18875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x20}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}}, 0x8080) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 64) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) openat(r0, &(0x7f0000000300)='./file0\x00', 0x40c82, 0x17) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x5b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000009d00)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x14f5, &(0x7f0000001580)="$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") [ 619.267350][T18880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.277913][T18887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x67}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 619.310912][T18889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.322007][T18889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.334728][T18878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.390407][T18878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24044084}, 0x4040055) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x7, 0xf7, 0x32, 0x8001}}}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24044084}, 0x4040055) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x7, 0xf7, 0x32, 0x8001}}}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x2e) (async) [ 619.422150][T18893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.437932][T18893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.456215][T18891] loop1: detected capacity change from 0 to 256 [ 619.457109][T18894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff}}}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x18, 0x1}, {0x76}, {0x12, 0x1}, {0x0, 0x1}, {0x30}, {0x5, 0x1}, {0x48}, {0x16}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000180)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xf2, 0x11}}}, 0x3f) [ 619.472114][T18891] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 619.500499][T18899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.527158][T18899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x67}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 619.651173][T18901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.662149][T18901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.667017][T18902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x16}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 619.769145][T18904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.823952][T18904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff}}}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x18, 0x1}, {0x76}, {0x12, 0x1}, {0x0, 0x1}, {0x30}, {0x5, 0x1}, {0x48}, {0x16}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000180)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xf2, 0x11}}}, 0x3f) (async) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000180)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xf2, 0x11}}}, 0x3f) [ 619.868213][T18908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.878676][T18908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.878842][T18904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x67}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) open_by_handle_at(r2, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x67}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) [ 619.995420][T18911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.006053][T18911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.014802][T18913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) openat(r0, &(0x7f0000000300)='./file0\x00', 0x40c82, 0x17) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x5b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000009d00)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x14f5, &(0x7f0000001580)="$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") 04:19:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r6, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x88, r3, 0xffdc4d971834138f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 620.139840][T18917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.152828][T18917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:18 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff}}}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x18, 0x1}, {0x76}, {0x12, 0x1}, {0x0, 0x1}, {0x30}, {0x5, 0x1}, {0x48}, {0x16}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000180)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xf2, 0x11}}}, 0x3f) 04:19:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 620.212781][T18922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.224090][T18921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.297536][T18929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.343540][T18928] loop1: detected capacity change from 0 to 256 [ 620.353392][T18925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.369432][T18928] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 620.408709][T18929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r6, 0x9) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x88, r3, 0xffdc4d971834138f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 620.487938][T18931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.496964][T18933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000004000000000640001000006020202020202010882848b960c121824"], 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac=@device_b, {0x0, 0x4}}, @void, @void, @val={0x3, 0x1, 0x6}, @val={0x2d, 0x1a, {0xb24, 0x0, 0x0, 0x0, {0x0, 0x8, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x6, 0x9, 0xe0}}, @val={0x72, 0x6}, [{0xdd, 0x7c, "e465a131fbe59d1da917a6117d626f3536ca10b345a4f312b71b5f0ec34c2404f73abb8ba1ca950271dec594dd67ab8dfed3740b26ac5e0c0bad3fb21b3ef1a71e555e5b4f9c27905e95744a2417616ded9e77b750a92dbb625751cba9ffcf16bc1046ec3b70ab2203d9f9af7e3691ebf947b00b3754b7365e1db2ee"}, {0xdd, 0x59, "bb92a96982e26820fd5955878811921685aa64a131857ae2ffa941f400ce462de14f18cabfc80c7c2223250c0c5bca18f369bf0d9aa49a63d67f5cc2df080675e776adf47825494db29e76fdda95603591b8923a8f0bde1137"}, {0xdd, 0xce, "239d52d5003026b814f363caa8d35937c9f23b62c03ab214167a23e432617a8fcf44d0db3c50bc8bebb8ca9d75a424e72bfaa16fcfb540f897d6b3c567a0af4955256607685e932020c55b3f84f015efaefc5f524770821a5a88e59348bedb7aaa714424b0d8ced80b112b51b0dc6d4232096862299ad97a4a85d89ce3f181355f984e3b958e8ed79f8408fd84ebc4e600ae8b39560e195cb5eefd38663a58ed30661ca39f25f74913116bd4f504a765e793eb3bb70694f8188674cb1bfeaee10ad92ad86d26ac66ed9dd02cef0a"}, {0xdd, 0xcd, "6a4fe7c634bf9ffaa6dd19b2d85967a223bf9ed0e799a03072c28e9ede04c5f494a9301524e02c4baec226dc594c1da924c899989af569565c8a2837b738e11c9117fcf200f58a14d6481e6119f9afd6ed1bdfa59ab494d7497d760b901dd1c6e3578707c924c9e2e04dcc26b6d0dac18c0483bfe2c9b44ef5839ad433cf73c24e12f5e712640f66a25e99198028b350d8b480f1f29442a9a3298749109125e2d36624f75991985f6ec0799dbf2dd14aa01167468e3c0b753022f546fb9792b3c1078372609f421c43781ab5a0"}]}, 0x2b7) [ 620.576719][T18935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.593893][T18935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.613118][T18935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 620.797884][T18940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r6, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x88, r3, 0xffdc4d971834138f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x88, r3, 0xffdc4d971834138f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 620.845642][T18942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.853305][T18937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.861656][T18943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.909621][T18937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000004000000000640001000006020202020202010882848b960c121824"], 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac=@device_b, {0x0, 0x4}}, @void, @void, @val={0x3, 0x1, 0x6}, @val={0x2d, 0x1a, {0xb24, 0x0, 0x0, 0x0, {0x0, 0x8, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x6, 0x9, 0xe0}}, @val={0x72, 0x6}, [{0xdd, 0x7c, "e465a131fbe59d1da917a6117d626f3536ca10b345a4f312b71b5f0ec34c2404f73abb8ba1ca950271dec594dd67ab8dfed3740b26ac5e0c0bad3fb21b3ef1a71e555e5b4f9c27905e95744a2417616ded9e77b750a92dbb625751cba9ffcf16bc1046ec3b70ab2203d9f9af7e3691ebf947b00b3754b7365e1db2ee"}, {0xdd, 0x59, "bb92a96982e26820fd5955878811921685aa64a131857ae2ffa941f400ce462de14f18cabfc80c7c2223250c0c5bca18f369bf0d9aa49a63d67f5cc2df080675e776adf47825494db29e76fdda95603591b8923a8f0bde1137"}, {0xdd, 0xce, "239d52d5003026b814f363caa8d35937c9f23b62c03ab214167a23e432617a8fcf44d0db3c50bc8bebb8ca9d75a424e72bfaa16fcfb540f897d6b3c567a0af4955256607685e932020c55b3f84f015efaefc5f524770821a5a88e59348bedb7aaa714424b0d8ced80b112b51b0dc6d4232096862299ad97a4a85d89ce3f181355f984e3b958e8ed79f8408fd84ebc4e600ae8b39560e195cb5eefd38663a58ed30661ca39f25f74913116bd4f504a765e793eb3bb70694f8188674cb1bfeaee10ad92ad86d26ac66ed9dd02cef0a"}, {0xdd, 0xcd, "6a4fe7c634bf9ffaa6dd19b2d85967a223bf9ed0e799a03072c28e9ede04c5f494a9301524e02c4baec226dc594c1da924c899989af569565c8a2837b738e11c9117fcf200f58a14d6481e6119f9afd6ed1bdfa59ab494d7497d760b901dd1c6e3578707c924c9e2e04dcc26b6d0dac18c0483bfe2c9b44ef5839ad433cf73c24e12f5e712640f66a25e99198028b350d8b480f1f29442a9a3298749109125e2d36624f75991985f6ec0799dbf2dd14aa01167468e3c0b753022f546fb9792b3c1078372609f421c43781ab5a0"}]}, 0x2b7) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000004000000000640001000006020202020202010882848b960c121824"], 0x36) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac=@device_b, {0x0, 0x4}}, @void, @void, @val={0x3, 0x1, 0x6}, @val={0x2d, 0x1a, {0xb24, 0x0, 0x0, 0x0, {0x0, 0x8, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x6, 0x9, 0xe0}}, @val={0x72, 0x6}, [{0xdd, 0x7c, "e465a131fbe59d1da917a6117d626f3536ca10b345a4f312b71b5f0ec34c2404f73abb8ba1ca950271dec594dd67ab8dfed3740b26ac5e0c0bad3fb21b3ef1a71e555e5b4f9c27905e95744a2417616ded9e77b750a92dbb625751cba9ffcf16bc1046ec3b70ab2203d9f9af7e3691ebf947b00b3754b7365e1db2ee"}, {0xdd, 0x59, "bb92a96982e26820fd5955878811921685aa64a131857ae2ffa941f400ce462de14f18cabfc80c7c2223250c0c5bca18f369bf0d9aa49a63d67f5cc2df080675e776adf47825494db29e76fdda95603591b8923a8f0bde1137"}, {0xdd, 0xce, "239d52d5003026b814f363caa8d35937c9f23b62c03ab214167a23e432617a8fcf44d0db3c50bc8bebb8ca9d75a424e72bfaa16fcfb540f897d6b3c567a0af4955256607685e932020c55b3f84f015efaefc5f524770821a5a88e59348bedb7aaa714424b0d8ced80b112b51b0dc6d4232096862299ad97a4a85d89ce3f181355f984e3b958e8ed79f8408fd84ebc4e600ae8b39560e195cb5eefd38663a58ed30661ca39f25f74913116bd4f504a765e793eb3bb70694f8188674cb1bfeaee10ad92ad86d26ac66ed9dd02cef0a"}, {0xdd, 0xcd, "6a4fe7c634bf9ffaa6dd19b2d85967a223bf9ed0e799a03072c28e9ede04c5f494a9301524e02c4baec226dc594c1da924c899989af569565c8a2837b738e11c9117fcf200f58a14d6481e6119f9afd6ed1bdfa59ab494d7497d760b901dd1c6e3578707c924c9e2e04dcc26b6d0dac18c0483bfe2c9b44ef5839ad433cf73c24e12f5e712640f66a25e99198028b350d8b480f1f29442a9a3298749109125e2d36624f75991985f6ec0799dbf2dd14aa01167468e3c0b753022f546fb9792b3c1078372609f421c43781ab5a0"}]}, 0x2b7) (async) [ 620.947264][T18945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.958106][T18945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.964429][T18945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.971284][T18946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:19 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) openat(r0, &(0x7f0000000300)='./file0\x00', 0x40c82, 0x17) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x5b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000009d00)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x14f5, &(0x7f0000001580)="$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") 04:19:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000004000000000640001000006020202020202010882848b960c121824"], 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000004000000000640001000006020202020202010882848b960c121824"], 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac=@device_b, {0x0, 0x4}}, @void, @void, @val={0x3, 0x1, 0x6}, @val={0x2d, 0x1a, {0xb24, 0x0, 0x0, 0x0, {0x0, 0x8, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x6, 0x9, 0xe0}}, @val={0x72, 0x6}, [{0xdd, 0x7c, "e465a131fbe59d1da917a6117d626f3536ca10b345a4f312b71b5f0ec34c2404f73abb8ba1ca950271dec594dd67ab8dfed3740b26ac5e0c0bad3fb21b3ef1a71e555e5b4f9c27905e95744a2417616ded9e77b750a92dbb625751cba9ffcf16bc1046ec3b70ab2203d9f9af7e3691ebf947b00b3754b7365e1db2ee"}, {0xdd, 0x59, "bb92a96982e26820fd5955878811921685aa64a131857ae2ffa941f400ce462de14f18cabfc80c7c2223250c0c5bca18f369bf0d9aa49a63d67f5cc2df080675e776adf47825494db29e76fdda95603591b8923a8f0bde1137"}, {0xdd, 0xce, "239d52d5003026b814f363caa8d35937c9f23b62c03ab214167a23e432617a8fcf44d0db3c50bc8bebb8ca9d75a424e72bfaa16fcfb540f897d6b3c567a0af4955256607685e932020c55b3f84f015efaefc5f524770821a5a88e59348bedb7aaa714424b0d8ced80b112b51b0dc6d4232096862299ad97a4a85d89ce3f181355f984e3b958e8ed79f8408fd84ebc4e600ae8b39560e195cb5eefd38663a58ed30661ca39f25f74913116bd4f504a765e793eb3bb70694f8188674cb1bfeaee10ad92ad86d26ac66ed9dd02cef0a"}, {0xdd, 0xcd, "6a4fe7c634bf9ffaa6dd19b2d85967a223bf9ed0e799a03072c28e9ede04c5f494a9301524e02c4baec226dc594c1da924c899989af569565c8a2837b738e11c9117fcf200f58a14d6481e6119f9afd6ed1bdfa59ab494d7497d760b901dd1c6e3578707c924c9e2e04dcc26b6d0dac18c0483bfe2c9b44ef5839ad433cf73c24e12f5e712640f66a25e99198028b350d8b480f1f29442a9a3298749109125e2d36624f75991985f6ec0799dbf2dd14aa01167468e3c0b753022f546fb9792b3c1078372609f421c43781ab5a0"}]}, 0x2b7) [ 621.045598][T18950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.061884][T18951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x65, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {r3}}, './bus\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 621.215980][T18958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 621.241514][T18958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.256982][T18956] loop1: detected capacity change from 0 to 256 [ 621.271674][T18956] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 621.326650][T18963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}}, 0x24000000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000062a40202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 621.383318][T18960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.410786][T18965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.427760][T18965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.439120][T18960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x65, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {r3}}, './bus\x00'}) (rerun: 32) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4008000) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x65, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {r3}}, './bus\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000006110c0ff000000009500000000000000bd7ea7c18549362982641ff6370f821a0515f4b96716358aeb2b791d2e5bf47eb713d284e5e44e72e1b70a06d1aa7684"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @random="fb3e3c460a44", {0x5, 0x5}}, {0x9, 0x1, 0x0, 0x0, 0x6a}}, {@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x0, 0x1}, {0xff}, @device_b, @device_a, @random="25725a93eb62", {0xd, 0x9}}, {0x8, 0x0, 0x3}}}, @random="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"}, 0x3a1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000201000006020202020202010882848b960c121824"], 0x36) [ 621.666158][T18977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.676526][T18977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.680934][T18977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x1a}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}}, 0x24000000) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000062a40202020202010882848b960c121824"], 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:19 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x83, 0x0) close(r2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffd8, 0x0) 04:19:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000006110c0ff000000009500000000000000bd7ea7c18549362982641ff6370f821a0515f4b96716358aeb2b791d2e5bf47eb713d284e5e44e72e1b70a06d1aa7684"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @random="fb3e3c460a44", {0x5, 0x5}}, {0x9, 0x1, 0x0, 0x0, 0x6a}}, {@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x0, 0x1}, {0xff}, @device_b, @device_a, @random="25725a93eb62", {0xd, 0x9}}, {0x8, 0x0, 0x3}}}, @random="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"}, 0x3a1) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000201000006020202020202010882848b960c121824"], 0x36) [ 623.172182][T18980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}}, 0x24000000) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}}, 0x24000000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000062a40202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000006110c0ff000000009500000000000000bd7ea7c18549362982641ff6370f821a0515f4b96716358aeb2b791d2e5bf47eb713d284e5e44e72e1b70a06d1aa7684"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @random="fb3e3c460a44", {0x5, 0x5}}, {0x9, 0x1, 0x0, 0x0, 0x6a}}, {@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x0, 0x1}, {0xff}, @device_b, @device_a, @random="25725a93eb62", {0xd, 0x9}}, {0x8, 0x0, 0x3}}}, @random="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"}, 0x3a1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000201000006020202020202010882848b960c121824"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000006110c0ff000000009500000000000000bd7ea7c18549362982641ff6370f821a0515f4b96716358aeb2b791d2e5bf47eb713d284e5e44e72e1b70a06d1aa7684"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @random="fb3e3c460a44", {0x5, 0x5}}, {0x9, 0x1, 0x0, 0x0, 0x6a}}, {@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x0, 0x1}, {0xff}, @device_b, @device_a, @random="25725a93eb62", {0xd, 0x9}}, {0x8, 0x0, 0x3}}}, @random="80ca6e6c03883caa82938854a919af7013338c4daf0298bb9d32d08c70204fd09ba9bb17840c9f99c4af50ac192a7f2965cf374ab3f50773b0e51a288ad85c5986517291bb44b8cacab9dcaa72a21a3bc8399e47018bfb21b9b951fb18fa7233f4ae25e8c09e4790838fec75276d609eaa8eb590b5612ef721883fe363470554caa1e5d2f815eb55aef19354fb4cd614ebd4e8e2d9ddaf50a0fb792d38caae3e6c05682874aeb62e87d72dfb772f1e4e0d9551836f807e22ede0ddc36f75821445138e969977d42a29d569b252f3668fa4caf2bc636dff5fa147eb3113af3eee6b1d3c2982644ab95cf255462d775ce890ddda8b23ced2185acdfe40bbffc37555a22ede6a800fc7695b43ac076ec62b9fc3e16275002eef4092f613efba01878f83e2fbaf5d8fa18ec2305debb5e308dc566d34a5e02bbf373d5d573c0cd3b7277bac0974b4619a04c6e0d35f64c3f8e8c90e037b3fedab1b02de4388bee79039883ca4ef3804bcc9bfe97dc35922dcc8a9b1fc2a1a296c744535f74865325743267cf7d06940431949bbda2e7d384572b7ec41c5776adcbffb76a80ee042de39b3105bdfd22e76a7b72e742a36ca62c2c0defb1952a0b96b21df9f6e5ae268674189e9e14444fc0d19853b23ec26f245dac7325e3bd0eda70f2333d83f55258723c630f9aa7843ce0f23397e537e60f387cafbc38d903636ae2b5aaea2497d6920ce4b7fd166e0e8e7c63eae309637a04044cd59da5fe8434c276bde2e46f519dfdf8abef087ed2c9c7adc75d05f27715094ec2022b7238cf07a217a985eb190f5f5120331cec4c2163a3a8d52934d8df74d305d7871408b6664c443d64f43c35736118cb8e96f3fa457875d382efbc4c6d6eca788f3a2ee994b599e1229be8684c13509cab4ee1cc5f24e21c78f98267a7030edd7dcf029337146b38bd6be97e448a8867d4235969ca6e84a281b0b18d8fa11e7daf4e730f9b2466e9c69be10e7a99f9a60e224495897070dcef88df71cd13e4b103b66844cfce9822941f1942aacc0474a917fde3b641e7faf5441f96f069f0ea9fa193f473c5b032c91ea665bb03fa97abc170d64aaa289cdf15712baa33ecbfef454c1c5ab35b43044dc4b2fd6dd452d0489beadfe7a5f45beeabf0b9c43f8bd4f283417cd8e8bb3becb45ad7a16516bdc1415e237a798d781ef8f6b8018e0d6492892c157f63950c7e8efbcd6b8b16c40"}, 0x3a1) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000201000006020202020202010882848b960c121824"], 0x36) (async) [ 623.212371][T18994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.222449][T18998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.224299][T18994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.234664][T18998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.240285][T18998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.247728][T19001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.250112][T19002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x804, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x91) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000480)={0x0, @loopback, @multicast1}, &(0x7f00000004c0)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001b40)={0x754, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x59, 0x5, "0006761022716a4bfbcbae784a13792fde493ff3185aaaa6829728baa5100e95b8d6786523bd9cb58591f0664ea0fce892f30f75f208ff616d1eb4e5a7908f03a13ec77caedb9ad72223030ce99515054c9d4ba363"}, @ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "5acceb2717e2ceedb74498a7a5dba887f5b9f01c44bb2da5f7cef01882093bc11c5bdc80f8bf5fe4cdc5c716a32c0142760dcdfa01a8fc031bbedd7e2957b6c8662ebd12e72c46910089ad9fcf840b54b6d545e744d848cbe994ee875122c054c4d0d72f114cb18363ce38c5eda124b885dfc15c4c6f01d9d63e068fbc38d8a38b8a7498e3fd685c475da4507039196f9a9c938fe722d32ce75d662cd392bf2111c53782090426c8ab7d2500416a82aa52b0e1dec5a70932acbe692c75"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "d93b3a2c03b1c466e8da51802ca1caaf567394ff78dda9f559f3ab269828947470375a60407616137902a7568cdd509b64de35d4d3efa39e6839f6dd61a606d0543b2899364fd12efcc8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "f4d837069291c98270f5cfb53ee65db20d66c8c3fb08efe3c2d42315556cbbafcb479f727c7dddfd16f586cda1c82d31"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "0a73afe211aff118a567a5116d2844c2f26eb5f74717ed820f031a96df86a0dbb43a9d4680dd2c7b2d5e9614ef015828fd4ec02957b32c35351508706c13d1a2e6ff45c3db7e8695c4e917c59001239a32365fcdcd9af309d770ebfd192716fc56935360bdd64981cf9e9e1ce97bb225bcabe6f9e8afe6ce1ccd788bd30cd72215ef78084ff24d16d0"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x254, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x94}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'\\#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\xf4%,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']{@!%*--!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xa2!]^+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6442}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xfc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x600000}, @ETHTOOL_A_BITSET_BIT_NAME={0xed, 0x2, 'A~P\xf7k\xf6\xf8H\xb8\x88\xcb\xd6G\xa0r\x99\xd9\x06E\xb1]\xcd\xffl1\xf9\x88\x138}\x99\xect\xa1\x00\xe6c\x1e\xf1s2\xe1\xd9\xcd;>\xd9BD\'\x90}5\xd7y\xe2\xe5\x9dM\xd8f\x88\x89\xa2P]\xa7i\xf3\x1e=m\xbc\x91\xf2\xa7\xc0\xaf\xce\xc45\x9e\xcbE\x129\xb2\xb0\x1e\xca\xbd\xc9\x89\x9c\xb0\xf4\xf2\x8f\x8d \xd2\xf1w\x89\'\xeda\xf5.2\xfd\xb5O\xdeB\xd37\x8d\xd6[\x9c\xe5\xd5{F\xc4\x18\xc4\x8c\r\xf1\xac%)\xaa\xfd\x9e\xa5I\xee1\xbf\x8e\xd4\x9aM\xa6\xd6\xfb{\"m\xf8a(h\x00G\t\r\x8b\xda;?\x9b\xd7\x16\x1c\xad\xcavV\a\xa5\x01\x15\xfa\xac\xca\xc4\x92NVK\xfe\xd5\xd2;\xba\x9c\xcb\xf0Ht\'\xd0F3t,\xe3\xf07\xae\x05O%\xdb\xa0\x9a\x115gK\x83\xa2d\x11A\xc8\xd8\xe2\xc6\xd6\x9b\x94\xa5\x7fEz\xa8O\xe2'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe6b8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-)(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}^,/\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '+'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x367}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x50}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xafe1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'G\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "769c545047213875aa388ff0fac44dd6bb1541a546dd4ba22f1dd18c05044778a04c835d4d73615911ff8851a07538c7730309a2794d0379b7af0c3fa1bf43ede6c8d0e4204a952e78b6561214d970400c647339f5b5b1cc47d161eb9ac9b9da5237e8b911fe90a241c5cc0a51c31170e2fc31567647b4b9b293447c56027c7ee6ad864b8db594bc5aa9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "8e39043ebdf5feddc0838cddd86c0cbe345b83f2f3f644fd3abb9e861c7ceee36f6002926f9d257b628134143aedd66cc20b802d7e3b88e804fd653c2de36ae817660b42ec4a2a7777c7a6f3f91e33925088369a51d6263b7e56ecff6c0c133e135495b57e3778bcaa25991a8d6c16c7fe1499ddf52f659ba73a227229b429ce4a3456351ff32b699e839e07f78ae54877fdc85f832a5ea117f28c2c2f36c2bbf85da03bba35ca6943708c3fc8da2f13e5caa2d2d294bf10df4ce46c2a73571cb77006bfe764daea6cb79e862e"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '::\x00\\][(:\xb1\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbab6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "bf2063238cf0f2a609da2ccceb1b34e0b88584be3bda4cf3cd2b5d2d99b0fbb0f5d94f2d31839f8e35e0849e4ab8c5ab2338ba8a6c473ba2367db66b57c155c00f40e6059fc14a0faf40c76e2bc41f00c86e12d415481f6ed1318799"}]}]}, 0x754}, 0x1, 0x0, 0x0, 0x41}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000100)={r13, r14+10000000}) [ 623.297051][T19008] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 623.303779][T18990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.308731][T19007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.326353][T19007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.360282][T19001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f9541f6729b475f89777537a82"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}]}, 0x4c}}, 0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 623.562265][T19010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.574110][T19010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x804, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x91) (async, rerun: 64) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000480)={0x0, @loopback, @multicast1}, &(0x7f00000004c0)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001b40)={0x754, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x59, 0x5, "0006761022716a4bfbcbae784a13792fde493ff3185aaaa6829728baa5100e95b8d6786523bd9cb58591f0664ea0fce892f30f75f208ff616d1eb4e5a7908f03a13ec77caedb9ad72223030ce99515054c9d4ba363"}, @ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "5acceb2717e2ceedb74498a7a5dba887f5b9f01c44bb2da5f7cef01882093bc11c5bdc80f8bf5fe4cdc5c716a32c0142760dcdfa01a8fc031bbedd7e2957b6c8662ebd12e72c46910089ad9fcf840b54b6d545e744d848cbe994ee875122c054c4d0d72f114cb18363ce38c5eda124b885dfc15c4c6f01d9d63e068fbc38d8a38b8a7498e3fd685c475da4507039196f9a9c938fe722d32ce75d662cd392bf2111c53782090426c8ab7d2500416a82aa52b0e1dec5a70932acbe692c75"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "d93b3a2c03b1c466e8da51802ca1caaf567394ff78dda9f559f3ab269828947470375a60407616137902a7568cdd509b64de35d4d3efa39e6839f6dd61a606d0543b2899364fd12efcc8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "f4d837069291c98270f5cfb53ee65db20d66c8c3fb08efe3c2d42315556cbbafcb479f727c7dddfd16f586cda1c82d31"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "0a73afe211aff118a567a5116d2844c2f26eb5f74717ed820f031a96df86a0dbb43a9d4680dd2c7b2d5e9614ef015828fd4ec02957b32c35351508706c13d1a2e6ff45c3db7e8695c4e917c59001239a32365fcdcd9af309d770ebfd192716fc56935360bdd64981cf9e9e1ce97bb225bcabe6f9e8afe6ce1ccd788bd30cd72215ef78084ff24d16d0"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x254, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x94}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'\\#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\xf4%,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']{@!%*--!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xa2!]^+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6442}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xfc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x600000}, @ETHTOOL_A_BITSET_BIT_NAME={0xed, 0x2, 'A~P\xf7k\xf6\xf8H\xb8\x88\xcb\xd6G\xa0r\x99\xd9\x06E\xb1]\xcd\xffl1\xf9\x88\x138}\x99\xect\xa1\x00\xe6c\x1e\xf1s2\xe1\xd9\xcd;>\xd9BD\'\x90}5\xd7y\xe2\xe5\x9dM\xd8f\x88\x89\xa2P]\xa7i\xf3\x1e=m\xbc\x91\xf2\xa7\xc0\xaf\xce\xc45\x9e\xcbE\x129\xb2\xb0\x1e\xca\xbd\xc9\x89\x9c\xb0\xf4\xf2\x8f\x8d \xd2\xf1w\x89\'\xeda\xf5.2\xfd\xb5O\xdeB\xd37\x8d\xd6[\x9c\xe5\xd5{F\xc4\x18\xc4\x8c\r\xf1\xac%)\xaa\xfd\x9e\xa5I\xee1\xbf\x8e\xd4\x9aM\xa6\xd6\xfb{\"m\xf8a(h\x00G\t\r\x8b\xda;?\x9b\xd7\x16\x1c\xad\xcavV\a\xa5\x01\x15\xfa\xac\xca\xc4\x92NVK\xfe\xd5\xd2;\xba\x9c\xcb\xf0Ht\'\xd0F3t,\xe3\xf07\xae\x05O%\xdb\xa0\x9a\x115gK\x83\xa2d\x11A\xc8\xd8\xe2\xc6\xd6\x9b\x94\xa5\x7fEz\xa8O\xe2'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe6b8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-)(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}^,/\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '+'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x367}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x50}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xafe1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'G\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "769c545047213875aa388ff0fac44dd6bb1541a546dd4ba22f1dd18c05044778a04c835d4d73615911ff8851a07538c7730309a2794d0379b7af0c3fa1bf43ede6c8d0e4204a952e78b6561214d970400c647339f5b5b1cc47d161eb9ac9b9da5237e8b911fe90a241c5cc0a51c31170e2fc31567647b4b9b293447c56027c7ee6ad864b8db594bc5aa9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "8e39043ebdf5feddc0838cddd86c0cbe345b83f2f3f644fd3abb9e861c7ceee36f6002926f9d257b628134143aedd66cc20b802d7e3b88e804fd653c2de36ae817660b42ec4a2a7777c7a6f3f91e33925088369a51d6263b7e56ecff6c0c133e135495b57e3778bcaa25991a8d6c16c7fe1499ddf52f659ba73a227229b429ce4a3456351ff32b699e839e07f78ae54877fdc85f832a5ea117f28c2c2f36c2bbf85da03bba35ca6943708c3fc8da2f13e5caa2d2d294bf10df4ce46c2a73571cb77006bfe764daea6cb79e862e"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '::\x00\\][(:\xb1\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbab6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "bf2063238cf0f2a609da2ccceb1b34e0b88584be3bda4cf3cd2b5d2d99b0fbb0f5d94f2d31839f8e35e0849e4ab8c5ab2338ba8a6c473ba2367db66b57c155c00f40e6059fc14a0faf40c76e2bc41f00c86e12d415481f6ed1318799"}]}]}, 0x754}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000100)={r13, r14+10000000}) [ 623.703793][T19017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.719126][T19017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.734898][T19012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.791535][T19020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.847136][T19012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 64) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) (rerun: 64) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x804, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x91) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000480)={0x0, @loopback, @multicast1}, &(0x7f00000004c0)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001b40)={0x754, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x59, 0x5, "0006761022716a4bfbcbae784a13792fde493ff3185aaaa6829728baa5100e95b8d6786523bd9cb58591f0664ea0fce892f30f75f208ff616d1eb4e5a7908f03a13ec77caedb9ad72223030ce99515054c9d4ba363"}, @ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "5acceb2717e2ceedb74498a7a5dba887f5b9f01c44bb2da5f7cef01882093bc11c5bdc80f8bf5fe4cdc5c716a32c0142760dcdfa01a8fc031bbedd7e2957b6c8662ebd12e72c46910089ad9fcf840b54b6d545e744d848cbe994ee875122c054c4d0d72f114cb18363ce38c5eda124b885dfc15c4c6f01d9d63e068fbc38d8a38b8a7498e3fd685c475da4507039196f9a9c938fe722d32ce75d662cd392bf2111c53782090426c8ab7d2500416a82aa52b0e1dec5a70932acbe692c75"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "d93b3a2c03b1c466e8da51802ca1caaf567394ff78dda9f559f3ab269828947470375a60407616137902a7568cdd509b64de35d4d3efa39e6839f6dd61a606d0543b2899364fd12efcc8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "f4d837069291c98270f5cfb53ee65db20d66c8c3fb08efe3c2d42315556cbbafcb479f727c7dddfd16f586cda1c82d31"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "0a73afe211aff118a567a5116d2844c2f26eb5f74717ed820f031a96df86a0dbb43a9d4680dd2c7b2d5e9614ef015828fd4ec02957b32c35351508706c13d1a2e6ff45c3db7e8695c4e917c59001239a32365fcdcd9af309d770ebfd192716fc56935360bdd64981cf9e9e1ce97bb225bcabe6f9e8afe6ce1ccd788bd30cd72215ef78084ff24d16d0"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x254, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x94}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'\\#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\xf4%,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']{@!%*--!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xa2!]^+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6442}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xfc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x600000}, @ETHTOOL_A_BITSET_BIT_NAME={0xed, 0x2, 'A~P\xf7k\xf6\xf8H\xb8\x88\xcb\xd6G\xa0r\x99\xd9\x06E\xb1]\xcd\xffl1\xf9\x88\x138}\x99\xect\xa1\x00\xe6c\x1e\xf1s2\xe1\xd9\xcd;>\xd9BD\'\x90}5\xd7y\xe2\xe5\x9dM\xd8f\x88\x89\xa2P]\xa7i\xf3\x1e=m\xbc\x91\xf2\xa7\xc0\xaf\xce\xc45\x9e\xcbE\x129\xb2\xb0\x1e\xca\xbd\xc9\x89\x9c\xb0\xf4\xf2\x8f\x8d \xd2\xf1w\x89\'\xeda\xf5.2\xfd\xb5O\xdeB\xd37\x8d\xd6[\x9c\xe5\xd5{F\xc4\x18\xc4\x8c\r\xf1\xac%)\xaa\xfd\x9e\xa5I\xee1\xbf\x8e\xd4\x9aM\xa6\xd6\xfb{\"m\xf8a(h\x00G\t\r\x8b\xda;?\x9b\xd7\x16\x1c\xad\xcavV\a\xa5\x01\x15\xfa\xac\xca\xc4\x92NVK\xfe\xd5\xd2;\xba\x9c\xcb\xf0Ht\'\xd0F3t,\xe3\xf07\xae\x05O%\xdb\xa0\x9a\x115gK\x83\xa2d\x11A\xc8\xd8\xe2\xc6\xd6\x9b\x94\xa5\x7fEz\xa8O\xe2'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe6b8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-)(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}^,/\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '+'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x367}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x50}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xafe1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'G\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "769c545047213875aa388ff0fac44dd6bb1541a546dd4ba22f1dd18c05044778a04c835d4d73615911ff8851a07538c7730309a2794d0379b7af0c3fa1bf43ede6c8d0e4204a952e78b6561214d970400c647339f5b5b1cc47d161eb9ac9b9da5237e8b911fe90a241c5cc0a51c31170e2fc31567647b4b9b293447c56027c7ee6ad864b8db594bc5aa9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "8e39043ebdf5feddc0838cddd86c0cbe345b83f2f3f644fd3abb9e861c7ceee36f6002926f9d257b628134143aedd66cc20b802d7e3b88e804fd653c2de36ae817660b42ec4a2a7777c7a6f3f91e33925088369a51d6263b7e56ecff6c0c133e135495b57e3778bcaa25991a8d6c16c7fe1499ddf52f659ba73a227229b429ce4a3456351ff32b699e839e07f78ae54877fdc85f832a5ea117f28c2c2f36c2bbf85da03bba35ca6943708c3fc8da2f13e5caa2d2d294bf10df4ce46c2a73571cb77006bfe764daea6cb79e862e"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '::\x00\\][(:\xb1\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbab6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "bf2063238cf0f2a609da2ccceb1b34e0b88584be3bda4cf3cd2b5d2d99b0fbb0f5d94f2d31839f8e35e0849e4ab8c5ab2338ba8a6c473ba2367db66b57c155c00f40e6059fc14a0faf40c76e2bc41f00c86e12d415481f6ed1318799"}]}]}, 0x754}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (rerun: 32) clock_settime(0x5, &(0x7f0000000100)={r13, r14+10000000}) 04:19:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x141042, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) dup(0xffffffffffffffff) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1f600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0xc028ae92, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 04:19:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f9541f6729b475f89777537a82"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}]}, 0x4c}}, 0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 624.043324][T19026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.053128][T19024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824bf3b859c7c7f45b9e4834e16c83a718a09ebe2695ea724b6b6c1732463d8bdaf674d9d2499dca41c0b5bb261cc1af80e98a460"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 624.063739][T19024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.078118][T19032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.089312][T19032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x1c}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 624.172613][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 624.172628][ T39] audit: type=1804 audit(1688357962.128:381): pid=19030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1165/bus" dev="sda1" ino=1982 res=1 errno=0 [ 624.196428][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.199481][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.227112][T19040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.282993][T19035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.338161][T19035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f9541f6729b475f89777537a82"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}]}, 0x4c}}, 0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824bf3b859c7c7f45b9e4834e16c83a718a09ebe2695ea724b6b6c1732463d8bdaf674d9d2499dca41c0b5bb261cc1af80e98a460"], 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 624.400087][T19042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.410704][T19042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.418868][T19045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 624.712681][T19049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000cc0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x411}, @device_b, @device_a, @initial, {0x7, 0x3}}, @ver_80211n={0x0, 0x20, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x2, @default, 0x6100, @void, @val, @void, @val={0x4, 0x6, {0xf7, 0x8, 0x1, 0xe0}}, @void, @val={0x2d, 0x0, {0x8000, 0x3, 0x7, 0x0, {0x0, 0x80, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x6, 0x7f}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x21}}, [{0xdd, 0xc6, "c1eef7571584519c33666e15832ad964a13713a5fab1f7e47ae8f637cd91b6849b2a5436fe06980a38b49ecaddbf9fcdd42e059bd9f10edf9bee8651562d6fc1fb80f8f5902be9320bfac7c26e509f8b37da49c4a56b5d79a48614403ffb81ba8e48ee33e8d878edbba6e43ec866c7af886914a213f19fc5896b1883f8775fcf7a7ace9f6db56c7c06830402acddc354b43641fecb702a763dfab0fa5c4fab7f4647f63338ac58c9df4e178ca1eb74f9df3237d82fa18709a9a02b5847af65f6843d15412ec0"}, {0xdd, 0xf2, "0ae28345783a0fefb6f4266d09fc4ee4c4def0144a4480f7ae7c98f1f96373ef89447daa830a75133e0094b2492379e452c1c8398c002c8a7a343c493058ed704e662e08ae0d115d81cba4d7506d8f5e6d82bb7c68a33372e46670a39781423ff5e06d2c887ad85ccb09b518701fb8e3515f57c4fa717a70f36a24f38f3fd5b4685e40a311d66dde41b79224e3dd5c6d13f10f1374a4ce0c669560543defae8c6fdc422fe8c43f7a0f2d0889cfd56b6f9e292ba1fc400e1632b4777b1355e52ea3328094d149f50cca670470970cf9895bd77d364e96a8cbb554ef920e6bf3c5bc5595f1f5f9a4235f3e906be5f1262532d9"}, {0xdd, 0xbe, "c62f2ddc666e209f80e13002f03a8d54e384e312e830b4f21ee62bf871e2e1d0e89fbac06629558ee78d6492abca44935f387043e2d3dd2bc9534bf51b13c3bc51a20758d9d62ed4e4cdd1e59e4f4a664c3a965d1b7fe9d6e2f5fba09a8b4ab0740f908b575d4dabb1a2218dc32ff9a1ba052801cd3526618f54b1d42967fdca95f49db0cdc402e13e380464f301881bf244d4f5cb6df335d70bd98243000edafb985bd598cc16767f10c2db297539ecd94506200b8f114b22699683a6a9"}, {0xdd, 0x1c, "5f6acf452b0f22da0e1f0e6807ea41ca153c1cce8d688af2f1d3b5f4"}, {0xdd, 0x55, "92457605bff83059c917f4501e45ced6d9cd821579fa5af087107adafd959072b088ec12922669e4d3accd0970a1ef58374e98417f7960c065094c4985e8b2ec235efeb2b155e6216e246a30fb1ec0a4249dd5fbbe"}, {0xdd, 0x56, "052488158d0719f013a58066761a8036f4a9a26381bcff38b530d43f300878b6dd8d6dfd3de6feb05cd177ab9f4940b5033bffde24e00384c063c585b2c5664af99666ff7ed77a3d22b2b4a499be2e8ad47fddf652d4eb073fa8329d457f0d265a238bc52d2d8d88477dbe0831159d4c23475940b14bae1beb59192779701d8306de7d4596a5dddd204c2a6d91ae27938e615f77f0d3324ebec92b74"}, {0xdd, 0xf3, "2fdabd607e652d015bbb3b08a740c11da85fa75932f59799847071862d97e4db0db6362be65f31b972a4e6331775ce37499e147f561c2c7d54b22b97191a1cf63f4f424af635119e30674d814db8fa8db5a593ac7eca19bafce2302866b621edf21bf88041ad316d564cf0522aeb503f0573cae1ddaa7efd13943605bef6e200715c19db7beb1245c667e30c3bae51a8f8970e905e38ca3ae23540e360dc533b5e9b2e3470c005b0ec247a232caf07534ed75e2912cac36bd97692f5977877eaf8dd2074f90a16913ca947010c747453f2f32c082a157794d9c2dddbda871beb80411ee8f4cbfbfc222a7ce57185c71bcf2628"}, {0xdd, 0x6a, "904798e3494df7a2b810b6e73f3689dfed9dc8435c79f838873fda67df225480ee48f4a09030d41433f6f4b3392a9d320372951ccc461ffaad5b5b1d7912545b991e92b8ab073fa7871959b334972600f012eab41cfadd442a3ed04d6f50b2fe1f526945a3694fda2185"}, {0xdd, 0x41, "49a106781d4c415835e85ee77bb60a0f489f867c074724cf05cc244540c715eda4de723af1ad9b804897e560c6d41e29234b1cdb6b7c15ff248cb40f120d02e458"}]}, 0x56e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 624.742362][T19053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.753026][T19053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.772735][T19054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.828254][T19049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824bf3b859c7c7f45b9e4834e16c83a718a09ebe2695ea724b6b6c1732463d8bdaf674d9d2499dca41c0b5bb261cc1af80e98a460"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824bf3b859c7c7f45b9e4834e16c83a718a09ebe2695ea724b6b6c1732463d8bdaf674d9d2499dca41c0b5bb261cc1af80e98a460"], 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) 04:19:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x141042, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) dup(0xffffffffffffffff) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1f600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0xc028ae92, &(0x7f00000000c0)={0x1, 0x0, [{}]}) [ 624.964714][T19056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.975451][T19056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.982919][T19059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000), 0x551d40, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40488d4) syz_80211_inject_frame(&(0x7f0000000380)=@broadcast, &(0x7f00000003c0)=@ctrl_frame=@pspoll={{}, @random=0x100, @random="e4d18738347b", @broadcast}, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0xfffb}, @void, @void, @void}, 0x3a) [ 625.005977][T19063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.012024][T19063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.024610][T19063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000cc0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x411}, @device_b, @device_a, @initial, {0x7, 0x3}}, @ver_80211n={0x0, 0x20, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x2, @default, 0x6100, @void, @val, @void, @val={0x4, 0x6, {0xf7, 0x8, 0x1, 0xe0}}, @void, @val={0x2d, 0x0, {0x8000, 0x3, 0x7, 0x0, {0x0, 0x80, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x6, 0x7f}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x21}}, [{0xdd, 0xc6, "c1eef7571584519c33666e15832ad964a13713a5fab1f7e47ae8f637cd91b6849b2a5436fe06980a38b49ecaddbf9fcdd42e059bd9f10edf9bee8651562d6fc1fb80f8f5902be9320bfac7c26e509f8b37da49c4a56b5d79a48614403ffb81ba8e48ee33e8d878edbba6e43ec866c7af886914a213f19fc5896b1883f8775fcf7a7ace9f6db56c7c06830402acddc354b43641fecb702a763dfab0fa5c4fab7f4647f63338ac58c9df4e178ca1eb74f9df3237d82fa18709a9a02b5847af65f6843d15412ec0"}, {0xdd, 0xf2, "0ae28345783a0fefb6f4266d09fc4ee4c4def0144a4480f7ae7c98f1f96373ef89447daa830a75133e0094b2492379e452c1c8398c002c8a7a343c493058ed704e662e08ae0d115d81cba4d7506d8f5e6d82bb7c68a33372e46670a39781423ff5e06d2c887ad85ccb09b518701fb8e3515f57c4fa717a70f36a24f38f3fd5b4685e40a311d66dde41b79224e3dd5c6d13f10f1374a4ce0c669560543defae8c6fdc422fe8c43f7a0f2d0889cfd56b6f9e292ba1fc400e1632b4777b1355e52ea3328094d149f50cca670470970cf9895bd77d364e96a8cbb554ef920e6bf3c5bc5595f1f5f9a4235f3e906be5f1262532d9"}, {0xdd, 0xbe, "c62f2ddc666e209f80e13002f03a8d54e384e312e830b4f21ee62bf871e2e1d0e89fbac06629558ee78d6492abca44935f387043e2d3dd2bc9534bf51b13c3bc51a20758d9d62ed4e4cdd1e59e4f4a664c3a965d1b7fe9d6e2f5fba09a8b4ab0740f908b575d4dabb1a2218dc32ff9a1ba052801cd3526618f54b1d42967fdca95f49db0cdc402e13e380464f301881bf244d4f5cb6df335d70bd98243000edafb985bd598cc16767f10c2db297539ecd94506200b8f114b22699683a6a9"}, {0xdd, 0x1c, "5f6acf452b0f22da0e1f0e6807ea41ca153c1cce8d688af2f1d3b5f4"}, {0xdd, 0x55, "92457605bff83059c917f4501e45ced6d9cd821579fa5af087107adafd959072b088ec12922669e4d3accd0970a1ef58374e98417f7960c065094c4985e8b2ec235efeb2b155e6216e246a30fb1ec0a4249dd5fbbe"}, {0xdd, 0x56, "052488158d0719f013a58066761a8036f4a9a26381bcff38b530d43f300878b6dd8d6dfd3de6feb05cd177ab9f4940b5033bffde24e00384c063c585b2c5664af99666ff7ed77a3d22b2b4a499be2e8ad47fddf652d4eb073fa8329d457f0d265a238bc52d2d8d88477dbe0831159d4c23475940b14bae1beb59192779701d8306de7d4596a5dddd204c2a6d91ae27938e615f77f0d3324ebec92b74"}, {0xdd, 0xf3, "2fdabd607e652d015bbb3b08a740c11da85fa75932f59799847071862d97e4db0db6362be65f31b972a4e6331775ce37499e147f561c2c7d54b22b97191a1cf63f4f424af635119e30674d814db8fa8db5a593ac7eca19bafce2302866b621edf21bf88041ad316d564cf0522aeb503f0573cae1ddaa7efd13943605bef6e200715c19db7beb1245c667e30c3bae51a8f8970e905e38ca3ae23540e360dc533b5e9b2e3470c005b0ec247a232caf07534ed75e2912cac36bd97692f5977877eaf8dd2074f90a16913ca947010c747453f2f32c082a157794d9c2dddbda871beb80411ee8f4cbfbfc222a7ce57185c71bcf2628"}, {0xdd, 0x6a, "904798e3494df7a2b810b6e73f3689dfed9dc8435c79f838873fda67df225480ee48f4a09030d41433f6f4b3392a9d320372951ccc461ffaad5b5b1d7912545b991e92b8ab073fa7871959b334972600f012eab41cfadd442a3ed04d6f50b2fe1f526945a3694fda2185"}, {0xdd, 0x41, "49a106781d4c415835e85ee77bb60a0f489f867c074724cf05cc244540c715eda4de723af1ad9b804897e560c6d41e29234b1cdb6b7c15ff248cb40f120d02e458"}]}, 0x56e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000cc0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x411}, @device_b, @device_a, @initial, {0x7, 0x3}}, @ver_80211n={0x0, 0x20, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x2, @default, 0x6100, @void, @val, @void, @val={0x4, 0x6, {0xf7, 0x8, 0x1, 0xe0}}, @void, @val={0x2d, 0x0, {0x8000, 0x3, 0x7, 0x0, {0x0, 0x80, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x6, 0x7f}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x21}}, [{0xdd, 0xc6, "c1eef7571584519c33666e15832ad964a13713a5fab1f7e47ae8f637cd91b6849b2a5436fe06980a38b49ecaddbf9fcdd42e059bd9f10edf9bee8651562d6fc1fb80f8f5902be9320bfac7c26e509f8b37da49c4a56b5d79a48614403ffb81ba8e48ee33e8d878edbba6e43ec866c7af886914a213f19fc5896b1883f8775fcf7a7ace9f6db56c7c06830402acddc354b43641fecb702a763dfab0fa5c4fab7f4647f63338ac58c9df4e178ca1eb74f9df3237d82fa18709a9a02b5847af65f6843d15412ec0"}, {0xdd, 0xf2, "0ae28345783a0fefb6f4266d09fc4ee4c4def0144a4480f7ae7c98f1f96373ef89447daa830a75133e0094b2492379e452c1c8398c002c8a7a343c493058ed704e662e08ae0d115d81cba4d7506d8f5e6d82bb7c68a33372e46670a39781423ff5e06d2c887ad85ccb09b518701fb8e3515f57c4fa717a70f36a24f38f3fd5b4685e40a311d66dde41b79224e3dd5c6d13f10f1374a4ce0c669560543defae8c6fdc422fe8c43f7a0f2d0889cfd56b6f9e292ba1fc400e1632b4777b1355e52ea3328094d149f50cca670470970cf9895bd77d364e96a8cbb554ef920e6bf3c5bc5595f1f5f9a4235f3e906be5f1262532d9"}, {0xdd, 0xbe, "c62f2ddc666e209f80e13002f03a8d54e384e312e830b4f21ee62bf871e2e1d0e89fbac06629558ee78d6492abca44935f387043e2d3dd2bc9534bf51b13c3bc51a20758d9d62ed4e4cdd1e59e4f4a664c3a965d1b7fe9d6e2f5fba09a8b4ab0740f908b575d4dabb1a2218dc32ff9a1ba052801cd3526618f54b1d42967fdca95f49db0cdc402e13e380464f301881bf244d4f5cb6df335d70bd98243000edafb985bd598cc16767f10c2db297539ecd94506200b8f114b22699683a6a9"}, {0xdd, 0x1c, "5f6acf452b0f22da0e1f0e6807ea41ca153c1cce8d688af2f1d3b5f4"}, {0xdd, 0x55, "92457605bff83059c917f4501e45ced6d9cd821579fa5af087107adafd959072b088ec12922669e4d3accd0970a1ef58374e98417f7960c065094c4985e8b2ec235efeb2b155e6216e246a30fb1ec0a4249dd5fbbe"}, {0xdd, 0x56, "052488158d0719f013a58066761a8036f4a9a26381bcff38b530d43f300878b6dd8d6dfd3de6feb05cd177ab9f4940b5033bffde24e00384c063c585b2c5664af99666ff7ed77a3d22b2b4a499be2e8ad47fddf652d4eb073fa8329d457f0d265a238bc52d2d8d88477dbe0831159d4c23475940b14bae1beb59192779701d8306de7d4596a5dddd204c2a6d91ae27938e615f77f0d3324ebec92b74"}, {0xdd, 0xf3, "2fdabd607e652d015bbb3b08a740c11da85fa75932f59799847071862d97e4db0db6362be65f31b972a4e6331775ce37499e147f561c2c7d54b22b97191a1cf63f4f424af635119e30674d814db8fa8db5a593ac7eca19bafce2302866b621edf21bf88041ad316d564cf0522aeb503f0573cae1ddaa7efd13943605bef6e200715c19db7beb1245c667e30c3bae51a8f8970e905e38ca3ae23540e360dc533b5e9b2e3470c005b0ec247a232caf07534ed75e2912cac36bd97692f5977877eaf8dd2074f90a16913ca947010c747453f2f32c082a157794d9c2dddbda871beb80411ee8f4cbfbfc222a7ce57185c71bcf2628"}, {0xdd, 0x6a, "904798e3494df7a2b810b6e73f3689dfed9dc8435c79f838873fda67df225480ee48f4a09030d41433f6f4b3392a9d320372951ccc461ffaad5b5b1d7912545b991e92b8ab073fa7871959b334972600f012eab41cfadd442a3ed04d6f50b2fe1f526945a3694fda2185"}, {0xdd, 0x41, "49a106781d4c415835e85ee77bb60a0f489f867c074724cf05cc244540c715eda4de723af1ad9b804897e560c6d41e29234b1cdb6b7c15ff248cb40f120d02e458"}]}, 0x56e) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) [ 625.077600][T19066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.090379][T19066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.094236][ T39] audit: type=1804 audit(1688357963.047:382): pid=19058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1166/bus" dev="sda1" ino=1982 res=1 errno=0 [ 625.097693][T19067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000cc0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x411}, @device_b, @device_a, @initial, {0x7, 0x3}}, @ver_80211n={0x0, 0x20, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x2, @default, 0x6100, @void, @val, @void, @val={0x4, 0x6, {0xf7, 0x8, 0x1, 0xe0}}, @void, @val={0x2d, 0x0, {0x8000, 0x3, 0x7, 0x0, {0x0, 0x80, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x6, 0x7f}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x21}}, [{0xdd, 0xc6, "c1eef7571584519c33666e15832ad964a13713a5fab1f7e47ae8f637cd91b6849b2a5436fe06980a38b49ecaddbf9fcdd42e059bd9f10edf9bee8651562d6fc1fb80f8f5902be9320bfac7c26e509f8b37da49c4a56b5d79a48614403ffb81ba8e48ee33e8d878edbba6e43ec866c7af886914a213f19fc5896b1883f8775fcf7a7ace9f6db56c7c06830402acddc354b43641fecb702a763dfab0fa5c4fab7f4647f63338ac58c9df4e178ca1eb74f9df3237d82fa18709a9a02b5847af65f6843d15412ec0"}, {0xdd, 0xf2, "0ae28345783a0fefb6f4266d09fc4ee4c4def0144a4480f7ae7c98f1f96373ef89447daa830a75133e0094b2492379e452c1c8398c002c8a7a343c493058ed704e662e08ae0d115d81cba4d7506d8f5e6d82bb7c68a33372e46670a39781423ff5e06d2c887ad85ccb09b518701fb8e3515f57c4fa717a70f36a24f38f3fd5b4685e40a311d66dde41b79224e3dd5c6d13f10f1374a4ce0c669560543defae8c6fdc422fe8c43f7a0f2d0889cfd56b6f9e292ba1fc400e1632b4777b1355e52ea3328094d149f50cca670470970cf9895bd77d364e96a8cbb554ef920e6bf3c5bc5595f1f5f9a4235f3e906be5f1262532d9"}, {0xdd, 0xbe, "c62f2ddc666e209f80e13002f03a8d54e384e312e830b4f21ee62bf871e2e1d0e89fbac06629558ee78d6492abca44935f387043e2d3dd2bc9534bf51b13c3bc51a20758d9d62ed4e4cdd1e59e4f4a664c3a965d1b7fe9d6e2f5fba09a8b4ab0740f908b575d4dabb1a2218dc32ff9a1ba052801cd3526618f54b1d42967fdca95f49db0cdc402e13e380464f301881bf244d4f5cb6df335d70bd98243000edafb985bd598cc16767f10c2db297539ecd94506200b8f114b22699683a6a9"}, {0xdd, 0x1c, "5f6acf452b0f22da0e1f0e6807ea41ca153c1cce8d688af2f1d3b5f4"}, {0xdd, 0x55, "92457605bff83059c917f4501e45ced6d9cd821579fa5af087107adafd959072b088ec12922669e4d3accd0970a1ef58374e98417f7960c065094c4985e8b2ec235efeb2b155e6216e246a30fb1ec0a4249dd5fbbe"}, {0xdd, 0x56, "052488158d0719f013a58066761a8036f4a9a26381bcff38b530d43f300878b6dd8d6dfd3de6feb05cd177ab9f4940b5033bffde24e00384c063c585b2c5664af99666ff7ed77a3d22b2b4a499be2e8ad47fddf652d4eb073fa8329d457f0d265a238bc52d2d8d88477dbe0831159d4c23475940b14bae1beb59192779701d8306de7d4596a5dddd204c2a6d91ae27938e615f77f0d3324ebec92b74"}, {0xdd, 0xf3, "2fdabd607e652d015bbb3b08a740c11da85fa75932f59799847071862d97e4db0db6362be65f31b972a4e6331775ce37499e147f561c2c7d54b22b97191a1cf63f4f424af635119e30674d814db8fa8db5a593ac7eca19bafce2302866b621edf21bf88041ad316d564cf0522aeb503f0573cae1ddaa7efd13943605bef6e200715c19db7beb1245c667e30c3bae51a8f8970e905e38ca3ae23540e360dc533b5e9b2e3470c005b0ec247a232caf07534ed75e2912cac36bd97692f5977877eaf8dd2074f90a16913ca947010c747453f2f32c082a157794d9c2dddbda871beb80411ee8f4cbfbfc222a7ce57185c71bcf2628"}, {0xdd, 0x6a, "904798e3494df7a2b810b6e73f3689dfed9dc8435c79f838873fda67df225480ee48f4a09030d41433f6f4b3392a9d320372951ccc461ffaad5b5b1d7912545b991e92b8ab073fa7871959b334972600f012eab41cfadd442a3ed04d6f50b2fe1f526945a3694fda2185"}, {0xdd, 0x41, "49a106781d4c415835e85ee77bb60a0f489f867c074724cf05cc244540c715eda4de723af1ad9b804897e560c6d41e29234b1cdb6b7c15ff248cb40f120d02e458"}]}, 0x56e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x21}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 625.159777][T19075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.176820][T19071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.212058][T19080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.269188][T19074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.325212][T19074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000), 0x551d40, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40488d4) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000380)=@broadcast, &(0x7f00000003c0)=@ctrl_frame=@pspoll={{}, @random=0x100, @random="e4d18738347b", @broadcast}, 0x10) (async, rerun: 64) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0xfffb}, @void, @void, @void}, 0x3a) [ 625.357340][T19084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 32) r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000), 0x551d40, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40488d4) (async) syz_80211_inject_frame(&(0x7f0000000380)=@broadcast, &(0x7f00000003c0)=@ctrl_frame=@pspoll={{}, @random=0x100, @random="e4d18738347b", @broadcast}, 0x10) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0xfffb}, @void, @void, @void}, 0x3a) [ 625.383246][T19087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.388202][T19089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "49d89563ac258f8bf1884704a98f31"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8d3eb5a4db4a010d1fcc0fc123"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x74}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000003c0)={'pim6reg1\x00', 0x12}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac=@device_b, {0x8, 0x3}}, 0xe, @val={0x8c, 0x18, {0xabd, "93e2488fe732", @long="1e204150978185f3f991c0bdce209e54"}}}, 0x34) [ 625.422039][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.434720][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.441253][T19092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x141042, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) dup(0xffffffffffffffff) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1f600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0xc028ae92, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 04:19:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400009024235129430aaa7300bc5a479eaf8b7afb27e3ad49e644b9d661014839f6ace15e0c7f6da0899f734aec36731caba4975b5efdb702f04b2dceef069273f7c85de84fc5f0dd6bde6499c04ce4b28ff42206ab1cf37513908d93e4bbc61e7bfb556a746bf927ec5110b315b7b39c0084000000000000000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x80, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x63}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9593740e78157154ad4545a5365242f92d8a3ea0e8c89ec6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x80) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008000000000000000000000000000000640001000006020202020202010882848b960c12182435c436885ecaf4dd7076f9bf7846ad9afdf3a44f810d768f715e9862eab280193c0d7adbe9e01f5dee35f3c08f183162399bbea9fa39773edee21898eecf1aa7bb13ab87f9323fd0b3e0907f3be059198eadeeb6e0ff7b0ea44e4ba900ab3e39a0fc8dbec886cdcd39f432ed35f5a8d140efac2d58e77a9a5c8fdedc0700000000000000339a62b4db9f16176820585dbb0bd2c9964cdd8642c4b8a1ae62223000e69a8e699aa9b6a3b590a203470c61fcd7f6c5dd2461320000000000"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_b, @broadcast, @from_mac, {0x6, 0x8f}}, @a_msdu=[{@broadcast, @device_a, 0xc1, "38240246d7e5034adad4a77887abe7578aa5dc333941d15a882cdabb50ff8501e7f29d8a7596fb832d2cd9c9067bbac0f8b1026ea428f31b9ed52260dd07ec7e1f529ddd42ab36185904e8817b299412abff8a5142efd3a75834988f01b4b6431373bb44b21dda44c0d310de8cf2aced86671b1e78af24517633e627ff0cc26b31ea50699a4d4d27f3c352f890325ac09feba2ce886843fcc6caaa48a7736564e9c833b05825c593c9fc1c9950158688331cca184b7377e4b44f056e4496cbe8a6"}]}, 0xe8) 04:19:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x25}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "49d89563ac258f8bf1884704a98f31"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8d3eb5a4db4a010d1fcc0fc123"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x74}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000003c0)={'pim6reg1\x00', 0x12}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac=@device_b, {0x8, 0x3}}, 0xe, @val={0x8c, 0x18, {0xabd, "93e2488fe732", @long="1e204150978185f3f991c0bdce209e54"}}}, 0x34) [ 625.925015][T19098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "49d89563ac258f8bf1884704a98f31"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8d3eb5a4db4a010d1fcc0fc123"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x74}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000003c0)={'pim6reg1\x00', 0x12}) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac=@device_b, {0x8, 0x3}}, 0xe, @val={0x8c, 0x18, {0xabd, "93e2488fe732", @long="1e204150978185f3f991c0bdce209e54"}}}, 0x34) [ 625.937231][T19098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.953263][T19098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.956294][T19106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random=0x4, 0xb1a1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x6}}, @void, @val={0x3c, 0x4, {0x0, 0x3f, 0x0, 0xed}}, @void, @void, @void, @void}, 0x39) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5972}, @device_b, @device_b, @from_mac=@broadcast, {0xd, 0x40}}, @ver_80211n={0x0, 0x2893, 0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x32c, 0x3d, @random=0xed9, @void, @void, [{0xdd, 0xe5, "500c786c6b85366ffb54adb6ab73504ccd394852cd3e99fdec5799ef50f1be12c6b1379482d6b3046afbb017df958edabbd26aec72f858efd5bb633034d163ec89862f552eba2cf535d806f1a8e3b18be4a29fa7d788096f3d3d0b13c8cfb156ca5564a82dd8a17845848e6f7fad5364a4625e6ee6d2cc025eeb4a92626fc3fc03f4e65f96b8fb7186dca2f4d22a3408bcb2ddfc44d3c8fbd79f134846cfe6d7efe87219cf5c142d4fe5e2313a4ef325a1f246404a0e69c16dbab2d0a1b37179c3a21ad16db451027b08810df4def167951b5826f5c89b1cb5e102a64b318cced7fdbf1b53"}]}, 0x109) [ 625.982023][T19111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.989087][T19113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.999186][T19113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.003687][T19113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.038858][T19099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.061409][ T39] audit: type=1804 audit(1688357964.017:383): pid=19115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1167/bus" dev="sda1" ino=1982 res=1 errno=0 [ 626.095475][T19099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400009024235129430aaa7300bc5a479eaf8b7afb27e3ad49e644b9d661014839f6ace15e0c7f6da0899f734aec36731caba4975b5efdb702f04b2dceef069273f7c85de84fc5f0dd6bde6499c04ce4b28ff42206ab1cf37513908d93e4bbc61e7bfb556a746bf927ec5110b315b7b39c0084000000000000000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x80, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x63}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9593740e78157154ad4545a5365242f92d8a3ea0e8c89ec6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x80) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008000000000000000000000000000000640001000006020202020202010882848b960c12182435c436885ecaf4dd7076f9bf7846ad9afdf3a44f810d768f715e9862eab280193c0d7adbe9e01f5dee35f3c08f183162399bbea9fa39773edee21898eecf1aa7bb13ab87f9323fd0b3e0907f3be059198eadeeb6e0ff7b0ea44e4ba900ab3e39a0fc8dbec886cdcd39f432ed35f5a8d140efac2d58e77a9a5c8fdedc0700000000000000339a62b4db9f16176820585dbb0bd2c9964cdd8642c4b8a1ae62223000e69a8e699aa9b6a3b590a203470c61fcd7f6c5dd2461320000000000"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_b, @broadcast, @from_mac, {0x6, 0x8f}}, @a_msdu=[{@broadcast, @device_a, 0xc1, "38240246d7e5034adad4a77887abe7578aa5dc333941d15a882cdabb50ff8501e7f29d8a7596fb832d2cd9c9067bbac0f8b1026ea428f31b9ed52260dd07ec7e1f529ddd42ab36185904e8817b299412abff8a5142efd3a75834988f01b4b6431373bb44b21dda44c0d310de8cf2aced86671b1e78af24517633e627ff0cc26b31ea50699a4d4d27f3c352f890325ac09feba2ce886843fcc6caaa48a7736564e9c833b05825c593c9fc1c9950158688331cca184b7377e4b44f056e4496cbe8a6"}]}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400009024235129430aaa7300bc5a479eaf8b7afb27e3ad49e644b9d661014839f6ace15e0c7f6da0899f734aec36731caba4975b5efdb702f04b2dceef069273f7c85de84fc5f0dd6bde6499c04ce4b28ff42206ab1cf37513908d93e4bbc61e7bfb556a746bf927ec5110b315b7b39c0084000000000000000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x80, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x63}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9593740e78157154ad4545a5365242f92d8a3ea0e8c89ec6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x80) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008000000000000000000000000000000640001000006020202020202010882848b960c12182435c436885ecaf4dd7076f9bf7846ad9afdf3a44f810d768f715e9862eab280193c0d7adbe9e01f5dee35f3c08f183162399bbea9fa39773edee21898eecf1aa7bb13ab87f9323fd0b3e0907f3be059198eadeeb6e0ff7b0ea44e4ba900ab3e39a0fc8dbec886cdcd39f432ed35f5a8d140efac2d58e77a9a5c8fdedc0700000000000000339a62b4db9f16176820585dbb0bd2c9964cdd8642c4b8a1ae62223000e69a8e699aa9b6a3b590a203470c61fcd7f6c5dd2461320000000000"], 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_b, @broadcast, @from_mac, {0x6, 0x8f}}, @a_msdu=[{@broadcast, @device_a, 0xc1, "38240246d7e5034adad4a77887abe7578aa5dc333941d15a882cdabb50ff8501e7f29d8a7596fb832d2cd9c9067bbac0f8b1026ea428f31b9ed52260dd07ec7e1f529ddd42ab36185904e8817b299412abff8a5142efd3a75834988f01b4b6431373bb44b21dda44c0d310de8cf2aced86671b1e78af24517633e627ff0cc26b31ea50699a4d4d27f3c352f890325ac09feba2ce886843fcc6caaa48a7736564e9c833b05825c593c9fc1c9950158688331cca184b7377e4b44f056e4496cbe8a6"}]}, 0xe8) (async) [ 626.284842][T19119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.294917][T19119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.299535][T19119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.306546][T19121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random=0x4, 0xb1a1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x6}}, @void, @val={0x3c, 0x4, {0x0, 0x3f, 0x0, 0xed}}, @void, @void, @void, @void}, 0x39) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000004c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824c5c639d83f340b9df11591aa264b4f0409009a5cfb1f51c0af2511406704129554fcfa7e9cbceebe3790378ee5e3117e2ddbf156f5c846634d7db7f94b09086296ee63eaf2d6dc51318bf9044484c1550e3873906afa99574f4875af35a024c95023bbf61b0ccb36ec967ed52daf2101375ebe04b64546285e5d71b2cf8700aec1bed587f9103ba1270f3ef9de7b67a69cbb1a8499ed720f16d0b46dce20f9dbaafd407cb8430d3ab55c8c2056d6a28f09f0352e1021b803c802507b718609d59994c13e389f12ee73ffd4b4433ce2d77b26cadd3d5bdff14e7f1c399a6a"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5972}, @device_b, @device_b, @from_mac=@broadcast, {0xd, 0x40}}, @ver_80211n={0x0, 0x2893, 0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x32c, 0x3d, @random=0xed9, @void, @void, [{0xdd, 0xe5, "500c786c6b85366ffb54adb6ab73504ccd394852cd3e99fdec5799ef50f1be12c6b1379482d6b3046afbb017df958edabbd26aec72f858efd5bb633034d163ec89862f552eba2cf535d806f1a8e3b18be4a29fa7d788096f3d3d0b13c8cfb156ca5564a82dd8a17845848e6f7fad5364a4625e6ee6d2cc025eeb4a92626fc3fc03f4e65f96b8fb7186dca2f4d22a3408bcb2ddfc44d3c8fbd79f134846cfe6d7efe87219cf5c142d4fe5e2313a4ef325a1f246404a0e69c16dbab2d0a1b37179c3a21ad16db451027b08810df4def167951b5826f5c89b1cb5e102a64b318cced7fdbf1b53"}]}, 0x109) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random=0x4, 0xb1a1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x6}}, @void, @val={0x3c, 0x4, {0x0, 0x3f, 0x0, 0xed}}, @void, @void, @void, @void}, 0x39) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000004c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824c5c639d83f340b9df11591aa264b4f0409009a5cfb1f51c0af2511406704129554fcfa7e9cbceebe3790378ee5e3117e2ddbf156f5c846634d7db7f94b09086296ee63eaf2d6dc51318bf9044484c1550e3873906afa99574f4875af35a024c95023bbf61b0ccb36ec967ed52daf2101375ebe04b64546285e5d71b2cf8700aec1bed587f9103ba1270f3ef9de7b67a69cbb1a8499ed720f16d0b46dce20f9dbaafd407cb8430d3ab55c8c2056d6a28f09f0352e1021b803c802507b718609d59994c13e389f12ee73ffd4b4433ce2d77b26cadd3d5bdff14e7f1c399a6a"], 0x36) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5972}, @device_b, @device_b, @from_mac=@broadcast, {0xd, 0x40}}, @ver_80211n={0x0, 0x2893, 0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x32c, 0x3d, @random=0xed9, @void, @void, [{0xdd, 0xe5, "500c786c6b85366ffb54adb6ab73504ccd394852cd3e99fdec5799ef50f1be12c6b1379482d6b3046afbb017df958edabbd26aec72f858efd5bb633034d163ec89862f552eba2cf535d806f1a8e3b18be4a29fa7d788096f3d3d0b13c8cfb156ca5564a82dd8a17845848e6f7fad5364a4625e6ee6d2cc025eeb4a92626fc3fc03f4e65f96b8fb7186dca2f4d22a3408bcb2ddfc44d3c8fbd79f134846cfe6d7efe87219cf5c142d4fe5e2313a4ef325a1f246404a0e69c16dbab2d0a1b37179c3a21ad16db451027b08810df4def167951b5826f5c89b1cb5e102a64b318cced7fdbf1b53"}]}, 0x109) (async) [ 626.330690][T19124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.340755][T19124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.345757][T19124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.351791][T19125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x141042, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) dup(0xffffffffffffffff) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1f600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0xc028ae92, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 04:19:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400009024235129430aaa7300bc5a479eaf8b7afb27e3ad49e644b9d661014839f6ace15e0c7f6da0899f734aec36731caba4975b5efdb702f04b2dceef069273f7c85de84fc5f0dd6bde6499c04ce4b28ff42206ab1cf37513908d93e4bbc61e7bfb556a746bf927ec5110b315b7b39c0084000000000000000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x80, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x63}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9593740e78157154ad4545a5365242f92d8a3ea0e8c89ec6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x80) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008000000000000000000000000000000640001000006020202020202010882848b960c12182435c436885ecaf4dd7076f9bf7846ad9afdf3a44f810d768f715e9862eab280193c0d7adbe9e01f5dee35f3c08f183162399bbea9fa39773edee21898eecf1aa7bb13ab87f9323fd0b3e0907f3be059198eadeeb6e0ff7b0ea44e4ba900ab3e39a0fc8dbec886cdcd39f432ed35f5a8d140efac2d58e77a9a5c8fdedc0700000000000000339a62b4db9f16176820585dbb0bd2c9964cdd8642c4b8a1ae62223000e69a8e699aa9b6a3b590a203470c61fcd7f6c5dd2461320000000000"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000380)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_b, @broadcast, @from_mac, {0x6, 0x8f}}, @a_msdu=[{@broadcast, @device_a, 0xc1, "38240246d7e5034adad4a77887abe7578aa5dc333941d15a882cdabb50ff8501e7f29d8a7596fb832d2cd9c9067bbac0f8b1026ea428f31b9ed52260dd07ec7e1f529ddd42ab36185904e8817b299412abff8a5142efd3a75834988f01b4b6431373bb44b21dda44c0d310de8cf2aced86671b1e78af24517633e627ff0cc26b31ea50699a4d4d27f3c352f890325ac09feba2ce886843fcc6caaa48a7736564e9c833b05825c593c9fc1c9950158688331cca184b7377e4b44f056e4496cbe8a6"}]}, 0xe8) 04:19:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random=0x4, 0xb1a1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x6}}, @void, @val={0x3c, 0x4, {0x0, 0x3f, 0x0, 0xed}}, @void, @void, @void, @void}, 0x39) (rerun: 32) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x36) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5972}, @device_b, @device_b, @from_mac=@broadcast, {0xd, 0x40}}, @ver_80211n={0x0, 0x2893, 0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x32c, 0x3d, @random=0xed9, @void, @void, [{0xdd, 0xe5, "500c786c6b85366ffb54adb6ab73504ccd394852cd3e99fdec5799ef50f1be12c6b1379482d6b3046afbb017df958edabbd26aec72f858efd5bb633034d163ec89862f552eba2cf535d806f1a8e3b18be4a29fa7d788096f3d3d0b13c8cfb156ca5564a82dd8a17845848e6f7fad5364a4625e6ee6d2cc025eeb4a92626fc3fc03f4e65f96b8fb7186dca2f4d22a3408bcb2ddfc44d3c8fbd79f134846cfe6d7efe87219cf5c142d4fe5e2313a4ef325a1f246404a0e69c16dbab2d0a1b37179c3a21ad16db451027b08810df4def167951b5826f5c89b1cb5e102a64b318cced7fdbf1b53"}]}, 0x109) 04:19:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x19c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x42}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x4, 0x9, 0x18, 0x24, 0x30, 0x1b, 0x5, 0x60, 0x16, 0x3, 0x58, 0x60, 0x5, 0x1b, 0x18, 0x36, 0x0, 0x4f, 0x12, 0x18, 0x16, 0x6c, 0xc, 0x0, 0x6, 0x24, 0x5, 0x60, 0x4, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7}, {0x0, 0x4}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x2}, {0x6}, {0x3, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x2}, {}, {0x4, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {}, {0x1, 0x3}, {0x2, 0xa}, {0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x8}, {0x5, 0x1d}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x7, 0x9}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x0, 0x6, 0x2, 0x1, 0x6, 0x101, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x7, 0x0, 0xffff, 0x1, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x3}, {0x5}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfc00, 0x8, 0x2, 0x9, 0xe4cf, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x110, 0x2, 0x8, 0x5, 0x872a, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x1b, 0xb, 0x24, 0x1b, 0x48, 0x4, 0x5, 0x77, 0x18]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x6}, {0x1, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2f]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c12182433da84a43c77ea4aa85d22db723157b3ea65835f1aeb5c0898dd7c95201c4954dbbdd057c89a635426b3b457b6e2461f594d8edf056cc2ace3f9f5c54d23800415738a9ee2c55b13b6de642c1d86e41d4364f34a714b72741bbafd1a58c779a704eb9de3c32411105c9fc222bafe0c48103c0abb6b3540af3410d8fb0c49c797104780e6d563e11f6da5ed3c47f95b7a65b5b5713c5b7b2c8871d741ecc321dcb1050d72eed7f8a8bc7462292c9873757f57e77356a254"], 0x36) [ 627.559250][T19139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.571784][T19139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.577827][T19139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.584371][T19144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.586614][T19139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.596088][T19145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.601329][T19144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.603240][T19139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xba, 0x8}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000000000f3ff0600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000004380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x54, r9, 0x1, 0x0, 0x0, {0x37}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x64, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}]}, 0x64}}, 0x20000001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000b00)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x59a}, @device_b, @device_a, @from_mac, {0xd, 0x9}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x60, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0x6c}, {}, {0x3, 0x1}, {0x2, 0x1}]}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x4, 0x0, {0x5, 0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x140000, 0x5}}, @val={0x72, 0x6}, [{0xdd, 0x2e, "9ffdc16317a9c2e3ca814d8e523f926b73ab22765dcba0fc0497846584b60224b37adb926f4f4057bcc67779f54a"}, {0xdd, 0x62, "119208eb8c32d077c9ad7cb2be2d7145c1e814221d51514634ce21c08d885f982debec7f743bee1842bc65a4e628bc12164a01c8dec8787dede1ac18f30a522aeb1c7b04e1750ed7cbf858a1399d984a48fa3a98d1a02980645e923e92c2953fac13"}, {0xdd, 0xe1, "c345c709068310be7582dc94d11f629eb4f5825f5556be1d47f98cb026b1b4e7a62436f46cbb04dfeb9da59f2bc8b095214064613678d8688003cfccee77bb74ac853b00b496d5a70c722073888f4361d40df7f8fdc46c35969288411aa18c9e7b0cbfcba42ac43be80ea26b8e6d9c64e49d11b396cf4d7425c1f3dd6377fab5b331d0cacd3d150f42e5e16fcd39b54ec42b0f0d6417b48334d82eb9bee664f9b5a552f9f528935978e763c73973de461aa0401d1cd007ab4f1462f46bc3b50c0c28a1940a55711ec77e25816960b6d9e9c982489762461095da95540a28bb17c5"}, {0xdd, 0x82, "a5f28cbac1a8e55e226671f281c495889f7a2a34f8972a6d1c986fb07d6a1a04cbcddcde7fb1bfcac10e0f07587a3a605d60f6030a85b56c8d4488ce07b23d711d0864a0654f0ef4b2d4288aa7eb77161848ed6c7aa5016153bd311561d97b494ae2f8e8cf176c20bef6c616b1e25150ea98da279b60e09e90e49139a45582d1be7f"}, {0xdd, 0xb1, "9a8a15e6083c363581a9e659ffeca74b1ff7ea8c4e70fddf7d78ca2cbccb295a03bab09198e9327886f1e1861047a9977c23efe8c67ea460beed81d5356049c9db0d9531b5c0bd83c9cc0c0bacd2bef9477621105c3230084fab6bddf38d7f18ef122358826d77f0d6a9ef225c9403893b2947f8c62b57d5ed6107ad1b184834495570e77a78fb6e81bdd3ae9a3d0b6e7dba78660df3a4c3f88e4205513958a53d5813813fb5c101c39ee9268c5b653d17"}, {0xdd, 0xb2, "40824bf671bcf6c501471fc01d9bff6d56235147859f1e1d36fc6ff38f3a2b70b7b69e987eb66f6fba818b04c4edfc9beb8ed13fe23edadc8975bb7d0fc47fd46527895b78ec58d4fb5650aa78f5b1bef382452f26b4d8287c9cc258a44bb1c79aefe35b6b7616a25dded845f1bf23b33de4923e44deae4204244c2c2acfa9274d0d96b7b486a5775cb7541bb8f0ab7e2c2752b157b6ea45426bf6dc521d2736bd543cc942947136cfe8bbcd9cb3058eacc1"}]}, 0x3af) [ 627.649739][T19148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.652472][T19133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.659955][T19148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.715900][T19145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.736630][ T39] audit: type=1804 audit(1688357965.696:384): pid=19142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1168/bus" dev="sda1" ino=1982 res=1 errno=0 04:19:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x19c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x42}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x4, 0x9, 0x18, 0x24, 0x30, 0x1b, 0x5, 0x60, 0x16, 0x3, 0x58, 0x60, 0x5, 0x1b, 0x18, 0x36, 0x0, 0x4f, 0x12, 0x18, 0x16, 0x6c, 0xc, 0x0, 0x6, 0x24, 0x5, 0x60, 0x4, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7}, {0x0, 0x4}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x2}, {0x6}, {0x3, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x2}, {}, {0x4, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {}, {0x1, 0x3}, {0x2, 0xa}, {0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x8}, {0x5, 0x1d}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x7, 0x9}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x0, 0x6, 0x2, 0x1, 0x6, 0x101, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x7, 0x0, 0xffff, 0x1, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x3}, {0x5}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfc00, 0x8, 0x2, 0x9, 0xe4cf, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x110, 0x2, 0x8, 0x5, 0x872a, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x1b, 0xb, 0x24, 0x1b, 0x48, 0x4, 0x5, 0x77, 0x18]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x6}, {0x1, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2f]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c12182433da84a43c77ea4aa85d22db723157b3ea65835f1aeb5c0898dd7c95201c4954dbbdd057c89a635426b3b457b6e2461f594d8edf056cc2ace3f9f5c54d23800415738a9ee2c55b13b6de642c1d86e41d4364f34a714b72741bbafd1a58c779a704eb9de3c32411105c9fc222bafe0c48103c0abb6b3540af3410d8fb0c49c797104780e6d563e11f6da5ed3c47f95b7a65b5b5713c5b7b2c8871d741ecc321dcb1050d72eed7f8a8bc7462292c9873757f57e77356a254"], 0x36) [ 627.931433][T19154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.936611][T19154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xba, 0x8}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000000000f3ff0600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000004380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x54, r9, 0x1, 0x0, 0x0, {0x37}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x64, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}]}, 0x64}}, 0x20000001) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000b00)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x59a}, @device_b, @device_a, @from_mac, {0xd, 0x9}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x60, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0x6c}, {}, {0x3, 0x1}, {0x2, 0x1}]}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x4, 0x0, {0x5, 0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x140000, 0x5}}, @val={0x72, 0x6}, [{0xdd, 0x2e, "9ffdc16317a9c2e3ca814d8e523f926b73ab22765dcba0fc0497846584b60224b37adb926f4f4057bcc67779f54a"}, {0xdd, 0x62, "119208eb8c32d077c9ad7cb2be2d7145c1e814221d51514634ce21c08d885f982debec7f743bee1842bc65a4e628bc12164a01c8dec8787dede1ac18f30a522aeb1c7b04e1750ed7cbf858a1399d984a48fa3a98d1a02980645e923e92c2953fac13"}, {0xdd, 0xe1, "c345c709068310be7582dc94d11f629eb4f5825f5556be1d47f98cb026b1b4e7a62436f46cbb04dfeb9da59f2bc8b095214064613678d8688003cfccee77bb74ac853b00b496d5a70c722073888f4361d40df7f8fdc46c35969288411aa18c9e7b0cbfcba42ac43be80ea26b8e6d9c64e49d11b396cf4d7425c1f3dd6377fab5b331d0cacd3d150f42e5e16fcd39b54ec42b0f0d6417b48334d82eb9bee664f9b5a552f9f528935978e763c73973de461aa0401d1cd007ab4f1462f46bc3b50c0c28a1940a55711ec77e25816960b6d9e9c982489762461095da95540a28bb17c5"}, {0xdd, 0x82, "a5f28cbac1a8e55e226671f281c495889f7a2a34f8972a6d1c986fb07d6a1a04cbcddcde7fb1bfcac10e0f07587a3a605d60f6030a85b56c8d4488ce07b23d711d0864a0654f0ef4b2d4288aa7eb77161848ed6c7aa5016153bd311561d97b494ae2f8e8cf176c20bef6c616b1e25150ea98da279b60e09e90e49139a45582d1be7f"}, {0xdd, 0xb1, "9a8a15e6083c363581a9e659ffeca74b1ff7ea8c4e70fddf7d78ca2cbccb295a03bab09198e9327886f1e1861047a9977c23efe8c67ea460beed81d5356049c9db0d9531b5c0bd83c9cc0c0bacd2bef9477621105c3230084fab6bddf38d7f18ef122358826d77f0d6a9ef225c9403893b2947f8c62b57d5ed6107ad1b184834495570e77a78fb6e81bdd3ae9a3d0b6e7dba78660df3a4c3f88e4205513958a53d5813813fb5c101c39ee9268c5b653d17"}, {0xdd, 0xb2, "40824bf671bcf6c501471fc01d9bff6d56235147859f1e1d36fc6ff38f3a2b70b7b69e987eb66f6fba818b04c4edfc9beb8ed13fe23edadc8975bb7d0fc47fd46527895b78ec58d4fb5650aa78f5b1bef382452f26b4d8287c9cc258a44bb1c79aefe35b6b7616a25dded845f1bf23b33de4923e44deae4204244c2c2acfa9274d0d96b7b486a5775cb7541bb8f0ab7e2c2752b157b6ea45426bf6dc521d2736bd543cc942947136cfe8bbcd9cb3058eacc1"}]}, 0x3af) 04:19:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xba, 0x8}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000000000f3ff0600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000004380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x54, r9, 0x1, 0x0, 0x0, {0x37}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x64, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}]}, 0x64}}, 0x20000001) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000b00)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x59a}, @device_b, @device_a, @from_mac, {0xd, 0x9}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x60, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0x6c}, {}, {0x3, 0x1}, {0x2, 0x1}]}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x4, 0x0, {0x5, 0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x140000, 0x5}}, @val={0x72, 0x6}, [{0xdd, 0x2e, "9ffdc16317a9c2e3ca814d8e523f926b73ab22765dcba0fc0497846584b60224b37adb926f4f4057bcc67779f54a"}, {0xdd, 0x62, "119208eb8c32d077c9ad7cb2be2d7145c1e814221d51514634ce21c08d885f982debec7f743bee1842bc65a4e628bc12164a01c8dec8787dede1ac18f30a522aeb1c7b04e1750ed7cbf858a1399d984a48fa3a98d1a02980645e923e92c2953fac13"}, {0xdd, 0xe1, "c345c709068310be7582dc94d11f629eb4f5825f5556be1d47f98cb026b1b4e7a62436f46cbb04dfeb9da59f2bc8b095214064613678d8688003cfccee77bb74ac853b00b496d5a70c722073888f4361d40df7f8fdc46c35969288411aa18c9e7b0cbfcba42ac43be80ea26b8e6d9c64e49d11b396cf4d7425c1f3dd6377fab5b331d0cacd3d150f42e5e16fcd39b54ec42b0f0d6417b48334d82eb9bee664f9b5a552f9f528935978e763c73973de461aa0401d1cd007ab4f1462f46bc3b50c0c28a1940a55711ec77e25816960b6d9e9c982489762461095da95540a28bb17c5"}, {0xdd, 0x82, "a5f28cbac1a8e55e226671f281c495889f7a2a34f8972a6d1c986fb07d6a1a04cbcddcde7fb1bfcac10e0f07587a3a605d60f6030a85b56c8d4488ce07b23d711d0864a0654f0ef4b2d4288aa7eb77161848ed6c7aa5016153bd311561d97b494ae2f8e8cf176c20bef6c616b1e25150ea98da279b60e09e90e49139a45582d1be7f"}, {0xdd, 0xb1, "9a8a15e6083c363581a9e659ffeca74b1ff7ea8c4e70fddf7d78ca2cbccb295a03bab09198e9327886f1e1861047a9977c23efe8c67ea460beed81d5356049c9db0d9531b5c0bd83c9cc0c0bacd2bef9477621105c3230084fab6bddf38d7f18ef122358826d77f0d6a9ef225c9403893b2947f8c62b57d5ed6107ad1b184834495570e77a78fb6e81bdd3ae9a3d0b6e7dba78660df3a4c3f88e4205513958a53d5813813fb5c101c39ee9268c5b653d17"}, {0xdd, 0xb2, "40824bf671bcf6c501471fc01d9bff6d56235147859f1e1d36fc6ff38f3a2b70b7b69e987eb66f6fba818b04c4edfc9beb8ed13fe23edadc8975bb7d0fc47fd46527895b78ec58d4fb5650aa78f5b1bef382452f26b4d8287c9cc258a44bb1c79aefe35b6b7616a25dded845f1bf23b33de4923e44deae4204244c2c2acfa9274d0d96b7b486a5775cb7541bb8f0ab7e2c2752b157b6ea45426bf6dc521d2736bd543cc942947136cfe8bbcd9cb3058eacc1"}]}, 0x3af) (rerun: 32) 04:19:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x19c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x42}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x4, 0x9, 0x18, 0x24, 0x30, 0x1b, 0x5, 0x60, 0x16, 0x3, 0x58, 0x60, 0x5, 0x1b, 0x18, 0x36, 0x0, 0x4f, 0x12, 0x18, 0x16, 0x6c, 0xc, 0x0, 0x6, 0x24, 0x5, 0x60, 0x4, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7}, {0x0, 0x4}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x2}, {0x6}, {0x3, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x2}, {}, {0x4, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {}, {0x1, 0x3}, {0x2, 0xa}, {0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x8}, {0x5, 0x1d}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x7, 0x9}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x0, 0x6, 0x2, 0x1, 0x6, 0x101, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x7, 0x0, 0xffff, 0x1, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x3}, {0x5}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfc00, 0x8, 0x2, 0x9, 0xe4cf, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x110, 0x2, 0x8, 0x5, 0x872a, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x1b, 0xb, 0x24, 0x1b, 0x48, 0x4, 0x5, 0x77, 0x18]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x6}, {0x1, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2f]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c12182433da84a43c77ea4aa85d22db723157b3ea65835f1aeb5c0898dd7c95201c4954dbbdd057c89a635426b3b457b6e2461f594d8edf056cc2ace3f9f5c54d23800415738a9ee2c55b13b6de642c1d86e41d4364f34a714b72741bbafd1a58c779a704eb9de3c32411105c9fc222bafe0c48103c0abb6b3540af3410d8fb0c49c797104780e6d563e11f6da5ed3c47f95b7a65b5b5713c5b7b2c8871d741ecc321dcb1050d72eed7f8a8bc7462292c9873757f57e77356a254"], 0x36) 04:19:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x27}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x141042, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) dup(0xffffffffffffffff) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1f600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0xc028ae92, &(0x7f00000000c0)={0x1, 0x0, [{}]}) [ 628.505580][T19163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.510298][T19164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @random="d1fb5698f204"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 628.546920][T19177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.557360][T19177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.579042][T19170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.635604][T19178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.665701][ T39] audit: type=1804 audit(1688357966.615:385): pid=19173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1169/bus" dev="sda1" ino=1982 res=1 errno=0 [ 628.691589][T19170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x8, 0x0, 0x4, 0x0, 0xb, 0x1000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000004) r3 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$damon_contexts(r3, &(0x7f00000011c0)=[{' ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000380)="16437d3d6781f45b6d5876ada4ec2e6b9a6245c6e37cff177e31d7ee6a27b3d9a97b0a319ea9c553afed60bb4c13a54a858dd0abef8813f989588e15f7eb26a21fbe30158af760afa23968975f6bc8475b8f0608a736ad33768d90e5d8e9e07c54c4c1e803a6e4c8f38bab4044c2b7e5e0c1cd1f38bca95abae28b7ecbce1a3df5e6ccaa7a900af3882cb9d656906fdc08e2907a9682afb0a7bcdab1043f8e3c119ab06d717bd8413dc3d9b2c829e1244d5ecdadad94e2c9a304f622681269e9b83dcc4b008dec4b261db0c4f0425de1fece5bb44500bdab5723a5315c0a98daaeee37d2", 0xe4}, {&(0x7f0000000480)="b05824a3fc942374280b5e79fd5a4d4d8450fc6353167b67ad0e22a2bd04993455d62e76d4c94c15635c2bc1dbd5459dcc3d96bb5e868df76c2bda6c7767b9c932a6336566efe2f884ad317f393e42a57726fbc16c969e9cedfa43b08597270006b98404970d112d11818ffa3acae6764c43f6dd122f43b72e6ba26b882f8718cb02721b68bf32e8c16f88b754aa68f3918dba3c6c6fd8523aabef491fbab2793707ca", 0xa3}], 0x2) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 628.839182][T19183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.854809][T19183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @random="d1fb5698f204"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 628.882214][T19185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.892902][T19185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 629.065935][T19188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.122732][T19191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x8, 0x0, 0x4, 0x0, 0xb, 0x1000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000004) (async) r3 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$damon_contexts(r3, &(0x7f00000011c0)=[{' ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}], 0x1) (async) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000380)="16437d3d6781f45b6d5876ada4ec2e6b9a6245c6e37cff177e31d7ee6a27b3d9a97b0a319ea9c553afed60bb4c13a54a858dd0abef8813f989588e15f7eb26a21fbe30158af760afa23968975f6bc8475b8f0608a736ad33768d90e5d8e9e07c54c4c1e803a6e4c8f38bab4044c2b7e5e0c1cd1f38bca95abae28b7ecbce1a3df5e6ccaa7a900af3882cb9d656906fdc08e2907a9682afb0a7bcdab1043f8e3c119ab06d717bd8413dc3d9b2c829e1244d5ecdadad94e2c9a304f622681269e9b83dcc4b008dec4b261db0c4f0425de1fece5bb44500bdab5723a5315c0a98daaeee37d2", 0xe4}, {&(0x7f0000000480)="b05824a3fc942374280b5e79fd5a4d4d8450fc6353167b67ad0e22a2bd04993455d62e76d4c94c15635c2bc1dbd5459dcc3d96bb5e868df76c2bda6c7767b9c932a6336566efe2f884ad317f393e42a57726fbc16c969e9cedfa43b08597270006b98404970d112d11818ffa3acae6764c43f6dd122f43b72e6ba26b882f8718cb02721b68bf32e8c16f88b754aa68f3918dba3c6c6fd8523aabef491fbab2793707ca", 0xa3}], 0x2) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 629.178485][T19188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.181072][T19193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.183048][T19195] debugfs: Directory 'C}=gô[mXv­¤ì.kšbEÆã|ÿ~1×îj'³Ù©{' with parent 'damon' already present! 04:19:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x8, 0x0, 0x4, 0x0, 0xb, 0x1000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000004) r3 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$damon_contexts(r3, &(0x7f00000011c0)=[{' ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}], 0x1) (async) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000380)="16437d3d6781f45b6d5876ada4ec2e6b9a6245c6e37cff177e31d7ee6a27b3d9a97b0a319ea9c553afed60bb4c13a54a858dd0abef8813f989588e15f7eb26a21fbe30158af760afa23968975f6bc8475b8f0608a736ad33768d90e5d8e9e07c54c4c1e803a6e4c8f38bab4044c2b7e5e0c1cd1f38bca95abae28b7ecbce1a3df5e6ccaa7a900af3882cb9d656906fdc08e2907a9682afb0a7bcdab1043f8e3c119ab06d717bd8413dc3d9b2c829e1244d5ecdadad94e2c9a304f622681269e9b83dcc4b008dec4b261db0c4f0425de1fece5bb44500bdab5723a5315c0a98daaeee37d2", 0xe4}, {&(0x7f0000000480)="b05824a3fc942374280b5e79fd5a4d4d8450fc6353167b67ad0e22a2bd04993455d62e76d4c94c15635c2bc1dbd5459dcc3d96bb5e868df76c2bda6c7767b9c932a6336566efe2f884ad317f393e42a57726fbc16c969e9cedfa43b08597270006b98404970d112d11818ffa3acae6764c43f6dd122f43b72e6ba26b882f8718cb02721b68bf32e8c16f88b754aa68f3918dba3c6c6fd8523aabef491fbab2793707ca", 0xa3}], 0x2) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @random="d1fb5698f204"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 629.220473][T19198] debugfs: Directory 'C}=gô[mXv­¤ì.kšbEÆã|ÿ~1×îj'³Ù©{' with parent 'damon' already present! [ 629.221542][T19201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.225515][T19202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x141042, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) dup(0xffffffffffffffff) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1f600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0xc028ae92, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 04:19:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x33c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x31c, 0x60}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x158}, @device_a, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x18}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x2cb, 0x33, @mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @random="403d5fe9edfc", {0x6, 0x1}}, @ver_80211n={0x0, 0x7, 0x1, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x1, @random=0x81, 0x8504, @void, @void, @void, @val={0x4, 0x6, {0xff, 0x2, 0x7, 0x1f}}, @val={0x6, 0x2, 0x400}, @val={0x2d, 0x1a, {0x300, 0x0, 0x2, 0x0, {0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x7f, 0x7}}, @void, @void, [{0xdd, 0x22, "f10ae98956180c0252b82be5f0fc64b9c859fc4dd30331566830fe10198fd17dba61"}, {0xdd, 0xb7, "e37cd1671d3e967bf96773db2e891e875ca00eb99dd54835062270f6b41b2c5b424fa39b5dbc5c9bf151888cf7201f29dfdd0c377c2b9af52deac37f16b588cb44dd55771baaff7d59d490e2d32f392909c26eca207267ec3d87b9ad246969443f458c3fe4e2af0653b5788c161401acd512e7453d4f702cc2bc083cb164329d6d942f728b4867e7809940f0ebbc8f344686c1e9f4a3e8b4cd7eafcbca9398510a626377764e265795fa4a3ae48bee600b19ee7003465f"}, {0xdd, 0xda, "a12868bc59f84a39b697dc3cbdbe24abb14492367f2255d145fb0234cf4ddb8ff00a2bbf2ac5d582bb48474c924a76b7c6c9ac45086f6f573f51b553d4d634eed21ac61d9ab67e777ab5989559135830a20ef7dda58c5796eb5fd96de808711fd19e0c609b944c20dfafb3655ac9da96936dafc8e384c5db85b4083505294522c79259414c471c32e32d4a3ae54883aeb5cc437b3af8941259aab3d48d27b5e668a89929df9690d4a04df79975fdf567d5425310a9a7a32933882d9cf40dd19bee4a300f1061d50acf0e4672ebc7bc7d315d88c793f6b41a9618"}, {0xdd, 0x3e, "cafd07dd3a606d592be4f76cda092d4be9638d6ad95a1fac53470dbc1d8451f50676977944ad955a5a984753048888053249910265eea6c9758548ad7f8e"}, {0xdd, 0x7c, "0488df26f67d3ccac2bf567f105cac512628512a01faeca9f4336a8fdf1496d5ed32cb4e5f745e1d792c6b2219fcc4943baf7603ba4093cf03fde196266a707aab213321f804ca35d64ddc75110a409b3db3a93fd3ee40ac2aea71d9f58e07019a2a879e56381efb90c72e3de0ee26018efeeb208ea6144f78729a14"}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000020013004a00000000000046"], 0x103040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r1, 0x308, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf8b}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8040) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r4 = openat$null(0xffffff9c, &(0x7f00000006c0), 0x200000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r1, 0x28, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x40001) [ 629.564489][T19212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x79}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x94}}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=@ctrl_frame=@bar={{}, {0x9}, @broadcast, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x9}}}, 0x14) [ 629.591864][T19217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.595722][T19215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.602259][T19217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.603914][ T39] audit: type=1804 audit(1688357967.555:386): pid=19206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1170/bus" dev="sda1" ino=1965 res=1 errno=0 [ 629.607624][T19215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.609491][T19217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.625285][T19208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.680779][T19208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x79}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x94}}, 0x4000000) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x79}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x94}}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=@ctrl_frame=@bar={{}, {0x9}, @broadcast, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x9}}}, 0x14) [ 629.931972][T19221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x33c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x31c, 0x60}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x158}, @device_a, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x18}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x2cb, 0x33, @mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @random="403d5fe9edfc", {0x6, 0x1}}, @ver_80211n={0x0, 0x7, 0x1, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x1, @random=0x81, 0x8504, @void, @void, @void, @val={0x4, 0x6, {0xff, 0x2, 0x7, 0x1f}}, @val={0x6, 0x2, 0x400}, @val={0x2d, 0x1a, {0x300, 0x0, 0x2, 0x0, {0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x7f, 0x7}}, @void, @void, [{0xdd, 0x22, "f10ae98956180c0252b82be5f0fc64b9c859fc4dd30331566830fe10198fd17dba61"}, {0xdd, 0xb7, "e37cd1671d3e967bf96773db2e891e875ca00eb99dd54835062270f6b41b2c5b424fa39b5dbc5c9bf151888cf7201f29dfdd0c377c2b9af52deac37f16b588cb44dd55771baaff7d59d490e2d32f392909c26eca207267ec3d87b9ad246969443f458c3fe4e2af0653b5788c161401acd512e7453d4f702cc2bc083cb164329d6d942f728b4867e7809940f0ebbc8f344686c1e9f4a3e8b4cd7eafcbca9398510a626377764e265795fa4a3ae48bee600b19ee7003465f"}, {0xdd, 0xda, "a12868bc59f84a39b697dc3cbdbe24abb14492367f2255d145fb0234cf4ddb8ff00a2bbf2ac5d582bb48474c924a76b7c6c9ac45086f6f573f51b553d4d634eed21ac61d9ab67e777ab5989559135830a20ef7dda58c5796eb5fd96de808711fd19e0c609b944c20dfafb3655ac9da96936dafc8e384c5db85b4083505294522c79259414c471c32e32d4a3ae54883aeb5cc437b3af8941259aab3d48d27b5e668a89929df9690d4a04df79975fdf567d5425310a9a7a32933882d9cf40dd19bee4a300f1061d50acf0e4672ebc7bc7d315d88c793f6b41a9618"}, {0xdd, 0x3e, "cafd07dd3a606d592be4f76cda092d4be9638d6ad95a1fac53470dbc1d8451f50676977944ad955a5a984753048888053249910265eea6c9758548ad7f8e"}, {0xdd, 0x7c, "0488df26f67d3ccac2bf567f105cac512628512a01faeca9f4336a8fdf1496d5ed32cb4e5f745e1d792c6b2219fcc4943baf7603ba4093cf03fde196266a707aab213321f804ca35d64ddc75110a409b3db3a93fd3ee40ac2aea71d9f58e07019a2a879e56381efb90c72e3de0ee26018efeeb208ea6144f78729a14"}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000020013004a00000000000046"], 0x103040) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r1, 0x308, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf8b}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8040) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) r4 = openat$null(0xffffff9c, &(0x7f00000006c0), 0x200000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r1, 0x28, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x40001) [ 629.949531][T19221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.952849][T19226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.953427][T19221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x33c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x31c, 0x60}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x40}, @broadcast}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x158}, @device_a, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x18}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x2cb, 0x33, @mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @random="403d5fe9edfc", {0x6, 0x1}}, @ver_80211n={0x0, 0x7, 0x1, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x1, @random=0x81, 0x8504, @void, @void, @void, @val={0x4, 0x6, {0xff, 0x2, 0x7, 0x1f}}, @val={0x6, 0x2, 0x400}, @val={0x2d, 0x1a, {0x300, 0x0, 0x2, 0x0, {0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x7f, 0x7}}, @void, @void, [{0xdd, 0x22, "f10ae98956180c0252b82be5f0fc64b9c859fc4dd30331566830fe10198fd17dba61"}, {0xdd, 0xb7, "e37cd1671d3e967bf96773db2e891e875ca00eb99dd54835062270f6b41b2c5b424fa39b5dbc5c9bf151888cf7201f29dfdd0c377c2b9af52deac37f16b588cb44dd55771baaff7d59d490e2d32f392909c26eca207267ec3d87b9ad246969443f458c3fe4e2af0653b5788c161401acd512e7453d4f702cc2bc083cb164329d6d942f728b4867e7809940f0ebbc8f344686c1e9f4a3e8b4cd7eafcbca9398510a626377764e265795fa4a3ae48bee600b19ee7003465f"}, {0xdd, 0xda, "a12868bc59f84a39b697dc3cbdbe24abb14492367f2255d145fb0234cf4ddb8ff00a2bbf2ac5d582bb48474c924a76b7c6c9ac45086f6f573f51b553d4d634eed21ac61d9ab67e777ab5989559135830a20ef7dda58c5796eb5fd96de808711fd19e0c609b944c20dfafb3655ac9da96936dafc8e384c5db85b4083505294522c79259414c471c32e32d4a3ae54883aeb5cc437b3af8941259aab3d48d27b5e668a89929df9690d4a04df79975fdf567d5425310a9a7a32933882d9cf40dd19bee4a300f1061d50acf0e4672ebc7bc7d315d88c793f6b41a9618"}, {0xdd, 0x3e, "cafd07dd3a606d592be4f76cda092d4be9638d6ad95a1fac53470dbc1d8451f50676977944ad955a5a984753048888053249910265eea6c9758548ad7f8e"}, {0xdd, 0x7c, "0488df26f67d3ccac2bf567f105cac512628512a01faeca9f4336a8fdf1496d5ed32cb4e5f745e1d792c6b2219fcc4943baf7603ba4093cf03fde196266a707aab213321f804ca35d64ddc75110a409b3db3a93fd3ee40ac2aea71d9f58e07019a2a879e56381efb90c72e3de0ee26018efeeb208ea6144f78729a14"}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) (async) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000020013004a00000000000046"], 0x103040) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r1, 0x308, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf8b}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8040) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) r4 = openat$null(0xffffff9c, &(0x7f00000006c0), 0x200000, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r1, 0x28, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x40001) [ 629.985438][T19230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 630.057256][T19235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.114004][T19235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.170670][T19235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x141042, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) dup(0xffffffffffffffff) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1f600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0xc028ae92, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 04:19:28 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000400)={'veth1_virt_wifi\x00', @ifru_mtu=0x80000000}) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000000)=0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xb1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=@deltfilter={0x3bcc, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0xffff, 0x1}, {0xb, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @filter_kind_options=@f_bpf={{0x8}, {0x326c, 0x2, [@TCA_BPF_ACT={0x3260, 0x1, [@m_pedit={0x2f70, 0x1e, 0x0, 0x0, {{0xa}, {0x2e58, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xfc85, 0x8000, 0x3, 0x6, 0x80000000}, 0x5, 0x9, [{0x8001, 0x10000, 0xff, 0x7, 0xcb, 0x7ff}, {0x0, 0x200, 0x0, 0x3, 0x2, 0x1ff}, {0x7, 0x100, 0xffffffff, 0x8, 0xbcb1, 0x34749126}]}, [{0xd8, 0x10000, 0x7, 0x0, 0xba, 0x2b0}, {0x3, 0x4, 0xff, 0x2, 0xfff, 0x1}, {0x9, 0x4d22, 0x9, 0xeda, 0x7000, 0x5}, {0x0, 0x5, 0x0, 0x1}, {0x1, 0xfffffc01, 0x6, 0x7f, 0xfff, 0xfffffff7}, {0x1, 0x10000, 0x1c6000, 0x5, 0x8000, 0x3ff}, {0x3, 0xc1, 0x4, 0x80000000, 0x9, 0x2d}, {0x5, 0x0, 0xfffffff7, 0x9, 0x9, 0x5}, {0x0, 0x1, 0x800, 0x2, 0x9b48, 0x4}, {0x2, 0x9, 0x7ff, 0x8, 0x8, 0x7}, {0x8, 0x4, 0x7, 0x1, 0x6, 0xe9e}, {0xc5, 0x3, 0x8, 0x7, 0x3, 0x8}, {0x401, 0x7ff, 0x1, 0x10001, 0xfffffff9, 0x8}, {0x4, 0x0, 0x9, 0x1, 0x8, 0x9}, {0x5, 0x80, 0x4, 0x7f, 0x7f, 0x8001}, {0x10001, 0xfffff219, 0x3, 0x40, 0x40, 0x7}, {0x3, 0x100, 0x7f, 0x8, 0x101, 0x9194}, {0x4, 0x61be, 0x7fffffff, 0x10001, 0xff, 0x7f}, {0x7fffffff, 0x4, 0x0, 0x2de7, 0xffffffb2, 0x8}, {0x1, 0x5, 0x7c000, 0x4, 0x7, 0x8}, {0x5, 0x4504, 0x1, 0x10000, 0x800, 0x185b}, {0x2, 0xd3d, 0x9, 0x101, 0x6}, {0x1, 0x0, 0x2, 0x0, 0x8, 0x10000}, {0x4, 0x6, 0x6, 0x0, 0x0, 0x8000}, {0x9, 0x0, 0xb84d, 0x9ed, 0x9}, {0x5, 0x1, 0x7305, 0x10001, 0x0, 0x7}, {0x0, 0x9, 0xc0000, 0x0, 0x1, 0x10000}, {0x8, 0xfffffffe, 0x1, 0x1f, 0x7, 0x4}, {0x7, 0x80000001, 0xffff8001, 0xaf2, 0x8000, 0x7}, {0x9, 0x0, 0x1, 0x0, 0x5, 0x1ff}, {0xfffffff9, 0x2, 0x5, 0x16d1f983, 0x8000, 0x9}, {0x100, 0x0, 0x8, 0x7, 0xfffffff8, 0x7}, {0x1, 0xfffffff8, 0x9, 0x8, 0x1a, 0x7c}, {0x7a, 0x2, 0x9, 0x3f, 0x3, 0x1ff}, {0x8da3, 0x3f, 0xf6, 0x5, 0x7, 0xfffffffd}, {0x26d, 0x2, 0x7f4c, 0x9, 0x4, 0x4}, {0xfffffffc, 0x401, 0x9, 0xbe38, 0x7fffffff, 0x1}, {0x5, 0x6, 0x8, 0x4, 0x6, 0x2000000}, {0x20, 0x2, 0x10000, 0x0, 0x1}, {0x40, 0x2, 0x1, 0x80000000, 0x7fff, 0x20}, {0x7fff, 0x48000000, 0x20, 0x1, 0x7, 0x2}, {0x5, 0x0, 0x12, 0x100, 0x3, 0x1}, {0x2, 0x10000, 0xd0, 0x81, 0x800, 0xc721}, {0x1, 0x6, 0x8, 0x6, 0xd1b}, {0x284, 0x100, 0x1, 0x8c, 0x80, 0x80000000}, {0x40000000, 0x1000, 0xff, 0x80000000, 0x5, 0x15df}, {0x65, 0x6, 0x1f, 0x80, 0x7, 0x3}, {0x3f, 0x8, 0xfffffff7, 0xd90, 0xfffffff8, 0x9}, {0x6, 0x3ff, 0x4, 0x8001, 0x2}, {0x1, 0x0, 0xe1, 0x1ff, 0x6, 0xfff}, {0x4, 0x5, 0x40, 0x7, 0x1f, 0x10000}, {0x81, 0x4, 0x18, 0x80000001, 0xada, 0x5}, {0x6, 0x0, 0x17aa, 0x0, 0x8, 0x7f}, {0x200, 0x45, 0x0, 0x2, 0x5, 0x8000}, {0x5, 0x1d, 0xe8, 0x1, 0xd7, 0x9}, {0x7fffffff, 0x4, 0x2, 0x5, 0x10000, 0x101}, {0x7fffffff, 0x5, 0x4, 0x3, 0x18, 0x4}, {0x200, 0x9, 0x5452, 0x0, 0x1, 0x6}, {0x9, 0x6, 0x6, 0x0, 0xfffffff7, 0x8}, {0x100, 0x8, 0x2, 0x80000000, 0x3, 0x18}, {0x382, 0x1, 0xff, 0x793c000, 0x7, 0x548}, {0x8c, 0xff, 0xffff, 0xfa0f, 0x1, 0x4}, {0x1000, 0xffff8001, 0x6, 0x318, 0x2, 0x10001}, {0x0, 0x8d, 0x8, 0x7, 0x9, 0x80}, {0x7, 0x6, 0x7, 0x4dd4, 0x7, 0x7}, {0x9, 0xc0000000, 0x1, 0x8001, 0x8, 0x1000}, {0x0, 0x40, 0x4, 0x5, 0x80, 0x7fff}, {0x80000001, 0x4, 0x9, 0x7fffffff, 0x86, 0x7}, {0x8, 0x100, 0xff, 0x1, 0x80, 0x1000}, {0x5, 0x5, 0x1b7, 0x841, 0x2, 0xfff}, {0x0, 0x6, 0x3, 0x5, 0xffffff80, 0x5}, {0xffff7fff, 0x2, 0x10000, 0x0, 0x1, 0xf4f}, {0x4, 0xffff, 0x4, 0x2, 0x80000001, 0x7}, {0x188, 0xfffff800, 0x6, 0x10001, 0xcd0}, {0x0, 0x1, 0x9, 0x9, 0xfffffffc, 0x3f}, {0xfffffd80, 0x3, 0x3, 0x8, 0x10000, 0x9}, {0x2, 0x80, 0x3, 0x5, 0x90, 0xfff}, {0x9, 0x20, 0x7, 0x0, 0x3, 0x7}, {0x5, 0x8, 0xed, 0x33, 0x7cf73b6d, 0x9f0}, {0x7a, 0x9, 0x2830, 0x0, 0x80000000, 0x50000}, {0x35, 0x2, 0x1100, 0xffffffff, 0x7fff}, {0x98, 0xffffffff, 0x7f, 0x0, 0x7fffffff, 0x4257ea9d}, {0x5, 0x10000, 0x10001, 0x2, 0x2, 0x6}, {0x4, 0x3, 0x80, 0x2, 0x40, 0x800}, {0x2e, 0x1f, 0x1f1, 0x2d, 0x2f0c, 0x4}, {0x2c5c, 0x3, 0x1, 0x5, 0x8000, 0x7}, {0x7f, 0xfffffff7, 0x5, 0x9, 0x4, 0x66}, {0x81, 0x7, 0x2, 0x81, 0x200, 0x1}, {0x20, 0x1a, 0x10000, 0x6, 0x496, 0x1000}, {0x3f, 0x101, 0xffffffff, 0x10000, 0x80ab, 0x6836ef29}, {0x1, 0xffffffff, 0x7, 0x0, 0x1, 0x3db}, {0x1ff, 0x1f, 0x8, 0x80000001, 0xffffffff, 0x3}, {0x9, 0x6, 0x2, 0x3ff}, {0x7, 0x6, 0x3474, 0x5, 0x40, 0x9}, {0x5, 0x7, 0x100, 0x3, 0x7f, 0x5}, {0x3000000, 0x1f, 0x2, 0x8, 0x9f70, 0x9}, {0x2, 0x1, 0x6, 0x5, 0xdaf5, 0xff51}, {0x800, 0x9, 0x4, 0x101, 0x7, 0x9}, {0x80, 0x7, 0xffffffff, 0x1000, 0x3a, 0xfffffffb}, {0x8001, 0xfff, 0x3, 0x9, 0x21, 0xa83}, {0x80, 0x9, 0x5, 0x3, 0x2, 0x6}, {0x719c, 0xc627, 0x4, 0x8, 0x0, 0x2}, {0x7, 0x8000, 0x742, 0x8, 0x5, 0xfdb}, {0x80, 0x9, 0x6, 0x9, 0x6, 0xfffffffe}, {0x7fffffff, 0x32, 0x400, 0x400, 0x7ff, 0x8}, {0x6, 0x3c8e, 0x1ff, 0x16d5, 0xffffffff, 0xbdb}, {0x3, 0x1, 0x7, 0x1f, 0x8, 0x7}, {0x36d1, 0x0, 0xe2db, 0x2, 0x0, 0x6}, {0x7, 0x6, 0x8, 0x1, 0xfffffffe, 0x9}, {0x3, 0x1, 0x3, 0xfffffffc, 0x1000, 0x5}, {0x3f, 0x5, 0x5, 0x40, 0x5, 0x6f}, {0x1046, 0x8, 0x2466, 0x8001, 0x9, 0x9c}, {0x4, 0xd8, 0xe, 0x40, 0x4, 0x9b9}, {0xff, 0x3, 0xbbda, 0x5, 0x80, 0x7}, {0x6, 0x0, 0x5, 0xc294, 0xffffffe1, 0x5}, {0x6, 0x8, 0xffff, 0xa, 0x7, 0x2}, {0x8, 0x3f, 0x2, 0x3, 0x0, 0x8}, {0x1000, 0xbba, 0x1, 0x2, 0x5, 0x3}, {0x0, 0x408, 0x5, 0x5, 0x3, 0x8}, {0x16, 0x5dfb, 0x0, 0x2, 0x3, 0x81}, {0x7f, 0x2, 0x2, 0x8, 0x2, 0x5}, {0x71e, 0x3, 0x4, 0x4}, {0xffff, 0x37f, 0x6, 0xfff, 0x8001, 0x40}, {0x8, 0x8, 0x2, 0x3d, 0xcf, 0x2}, {0x32b, 0xd53b, 0x9, 0x2, 0xffff, 0x1}, {0xd99, 0x3, 0x3, 0x8, 0x2}, {0x6, 0x6, 0x7301b55d, 0x4, 0xfffffff7, 0x3}, {0x8ad7, 0xff, 0xfffffe00, 0x100, 0xc0e7, 0x800}], [{0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x2}, {}, {0x3}, {0x2}, {0x3}, {0x3}, {0x4}, {0x3}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0xd6bc7bf1db8a15e2}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0xe97769f022a852c2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x4ef9aac96bbde2a0}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x6, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0xf5c1fa676eff650}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x7c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x1, 0x0, 0x4, 0x1800, 0x5}, 0x20, 0xff, [{0x5, 0x4, 0x7, 0x1, 0x3, 0x2}, {0x0, 0x1f, 0x0, 0x4, 0x4, 0x5}, {0x1, 0x6, 0x200, 0xd9a6, 0x1, 0x7b3b}, {0x1, 0x1, 0x3, 0x80000001, 0x3, 0x2d7}, {0x3f, 0xfffff801, 0xc80e, 0x6, 0x1, 0x8}, {0x5, 0x401, 0x6c, 0xfffffffe, 0x8000, 0xbb}, {0x7ff, 0xff, 0x80000000, 0x4, 0xfff, 0x6}, {0x2, 0x4, 0x4, 0x800, 0x80, 0x80}, {0x2, 0x7fffffff, 0x34, 0x0, 0x1c00000, 0xfffffffc}, {0x7fff, 0x7fffffff, 0x3ff, 0x9, 0x40, 0xd9cf}]}, [{0x3f, 0x348, 0x5, 0x782ceb35, 0x1, 0x1}, {0x0, 0xffff8000, 0xdb, 0xfffff000, 0x6, 0x6991}, {0x0, 0x7, 0x5, 0x92, 0x8001, 0x8}, {0x5, 0xdd22, 0x7fffffff, 0x6, 0x2f, 0x7ff}, {0x5, 0x4, 0x5, 0x39f, 0x5}, {0x7, 0x27f, 0x1, 0x0, 0xca6d, 0x5}, {0x2, 0x7, 0x0, 0xfffffffc, 0x100, 0x8}, {0x5, 0x433e, 0x3, 0x1, 0x20b, 0x4}, {0x2, 0x1, 0xfffffffe, 0xfffffffa, 0x100, 0x800}, {0x0, 0x3ff, 0x81, 0x1ff, 0x0, 0xfc}, {0x6, 0x91, 0x5, 0x7, 0x7fff, 0x7ff}, {0x6, 0x0, 0x5, 0xa38, 0x6, 0x4}, {0x401, 0xffff, 0x2, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x7, 0x800, 0x0, 0xe83f}, {0x0, 0x3ff, 0xfffffffa, 0xfffff800, 0x1, 0x80000001}, {0x3, 0x1800000, 0x917e, 0x5, 0x3, 0x80}, {0x8, 0x0, 0x1f5, 0x8, 0x828}, {0x1, 0x1, 0x6, 0xfff, 0x5, 0x40000}, {0x2, 0x1, 0x4, 0x0, 0x5, 0x8000}, {0x7f, 0x4, 0x7fffffff, 0xffff, 0xfffffffc}, {0xffffffff, 0xfffffff9, 0x1, 0x1, 0x7f, 0x4}, {0x10001, 0x4, 0x5, 0x200, 0xff, 0x2}, {0x3248, 0x2, 0xd8, 0x6, 0x7}, {0x89, 0x40e, 0x8, 0x37, 0x7ff, 0x1}, {0xe7e, 0x8000, 0x5, 0x3, 0x168c, 0x7}, {0x0, 0x2, 0x6, 0xfffffffa, 0x80000000, 0x401}, {0x7, 0xd2, 0x7, 0x7fffffff, 0x8000, 0x8000}, {0x3f, 0x3, 0x0, 0x100, 0x1, 0xffffffff}, {0x389a, 0xffffffe2, 0x4, 0x80, 0x1a, 0x3f}, {0x6a8000, 0x5, 0x1, 0x0, 0xcde}, {0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffff9}, {0x7ff, 0x0, 0x401, 0x3, 0x10001, 0x40}, {0x4, 0xfff, 0x7fff, 0x5, 0x3f, 0x1}, {0x5, 0x7, 0x8001, 0x2, 0x1, 0xffffffff}, {0x9c, 0x0, 0x10, 0x3f, 0x7, 0xffff}, {0x7, 0x1, 0x0, 0x8, 0x1, 0x401}, {0xe87, 0x4, 0x101, 0x7ff, 0x1, 0x910}, {0x7, 0x7, 0x9, 0x4, 0x400, 0xffffffff}, {0xf40e, 0x1, 0x7fffffff, 0x20, 0x80, 0x2}, {0x800000, 0x6, 0x5dd7447b, 0x0, 0x7b, 0x5}, {0x3e, 0x40000000, 0x84, 0x8, 0x1f, 0x4}, {0x8, 0x3, 0x8, 0x0, 0x2, 0x1}, {0x2, 0xab, 0x1, 0x4, 0x9, 0x3f}, {0x7fff, 0x80000001, 0x3, 0x17, 0x9, 0xfffff001}, {0x0, 0x6, 0x10000, 0x1f, 0xfffffffd, 0x400}, {0x2, 0x4, 0xffffff80, 0xed, 0xfffffff8, 0x7f}, {0xffffffff, 0x8, 0x3, 0x1a, 0x20, 0x5}, {0x4, 0x1, 0x4, 0x7, 0xae, 0x3f}, {0xffffcd5e, 0x3, 0x6, 0x1f, 0xfff, 0xffffffff}, {0x80, 0x7, 0x5000, 0x8, 0x5, 0x2}, {0x7fff, 0xa573, 0xc22, 0x6, 0x2, 0x5}, {0x8, 0x6, 0x9, 0x1, 0x9f, 0x6}, {0xd23, 0x6, 0x0, 0x1, 0x2, 0x7}, {0x4, 0x0, 0x0, 0x40, 0x9, 0x1ff}, {0x6, 0x8, 0x6, 0x5, 0x9}, {0x0, 0x1, 0x9, 0x101, 0x7bad, 0x10000}, {0xbbc1, 0xfffffff9, 0x2, 0x14, 0x0, 0x7}, {0x0, 0x0, 0xffff7fff, 0x15, 0x2, 0x9}, {0x4, 0x5, 0x7, 0x807c, 0x9, 0x1f}, {0xfffffff9, 0x0, 0x6, 0x316297a3, 0x4, 0x10000}, {0x2, 0x3ff, 0x8000, 0x5, 0x6, 0x2}, {0x6, 0x7, 0x0, 0x1, 0x7, 0xb2}, {0x5, 0x3ff, 0x7, 0x43ee47cd, 0x100, 0x7f}, {0x4a, 0x9, 0xf6b, 0x7f, 0x400}, {0x6, 0x3ff, 0x2, 0x7ff, 0xb3, 0x9}, {0x7, 0x5, 0x2, 0x8001, 0xfffffe00, 0x29}, {0x2, 0x6, 0xebb, 0x9, 0x8, 0x3}, {0x800, 0x3, 0x1, 0x8000, 0x80000000, 0x8a8}, {0x1f, 0x200, 0x0, 0x5, 0x7, 0x7}, {0x401, 0x227, 0x3, 0x9, 0x5, 0x1f}, {0x3ac00000, 0x5, 0xa5, 0x3ff, 0xffff, 0x9}, {0x9, 0x3, 0xffffffff, 0x0, 0x1, 0xfffffff9}, {0x194, 0x7, 0x8, 0x7fffffff, 0x1, 0xffffffff}, {0x8afe, 0x3f, 0xe7, 0x0, 0xd62, 0x100}, {0x20, 0x1, 0x7f, 0xfffffffb, 0x6, 0x20}, {0x9, 0x4, 0x200, 0x3, 0x8, 0x40000000}, {0xff, 0xd306, 0x2, 0x3, 0x6, 0x7}, {0x8001, 0x3, 0x1000, 0x3, 0x33}, {0x0, 0x2, 0x8, 0x1, 0xb56, 0x48d}, {0x3, 0x1, 0x1, 0x5, 0x81, 0x5}, {0x3, 0x1000, 0x1ff, 0x6b2, 0x9, 0x1}, {0x9, 0x2, 0x7fff, 0x2, 0x0, 0x7}, {0x7, 0x5, 0x3f, 0x0, 0x101, 0x3ff}, {0x2, 0xffffffff, 0x1, 0x2, 0x8, 0x3}, {0xfffffd0b, 0xe00000, 0x4cf, 0x3, 0x8, 0x3}, {0xffffffc0, 0x100, 0x7, 0x8, 0x0, 0x5}, {0x400, 0x6, 0xc5, 0xfff, 0xfffff001, 0x1}, {0x4, 0x8, 0x3, 0x8000, 0x4, 0x6}, {0xff, 0x0, 0x1, 0x4, 0xffffffff, 0x101}, {0x3ff, 0x904, 0x80, 0x8001, 0x4, 0x5}, {0x7, 0xffffffc0, 0x80000001, 0x7ff, 0x81, 0x8001}, {0x9, 0x9, 0x6, 0x0, 0x4, 0xf74d}, {0x800, 0xfff, 0x3, 0xa293, 0x5, 0x3f}, {0x3ff, 0x2, 0xfffffffb, 0x6, 0x7ff, 0x1ff}, {0x100, 0xfffffffc, 0x60, 0xfffffffe, 0x10001, 0x4}, {0x2, 0x3, 0x3f, 0x200, 0x1, 0x3ac9}, {0xdea, 0x0, 0x26f101b6, 0x40, 0x2, 0x8000}, {0x99f, 0x1f, 0x8, 0x1, 0x7f, 0x4}, {0x2, 0x1000, 0x1, 0x5, 0x3, 0xffffffff}, {0x254, 0x9, 0x1, 0xfffffff7, 0x1, 0x400}, {0x0, 0x17, 0x7, 0x1, 0x80000001, 0x2}, {0x4f, 0x0, 0x4, 0x8f6, 0xfffffffc, 0xdf}, {0x87c, 0x5, 0x7, 0x0, 0x3, 0x2dd}, {0x80, 0x3, 0x400, 0x8c21, 0xffff0000, 0xac}, {0x7, 0x5, 0x5, 0x2c5, 0x8, 0x9}, {0xa54, 0xfff, 0x1d, 0x100, 0x3, 0x3}, {0xffff, 0x2, 0x6e, 0xfffffffe, 0x1, 0xec4}, {0x9, 0x6, 0x9, 0x8, 0xfffffff7, 0x10001}, {0xffffffff, 0x3f, 0x0, 0x1, 0x4, 0x9}, {0xa0, 0x5, 0x8, 0x356, 0x81, 0xffffffff}, {0x3, 0x1, 0xfffffff8, 0x3, 0xfdd, 0xaf8}, {0x6, 0x7, 0x80000001, 0x3, 0x9, 0x1ff}, {0x0, 0x5, 0x3ff, 0xf2eb, 0x3, 0x2}, {0x101, 0xd05, 0x1, 0x7, 0x7fff, 0x8}, {0x0, 0x0, 0x26b, 0xfffffff9, 0x40000, 0x582c}, {0x0, 0xd9, 0x3, 0x6, 0x2445, 0x7ff}, {0x4, 0x5, 0x4, 0x8e, 0x7fffffff, 0x2b4}, {0x959, 0x3, 0x1, 0x50, 0x4, 0x8}, {0xffffffe1, 0x9, 0x7, 0x6, 0x91f, 0x5}, {0xf5, 0xe0ac, 0x9, 0x100, 0xfffffff7, 0x2}, {0x4, 0xff, 0x7ff, 0x7cfc, 0x1, 0x7}, {0x5, 0x7, 0x100, 0x3f, 0x9, 0x3f}, {0x6, 0x40, 0x8, 0x3, 0x3, 0x8}, {0x81, 0x9, 0x8, 0x2, 0x9, 0x80000000}, {0x800, 0x3, 0x5, 0x1, 0x2, 0x7f}, {0x5, 0x7, 0xfff, 0xfffffff8, 0x9, 0x2}, {0xffffffe1, 0x3, 0x2, 0x1, 0x0, 0x15c2000}, {0x800, 0x7ff, 0x4, 0xd8f, 0xfffffffe}], [{0x0, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1fa9bf5b4f97ca3e}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0xdb93993d53d6dfc}, {0x5, 0x1}, {0x0, 0x1}, {0x5d2a5ff5e3ec06c0}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x3}, {}, {0x4}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xff, 0x8000, 0x6, 0x5, 0xfff}, 0x80, 0x2, [{0x49, 0x3, 0x5, 0xfffffbff, 0xf1f, 0x8000}, {0x5, 0x1f, 0x8001, 0x101, 0x9, 0x38f}, {0x2, 0x3, 0x6, 0x101, 0xffffff7f, 0xfffffe01}, {0x1000, 0x5, 0x6, 0x37, 0x3, 0x3ff}, {0x1, 0x3, 0x100, 0xfd7b, 0x100, 0x200}, {0x33, 0xfffffffa, 0x7, 0x80000001, 0x80, 0xfffffc01}, {0x9, 0x4, 0x2, 0xfffffff7, 0x101, 0xffffff01}, {0x401, 0x0, 0x1, 0x4, 0x9, 0x8}]}, [{0xff, 0x2, 0x9, 0x20, 0x8, 0x100}, {0x5, 0x4, 0x8001, 0x7, 0x2, 0x1}, {0x2, 0x1ff, 0x101, 0x5, 0x1, 0x4}, {0x0, 0x1, 0x6, 0x1, 0xfffff801}, {0x80000001, 0x3, 0x0, 0xd273, 0x5, 0x1}, {0x7, 0xffffffff, 0x1, 0x100, 0xffffffff, 0x3f}, {0x200, 0x5, 0x7fff, 0xfffffffe, 0x8000, 0x51e}, {0xe9, 0x4, 0x2, 0x0, 0x1, 0xffff64f2}, {0x1, 0x7, 0xfffffff9, 0xaa, 0x8374, 0x8}, {0x6, 0xfff, 0xff, 0x1000, 0x0, 0x2}, {0x8000, 0xff, 0x80000001, 0x8, 0x9, 0x1ff}, {0xe16, 0xf5, 0x400, 0x1ff, 0x6, 0xff}, {0x101, 0xe39, 0x8000, 0x35dc, 0x2, 0x7}, {0x8000, 0x1, 0x9, 0x5, 0x1, 0xb333}, {0x3, 0x3, 0x300000, 0x1f, 0x5f8, 0xff}, {0x10001, 0x2, 0x3ff, 0x4, 0x8, 0x673d}, {0x20, 0x1, 0x8, 0x400, 0x12, 0x5}, {0x7fff, 0x6, 0x1000, 0x3, 0x1, 0x2}, {0x3, 0x894, 0xff, 0x0, 0xfffffffd, 0x9}, {0x101, 0x2, 0x9, 0x4, 0x2, 0x9a}, {0x7, 0x2, 0xfffffffa, 0x1, 0x2, 0xecf}, {0x7fff, 0x400, 0x100, 0x4, 0xff, 0x18}, {0x1, 0x8, 0x7fff, 0x2, 0x800, 0x6f253f2b}, {0x1, 0x3, 0x200, 0x9, 0x10000, 0x6}, {0x40, 0x2185bd1d, 0x18, 0x1, 0x3, 0x400d}, {0x4, 0x2, 0x1, 0x6567cedd, 0x2, 0x100}, {0x9, 0x2, 0x9, 0x3, 0x3a, 0x5}, {0x1, 0x7, 0xff, 0x0, 0x81, 0xe0000000}, {0x40, 0x3f, 0x2, 0xebc2, 0x7, 0x7}, {0x5, 0xfffffffe, 0x80000001, 0x7fff, 0xea, 0xde}, {0x80000001, 0x2, 0xffff, 0x5, 0xbf45, 0x3f}, {0x8000, 0x4, 0x81, 0x6, 0xfffff800, 0xffff}, {0xfffffe01, 0x5966, 0x9, 0x8, 0xfcca, 0xc6a1}, {0x2, 0x0, 0x7, 0x7}, {0x59ce, 0x9, 0x9, 0x40, 0xbb60, 0x10000}, {0x5, 0x4, 0xffffffff, 0x3f, 0x0, 0x10000}, {0x800, 0x1, 0x81, 0x1, 0x0, 0x8}, {0x9d, 0x20, 0x81, 0x3f, 0x80, 0x4}, {0xff, 0x1, 0x6, 0x3, 0xffffffff, 0x1000}, {0x36f, 0x5, 0x6, 0x40, 0xfffffffa, 0x6802}, {0x0, 0x9, 0x1000, 0x331, 0x9, 0x515}, {0x7fff, 0x3, 0xffff0000, 0x800, 0xfffffffe, 0x7e8}, {0x7fff, 0x9, 0x80000000, 0x7, 0x9, 0x800}, {0x6, 0x7, 0x3, 0x9, 0x9, 0x2b2}, {0x2, 0x3, 0x4, 0x6, 0x0, 0x2}, {0x5, 0x3, 0x1000, 0x3, 0x1, 0x40}, {0x7, 0x1, 0x7ff, 0x562, 0x1}, {0x3189, 0xffffffc7, 0x4, 0x1, 0x3, 0x6}, {0x637e, 0x8, 0x0, 0x14, 0x7ff, 0x1f}, {0x7, 0x0, 0x1, 0x4, 0x4, 0x4}, {0xfff, 0xffffffff, 0x79, 0x4, 0x9, 0x5}, {0x3, 0x80000001, 0x2, 0xe980, 0x3, 0x4}, {0x3c2, 0x400, 0x2b, 0xfff, 0x7ff, 0xa0}, {0xfffffff8, 0x7, 0x9, 0x8, 0x475, 0x4}, {0x7d0, 0x5, 0x0, 0x8, 0x9, 0x400}, {0x7, 0x0, 0x9, 0x0, 0x80000001, 0x3f}, {0x2, 0x6, 0x8, 0x0, 0x8, 0xffffffff}, {0x7, 0x14, 0x10000, 0x2, 0x0, 0x4}, {0x3, 0x8, 0x8, 0x6, 0xfffffffd, 0x4}, {0x9, 0x9, 0x1, 0x200, 0x200, 0x796}, {0x3, 0x734c, 0x2, 0x100, 0x5, 0x1}, {0x2638, 0x9, 0x0, 0x9, 0x3, 0x6}, {0x80, 0xfff, 0x8, 0x0, 0xffffffff, 0x2}, {0x9, 0x8001, 0x8001, 0x10001, 0x7f, 0x9}, {0x3ff, 0xe62, 0x25000000, 0xd4, 0x1, 0x3}, {0x5, 0x6, 0x3, 0xfd, 0x0, 0x1a28}, {0x1, 0x1f, 0x1ff, 0x7f, 0x7f, 0x2}, {0xc03, 0x71, 0xfffffff7, 0xffff, 0x2, 0x9f0f}, {0xffffffff, 0x400000, 0x3, 0xe3, 0x6, 0x1}, {0x7ff, 0x0, 0xbcaf, 0x5b0, 0x81, 0x4}, {0x3, 0x6, 0x5, 0x70, 0x4, 0x9}, {0x7, 0xaa, 0xffffffff, 0xc0000000, 0x8000, 0x4}, {0x5, 0x6, 0x9, 0x5, 0xed, 0x200}, {0x1ff, 0x7, 0x8b33, 0x6, 0xff, 0x99}, {0x7, 0x1, 0x4, 0x1ff, 0x4, 0x2}, {0x4, 0x0, 0x2c44, 0x4c54, 0x5}, {0x1, 0x9, 0x7, 0x0, 0x1000, 0x1000}, {0x4, 0x8, 0x4, 0x11, 0x40000000, 0x5a96}, {0xfffffff8, 0xfffffbff, 0x1800, 0x8000, 0x3, 0x9}, {0x1, 0x2582, 0xffffffff, 0xffff, 0x7fff, 0x800}, {0x2, 0x7fff, 0x81, 0x4, 0x80000000, 0x6}, {0x5, 0x1, 0x0, 0x401, 0x4, 0x6}, {0x1, 0x6, 0x1, 0x6, 0x7f, 0x81}, {0x8001, 0x1b8b, 0x0, 0x59, 0x9, 0xff}, {0x80, 0x10001, 0x7f, 0x1197995c, 0xfffffffe, 0xfff}, {0x9, 0x8000, 0x2, 0x10000, 0x7ff, 0x401}, {0x7fff, 0xcb, 0x0, 0x1a, 0x1, 0xe}, {0xcac, 0x846, 0xf356, 0x3ff, 0x3, 0x8000}, {0x2, 0x1, 0x25f, 0x401, 0x2}, {0x2b, 0x1, 0x1000, 0x9, 0x1f, 0x3f}, {0x400, 0x8, 0x8000, 0x1, 0xbd, 0xffffff0b}, {0x6, 0x3, 0x1ff, 0xff, 0x0, 0x5d4}, {0x8, 0x3, 0x3f, 0x8, 0x40, 0x21}, {0x800, 0x6c, 0x5, 0x800, 0x6, 0xffffffc1}, {0x2, 0xd10, 0x6383, 0x2, 0x8, 0x7}, {0x0, 0x6, 0x8, 0x1f, 0x8, 0xf7}, {0x80, 0x8, 0x2, 0xfff, 0xbb47, 0x6}, {0xd4, 0x400, 0x7, 0x3, 0x8000, 0x7fffffff}, {0x80000000, 0x0, 0x0, 0x4, 0x6, 0x8}, {0x0, 0x1, 0x1, 0x7, 0x1f, 0xff}, {0x1, 0x7, 0x0, 0x50, 0x8001, 0x101}, {0xe2a, 0x4b, 0x5de, 0x8, 0x6, 0x3f}, {0x8e, 0xc00000, 0xb6, 0x4000000, 0x2, 0x1}, {0x6, 0x5, 0xa7d, 0x80000001, 0x9, 0x4}, {0x80000000, 0x7, 0x2a, 0x3, 0x7ff}, {0x10001, 0xb69, 0x0, 0x7, 0x7, 0x8000}, {0xffff, 0x0, 0x803, 0x5, 0x7, 0x1}, {0x3, 0x4, 0x7, 0x4, 0x8001, 0xc38f}, {0xfffffffc, 0x5, 0x6, 0x1, 0x93da, 0x3ff}, {0x8, 0x80, 0xe11, 0x8, 0x0, 0x9}, {0xfffffff9, 0x7, 0x3, 0x8000, 0x5889, 0x9}, {0xfff, 0x7fff, 0x0, 0x6, 0x1, 0xfffe00}, {0x5, 0x4c1f, 0x3, 0xffffffff, 0x48, 0x8}, {0x0, 0x907, 0xfff, 0x1c, 0x8, 0x8}, {0x5, 0x0, 0x1, 0x9d, 0x1af2, 0x7fffffff}, {0x1, 0x1, 0x2, 0x7, 0x7, 0x7}, {0xffffffff, 0x8, 0x0, 0x0, 0x2, 0x3}, {0x1, 0x9, 0x6, 0x7, 0x2, 0x8}, {0x0, 0x4, 0x80000001, 0x5, 0x6}, {0x9, 0x401, 0x80000001, 0x8, 0x5}, {0x4c, 0xe8, 0x7, 0x7, 0x9}, {0x401, 0x0, 0x10001, 0xdd, 0xffffffff, 0x3}, {0x0, 0x59d, 0x4, 0x9e3, 0x7ff, 0x4}, {0x2, 0x9, 0x9, 0x7fff, 0x4, 0x8}, {0x6, 0x2, 0x8001, 0xff, 0x80, 0x2}, {0x8001, 0x2, 0x7, 0x9, 0x40, 0x200}, {0x3ff, 0x3f, 0xfffffff9, 0x80000000, 0x2, 0x4f}, {0x6, 0x2, 0x2, 0x5aaf, 0x8, 0x7}], [{0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x6615120342f2de14}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x2}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x3}, {0x4, 0x2575b3b2ed807c92}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x140, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0xef, 0x6, "46691ab7484bf9389fbe8830b0912621f608024a1483f3023f51235ad1bc69a8d9a2470a5262251eac08e3d42647efd953fd59a8cc21a25d5666b1db266e890a342a49a3502f72315c290bf7e079fba892028a5d6f102f11ae8a45b61abec64307b27005c179e64be19deecd7b5d17fefe6f9aa49b01e40262d4f29484ad7049c078aa4f40ec27d2612bd146bba51f4254bf610bb0c5ccb77882ccd599bf0d44a8515f82e3abd0bb28c8ff5a007d707175829a1c273119d8b27816cf18872d7e69b9776a5d813f5e080312b50df6a4e1e5f260ba1b4f19d2072461ba8fa4086595a0ce90e46d2b82657658"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x11c, 0xa, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0xd7, 0x6, "a097c9affaa2b5bc9c55196840173e2974e0f303e482062a97fda667ec96a5bb216ea5c05bafdddde15844248eba7ce008c51f40ce2c64e9429c28a39110710480ef8220ea64212fb3866dbaf9353154aedb8c38a1861255f7e7fa49c546a854560e7440337c4a9240229b83c3b7f2c81bd1c39e20df0f9f7144c8d53a3b732c4ad393d892938b163d5e0e807f3963464e66dcf5bd37245df20530823181141ca6f2ca73b3ef402b6a7579ddea7ea6d9ec6802db7de6900fc89d3d6f67486eac9b7bdbe81dada8f729ebc3286c56ca7d22aabd"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xb4, 0x11, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0x7, 0x4, 0x1000, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x800}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x45, 0x6, "e040250aa7ac343505c22870ac5e98d57033d0b2888158179063ef7cee692d92633db39a5a1e5c210d310f214dfc8a7feff801b633fc4398990c79d6f7db4cdbfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x11c, 0x14, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x401, 0xfff, 0x20000002, 0x6, 0xbe0}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0xcf, 0x6, "716466a88b72f7b870b5a34b05f985aee5da901dd68059a53c82cf95ebded6b01cc4ee45b3d53611d2e513b14fe1f4effd67a083cc51791640843621c12ea65eb8253f093b2b9894d03ab79b7c53bd5eab16bd3489f3db84fc49fe47a6211ab0a8d3312f27092695f524aa591f6a99eb9bb019b70cedbf6d52c5846c15eff1212d41b3c76e41d1d4338ebc4de01ebc5f795e2a4e721a51bd769f1b8f61fd82a6b51c2efcbb3b2d5d659546112c31ff3dd1f7a306a314130eb910bd0bb032496d515fd196fe32573528180a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @filter_kind_options=@f_basic={{0xa}, {0x8f8, 0x2, [@TCA_BASIC_EMATCHES={0xf8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xd990, 0x8, 0xff}, {0x4, 0x1, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x7ff}, {0x9d, 0x2, 0x400, 0x0, 0xa}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x3}, {0xb9, 0x7, 0x0, "1568097adca5dd"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1f, 0x8, 0x2}, {0x3, 0x0, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x6}, {0x1000, 0x80000001, 0x443, 0x8001}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x1, 0x4, 0xff36}, [@TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="6b0880dce7", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="9b", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="6ec08f09", @TCF_META_TYPE_VAR=';:']}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="a141", @TCF_META_TYPE_VAR="025593646ff488bb03", @TCF_META_TYPE_VAR="09b035790c146bb2"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x2}, {0x5, 0x5, 0x7b, 0x0, 0x0, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1f}}]}, @TCA_BASIC_EMATCHES={0x198, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8001, 0x3, 0x3ff}, {0xffff, 0x100, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0xffff, 0x101, 0xfff, 0x7, 0x8}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfffd, 0x8, 0x7}, {0xffffffffffffffff, 0x3, 0x7}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x40}, {0xc3, 0x8, 0x1, "f82207294e4aad62"}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0xb1d}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x720, 0x2, 0x3c8}, {0x3f, 0x9, 0x2, "a4c54321770dfa2679"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0x4, 0x3, 0x5}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_CONTAINER={0xc4, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x7fff}, "40b845552c88b98b87771ed606b082516ccd80c1a832de62120a9e13ccea61e4ac052f10e752a4d08c4bc0007118542ef7457dec1808dd58a8fec3757342922922b8fc989328272f1803ba6076e091268c18fbf0c6f201f7b2a6da90c8e337ce22f2c6b12a0dd1ff7664a7e80578983866b4ad82e3dbd4562ef4f46529d6f844a68a702c2b56dbef12afde055aa02add7a715a39b1f2bf7bdcaeb339504112553135c5a328d13e5dc3045fd789cd7a86a4f88e528a44"}}]}]}, @TCA_BASIC_EMATCHES={0x350, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x344, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0xc000, 0x0, 0xe8e}, "e46e3f0259d33c10c4116c2d5fe7d19e13a69a51a33b925a24cd8178cb68e7b2463785523f31ab4ad0fc3f097a"}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0xfffe, 0x4, 0x400}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b28bf80174d8", @TCF_META_TYPE_VAR="c1", @TCF_META_TYPE_VAR="f2566ef19bcc50549b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x0, 0x2}, {0x20, 0x9}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1ff, 0x8, 0x3}, {0x3, 0x1, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0xd02}, {0x4, 0x1, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xf71}, {0x81, 0x9, 0x8, 0x1, 0x7, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x200, 0x7, 0x8009}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x800}, {0x3f, 0x2, 0x937a, 0x4, 0x0, 0x0, 0x2}}}, @TCF_EM_IPT={0xb4, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9d, 0x5, "5de356711acc5ef99d46159dc04a8f772e8b3b9846088a0a627b3d0a13be9e352b3cff58831e1f10ea5ab360acaea926a72a9570a1fa409d4f465c71f7b20130157d7e3ca9369d7e5cfc92e8179280ea519a625b52e54840bae74dd131de704318c85272ed4472e59e0dc85246a5251d8575ef61f78b4f0072481c0aa150ef82f90c911af786cf6dde74583ef0f33e4e0e38708120d39e3dab"}]}}, @TCF_EM_CONTAINER={0xb4, 0x3, 0x0, 0x0, {{0x75ec, 0x0, 0xe6}, "67767d9bab46db125250425218719f5ec51b6810af48c7d75dffed1fad8c3e0972f78f96f70763c04e2e2af676b03e04811fef57f56b72a5d28d680eaa69b932ba04a40366dd3acb47a2104f39205b16fc5605ad182ebefac8c6ab7d7548257c411b77fc91564b428a6945af486ce562c28b7966638b7e0347b30632076fd81047eb6e7dac36f50cacbd82572a52488114b1bb1bb493e926df0ded5fe4e6f551ffb82467af839b"}}, @TCF_EM_CONTAINER={0x104, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x2}, "20a3f51ba6403d9a4eb8130071e3c1b86dd0376d8ba5e20c07728ee333ba2f23bfe78f41bbd0a737664240b40d6f3516646f6d1aa4c00d130d84a1c36e41d925df7ccea8814066c2a3818109a64e2af640401adf1753bf04c92ac0774919969d558458059be18d9b06e48ed8492ecec1a07f18064a4672bfae6e9cf19c03d136f8717430a32aa46ec711eae328a7ad4e6335d790edea447a1341f8ffe00a92b6a533eb850b90752d9a6a69267c0b4d468b65ae1a3c462f0cb50e9aaff89deefc78f982568e35b67fa20fa3a96712724e9d9f29f236b8f29857b21afb78379652e128b6ba12d3f9f083198384c2645f79b044eeef46cd"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffd1}}]}, @TCA_BASIC_EMATCHES={0xa0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x5}, {0x1, 0x2, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x1fc}, {{0x1, 0x1, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x70, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x1d5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}, @TCA_BASIC_ACT={0x26c, 0x3, [@m_skbedit={0x130, 0x15, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xb}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xa}}]}, {0xd3, 0x6, "9daac4e6e7b092c096ddceab5c1e10a4fd3d5a25ca7c82ec3425731744d8120eeb52c7f7d06afffab7d46a5e6d09adf4e5e1657cc910ea404e1ef2b9fccc320b4165d3e39de074b3fdf376b265ad08212b85c0cff9400c46d0145f015a61840e75ad545fd1f6c34fd33e3230a7387cb2e32bb9d0d3ad28995c143dd4e9b3a1ce8d60b5179ddd62d9cf7888af0a94e77cb746a3834b1096e35d59599d9b22ed1c92eca60c66f8ccac250d10afad1ecbe953f234dc2b0ad7bec32011df604619dab53311cc23dac79e7e17ea987d319d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9ae7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x7, 0x36, 0x5, 0x2, 0x4}, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x7}}}}, @m_gact={0xd4, 0x14, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x169d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xffff, 0x20000000, 0x4, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7b9, 0x7, 0x6, 0xfffffffd, 0x3}}]}, {0x69, 0x6, "0ceaa2d51ce29f6c4dddf3e2f85980b8f90d550cfae4f5f1958ecebf8984d7c6842e5d55ca69ecca1ce2d0ecb372717684408618160622adf877125f8283b75de4458b820af46ead95de636f9da59299ebee98d974a7c602e549eb4034ede97e56db019830"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x6}}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x4}]}}]}, 0x3bcc}, 0x1, 0x0, 0x0, 0x44000}, 0x240080d5) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202020202020a0882848b960c121824"], 0x36) 04:19:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x79}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x94}}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=@ctrl_frame=@bar={{}, {0x9}, @broadcast, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x9}}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) open_by_handle_at(r1, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x79}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x94}}, 0x4000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=@ctrl_frame=@bar={{}, {0x9}, @broadcast, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x9}}}, 0x14) (async) [ 630.434359][T19240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.437739][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 630.444395][T19241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.444871][T19240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.453955][T19240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.456079][T19241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000740)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @initial, {0x5, 0x1}}, @ver_80211n={0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x9, @default, 0x200, @void, @val={0x1, 0x6, [{0x18}, {0x16, 0x1}, {0x2, 0x1}, {0x1}, {0x36}, {0x4, 0x1}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x3, 0x80, 0x0, 0x3f, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x1c44}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x2}}, [{0xdd, 0xde, "8919783fea13fc3c88137c49c107030f704f3ffea87ff2e1af3d8cb331827f62dc21d95af3c73fc8497e68cf2a62b0a6cffd5fb33faa1ff00f9dde5ed8b69d7f2e67f143e60825e916212bb0e6bd9a1c858e474534b55b941062709a231b2b1d04edd79f755eea21e30ed5e6289ec59462bc9ff1ba41d4aa7687551311cf5362b55432a942637852965e31aed3b71faa2ebd7f5f4dbed95c574c445b105148ffb1e21a53e153d95160e52056a606838540c3175ef740f5ddf35244cce033ec54338dbdfc164a302f283e1585630ff136196dd0173d3eb95605581bfaef8b"}, {0xdd, 0x18, "beabc7b5ea5b74411d8fbb65cf6772e4050b232ebf0252fd"}, {0xdd, 0xb8, "c5a36ae92873d6aef4692395d84938a9e44ce7239e65cd7c291aa083d6f7f08a04c8b9549f3656890e14143cddf117fd426d9f39024d997ee5a16c98f6a18618219153979a7ca449a9811d6c499db2949f5ed5d8baad4cb37d5930a5c82898f05782e4e83ae26c1ca3b757152c0f29cd76e2bbed44a602eb05a2e7f734158c6b6d6d2bbdb4b7864977d0bf4bd64e09c896119920d3e05cf074c3da1f2ce6b58160105e3fa65c12d0143b9f94ec951061c08dc80d1f102da9"}, {0xdd, 0x1a, "9052b050ff687513fdd351c81f12720a5d6f614d39da0900ecb2"}, {0xdd, 0x47, "050ba082f617840ffd217282ad8bcc9f16984dbc1e59b89deec8689f5c1b79fb09321f1aa236ad98c7dd8910ecbd81cc77c1bb17b9a4f546764b63f132a6f4766d253ed9ddee85"}, {0xdd, 0xce, "01d8a0db6eb27ce56bcb4bc37a8008b7a806ff165a2833629ac1231e5035cc882fe61aa1b5b95189310b20000298bf9ea38181f5ecc0373e88eb4d074e77fb13295ef132ec36c67a96b9b844725af85b9155387ae1149c95990753b8c35b50f544980e1e00f6b2456b30769ce5b7cd1e14faba146bc5f497c1cfe8b4ade27e3390c787c52443f99aacf04157969c3ffb2de3ceeda2468570d0aff75d30337debaacdfbf7b0a2086f0dc19e2896789e2e0976ba73428261e71d81e5c5755f092e6bb641e5ca47b97d5e37e028c658"}, {0xdd, 0x94, "a13f2cea1a5deff4a40862b5c8ee36c71981776e5b4ee2838000c38c539f4a63c9d4031c780c6c9eae6afe70d67962a0977ff0a30bc19e546618f373e874d7e61b4571f3abf0363c712466be6a0cdec020c4abde0f138ed7dbdeb3dab50433fb13eb26c4e47953db2ed2094cc73c2a87ccf557a3e0295ad4613485b133c3e336c8c4bfae165167fd6cb0a9cf7722b1af318b8f04"}]}, 0x3d4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000100fedbdf25100000000800030070a24e3f969dd53f0a949d8a1d96aa2768245c72fe52fcff55fd84e03a19c47656b744e72aae20f4472c73d53050c3f5c8b247371b9c222eeb17c90e10b8374bdf", @ANYRES32=r4, @ANYBLOB="0c0099000100000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x4b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 630.493617][T19249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.502665][T19249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.514294][T19249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.556608][T19255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.569392][ T39] audit: type=1804 audit(1688357968.524:387): pid=19243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1171/bus" dev="sda1" ino=1978 res=1 errno=0 [ 630.613293][T19252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.669092][T19255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:28 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000400)={'veth1_virt_wifi\x00', @ifru_mtu=0x80000000}) (async) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async, rerun: 64) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000000)=0x5) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xb1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=@deltfilter={0x3bcc, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0xffff, 0x1}, {0xb, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @filter_kind_options=@f_bpf={{0x8}, {0x326c, 0x2, [@TCA_BPF_ACT={0x3260, 0x1, [@m_pedit={0x2f70, 0x1e, 0x0, 0x0, {{0xa}, {0x2e58, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xfc85, 0x8000, 0x3, 0x6, 0x80000000}, 0x5, 0x9, [{0x8001, 0x10000, 0xff, 0x7, 0xcb, 0x7ff}, {0x0, 0x200, 0x0, 0x3, 0x2, 0x1ff}, {0x7, 0x100, 0xffffffff, 0x8, 0xbcb1, 0x34749126}]}, [{0xd8, 0x10000, 0x7, 0x0, 0xba, 0x2b0}, {0x3, 0x4, 0xff, 0x2, 0xfff, 0x1}, {0x9, 0x4d22, 0x9, 0xeda, 0x7000, 0x5}, {0x0, 0x5, 0x0, 0x1}, {0x1, 0xfffffc01, 0x6, 0x7f, 0xfff, 0xfffffff7}, {0x1, 0x10000, 0x1c6000, 0x5, 0x8000, 0x3ff}, {0x3, 0xc1, 0x4, 0x80000000, 0x9, 0x2d}, {0x5, 0x0, 0xfffffff7, 0x9, 0x9, 0x5}, {0x0, 0x1, 0x800, 0x2, 0x9b48, 0x4}, {0x2, 0x9, 0x7ff, 0x8, 0x8, 0x7}, {0x8, 0x4, 0x7, 0x1, 0x6, 0xe9e}, {0xc5, 0x3, 0x8, 0x7, 0x3, 0x8}, {0x401, 0x7ff, 0x1, 0x10001, 0xfffffff9, 0x8}, {0x4, 0x0, 0x9, 0x1, 0x8, 0x9}, {0x5, 0x80, 0x4, 0x7f, 0x7f, 0x8001}, {0x10001, 0xfffff219, 0x3, 0x40, 0x40, 0x7}, {0x3, 0x100, 0x7f, 0x8, 0x101, 0x9194}, {0x4, 0x61be, 0x7fffffff, 0x10001, 0xff, 0x7f}, {0x7fffffff, 0x4, 0x0, 0x2de7, 0xffffffb2, 0x8}, {0x1, 0x5, 0x7c000, 0x4, 0x7, 0x8}, {0x5, 0x4504, 0x1, 0x10000, 0x800, 0x185b}, {0x2, 0xd3d, 0x9, 0x101, 0x6}, {0x1, 0x0, 0x2, 0x0, 0x8, 0x10000}, {0x4, 0x6, 0x6, 0x0, 0x0, 0x8000}, {0x9, 0x0, 0xb84d, 0x9ed, 0x9}, {0x5, 0x1, 0x7305, 0x10001, 0x0, 0x7}, {0x0, 0x9, 0xc0000, 0x0, 0x1, 0x10000}, {0x8, 0xfffffffe, 0x1, 0x1f, 0x7, 0x4}, {0x7, 0x80000001, 0xffff8001, 0xaf2, 0x8000, 0x7}, {0x9, 0x0, 0x1, 0x0, 0x5, 0x1ff}, {0xfffffff9, 0x2, 0x5, 0x16d1f983, 0x8000, 0x9}, {0x100, 0x0, 0x8, 0x7, 0xfffffff8, 0x7}, {0x1, 0xfffffff8, 0x9, 0x8, 0x1a, 0x7c}, {0x7a, 0x2, 0x9, 0x3f, 0x3, 0x1ff}, {0x8da3, 0x3f, 0xf6, 0x5, 0x7, 0xfffffffd}, {0x26d, 0x2, 0x7f4c, 0x9, 0x4, 0x4}, {0xfffffffc, 0x401, 0x9, 0xbe38, 0x7fffffff, 0x1}, {0x5, 0x6, 0x8, 0x4, 0x6, 0x2000000}, {0x20, 0x2, 0x10000, 0x0, 0x1}, {0x40, 0x2, 0x1, 0x80000000, 0x7fff, 0x20}, {0x7fff, 0x48000000, 0x20, 0x1, 0x7, 0x2}, {0x5, 0x0, 0x12, 0x100, 0x3, 0x1}, {0x2, 0x10000, 0xd0, 0x81, 0x800, 0xc721}, {0x1, 0x6, 0x8, 0x6, 0xd1b}, {0x284, 0x100, 0x1, 0x8c, 0x80, 0x80000000}, {0x40000000, 0x1000, 0xff, 0x80000000, 0x5, 0x15df}, {0x65, 0x6, 0x1f, 0x80, 0x7, 0x3}, {0x3f, 0x8, 0xfffffff7, 0xd90, 0xfffffff8, 0x9}, {0x6, 0x3ff, 0x4, 0x8001, 0x2}, {0x1, 0x0, 0xe1, 0x1ff, 0x6, 0xfff}, {0x4, 0x5, 0x40, 0x7, 0x1f, 0x10000}, {0x81, 0x4, 0x18, 0x80000001, 0xada, 0x5}, {0x6, 0x0, 0x17aa, 0x0, 0x8, 0x7f}, {0x200, 0x45, 0x0, 0x2, 0x5, 0x8000}, {0x5, 0x1d, 0xe8, 0x1, 0xd7, 0x9}, {0x7fffffff, 0x4, 0x2, 0x5, 0x10000, 0x101}, {0x7fffffff, 0x5, 0x4, 0x3, 0x18, 0x4}, {0x200, 0x9, 0x5452, 0x0, 0x1, 0x6}, {0x9, 0x6, 0x6, 0x0, 0xfffffff7, 0x8}, {0x100, 0x8, 0x2, 0x80000000, 0x3, 0x18}, {0x382, 0x1, 0xff, 0x793c000, 0x7, 0x548}, {0x8c, 0xff, 0xffff, 0xfa0f, 0x1, 0x4}, {0x1000, 0xffff8001, 0x6, 0x318, 0x2, 0x10001}, {0x0, 0x8d, 0x8, 0x7, 0x9, 0x80}, {0x7, 0x6, 0x7, 0x4dd4, 0x7, 0x7}, {0x9, 0xc0000000, 0x1, 0x8001, 0x8, 0x1000}, {0x0, 0x40, 0x4, 0x5, 0x80, 0x7fff}, {0x80000001, 0x4, 0x9, 0x7fffffff, 0x86, 0x7}, {0x8, 0x100, 0xff, 0x1, 0x80, 0x1000}, {0x5, 0x5, 0x1b7, 0x841, 0x2, 0xfff}, {0x0, 0x6, 0x3, 0x5, 0xffffff80, 0x5}, {0xffff7fff, 0x2, 0x10000, 0x0, 0x1, 0xf4f}, {0x4, 0xffff, 0x4, 0x2, 0x80000001, 0x7}, {0x188, 0xfffff800, 0x6, 0x10001, 0xcd0}, {0x0, 0x1, 0x9, 0x9, 0xfffffffc, 0x3f}, {0xfffffd80, 0x3, 0x3, 0x8, 0x10000, 0x9}, {0x2, 0x80, 0x3, 0x5, 0x90, 0xfff}, {0x9, 0x20, 0x7, 0x0, 0x3, 0x7}, {0x5, 0x8, 0xed, 0x33, 0x7cf73b6d, 0x9f0}, {0x7a, 0x9, 0x2830, 0x0, 0x80000000, 0x50000}, {0x35, 0x2, 0x1100, 0xffffffff, 0x7fff}, {0x98, 0xffffffff, 0x7f, 0x0, 0x7fffffff, 0x4257ea9d}, {0x5, 0x10000, 0x10001, 0x2, 0x2, 0x6}, {0x4, 0x3, 0x80, 0x2, 0x40, 0x800}, {0x2e, 0x1f, 0x1f1, 0x2d, 0x2f0c, 0x4}, {0x2c5c, 0x3, 0x1, 0x5, 0x8000, 0x7}, {0x7f, 0xfffffff7, 0x5, 0x9, 0x4, 0x66}, {0x81, 0x7, 0x2, 0x81, 0x200, 0x1}, {0x20, 0x1a, 0x10000, 0x6, 0x496, 0x1000}, {0x3f, 0x101, 0xffffffff, 0x10000, 0x80ab, 0x6836ef29}, {0x1, 0xffffffff, 0x7, 0x0, 0x1, 0x3db}, {0x1ff, 0x1f, 0x8, 0x80000001, 0xffffffff, 0x3}, {0x9, 0x6, 0x2, 0x3ff}, {0x7, 0x6, 0x3474, 0x5, 0x40, 0x9}, {0x5, 0x7, 0x100, 0x3, 0x7f, 0x5}, {0x3000000, 0x1f, 0x2, 0x8, 0x9f70, 0x9}, {0x2, 0x1, 0x6, 0x5, 0xdaf5, 0xff51}, {0x800, 0x9, 0x4, 0x101, 0x7, 0x9}, {0x80, 0x7, 0xffffffff, 0x1000, 0x3a, 0xfffffffb}, {0x8001, 0xfff, 0x3, 0x9, 0x21, 0xa83}, {0x80, 0x9, 0x5, 0x3, 0x2, 0x6}, {0x719c, 0xc627, 0x4, 0x8, 0x0, 0x2}, {0x7, 0x8000, 0x742, 0x8, 0x5, 0xfdb}, {0x80, 0x9, 0x6, 0x9, 0x6, 0xfffffffe}, {0x7fffffff, 0x32, 0x400, 0x400, 0x7ff, 0x8}, {0x6, 0x3c8e, 0x1ff, 0x16d5, 0xffffffff, 0xbdb}, {0x3, 0x1, 0x7, 0x1f, 0x8, 0x7}, {0x36d1, 0x0, 0xe2db, 0x2, 0x0, 0x6}, {0x7, 0x6, 0x8, 0x1, 0xfffffffe, 0x9}, {0x3, 0x1, 0x3, 0xfffffffc, 0x1000, 0x5}, {0x3f, 0x5, 0x5, 0x40, 0x5, 0x6f}, {0x1046, 0x8, 0x2466, 0x8001, 0x9, 0x9c}, {0x4, 0xd8, 0xe, 0x40, 0x4, 0x9b9}, {0xff, 0x3, 0xbbda, 0x5, 0x80, 0x7}, {0x6, 0x0, 0x5, 0xc294, 0xffffffe1, 0x5}, {0x6, 0x8, 0xffff, 0xa, 0x7, 0x2}, {0x8, 0x3f, 0x2, 0x3, 0x0, 0x8}, {0x1000, 0xbba, 0x1, 0x2, 0x5, 0x3}, {0x0, 0x408, 0x5, 0x5, 0x3, 0x8}, {0x16, 0x5dfb, 0x0, 0x2, 0x3, 0x81}, {0x7f, 0x2, 0x2, 0x8, 0x2, 0x5}, {0x71e, 0x3, 0x4, 0x4}, {0xffff, 0x37f, 0x6, 0xfff, 0x8001, 0x40}, {0x8, 0x8, 0x2, 0x3d, 0xcf, 0x2}, {0x32b, 0xd53b, 0x9, 0x2, 0xffff, 0x1}, {0xd99, 0x3, 0x3, 0x8, 0x2}, {0x6, 0x6, 0x7301b55d, 0x4, 0xfffffff7, 0x3}, {0x8ad7, 0xff, 0xfffffe00, 0x100, 0xc0e7, 0x800}], [{0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x2}, {}, {0x3}, {0x2}, {0x3}, {0x3}, {0x4}, {0x3}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0xd6bc7bf1db8a15e2}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0xe97769f022a852c2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x4ef9aac96bbde2a0}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x6, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0xf5c1fa676eff650}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x7c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x1, 0x0, 0x4, 0x1800, 0x5}, 0x20, 0xff, [{0x5, 0x4, 0x7, 0x1, 0x3, 0x2}, {0x0, 0x1f, 0x0, 0x4, 0x4, 0x5}, {0x1, 0x6, 0x200, 0xd9a6, 0x1, 0x7b3b}, {0x1, 0x1, 0x3, 0x80000001, 0x3, 0x2d7}, {0x3f, 0xfffff801, 0xc80e, 0x6, 0x1, 0x8}, {0x5, 0x401, 0x6c, 0xfffffffe, 0x8000, 0xbb}, {0x7ff, 0xff, 0x80000000, 0x4, 0xfff, 0x6}, {0x2, 0x4, 0x4, 0x800, 0x80, 0x80}, {0x2, 0x7fffffff, 0x34, 0x0, 0x1c00000, 0xfffffffc}, {0x7fff, 0x7fffffff, 0x3ff, 0x9, 0x40, 0xd9cf}]}, [{0x3f, 0x348, 0x5, 0x782ceb35, 0x1, 0x1}, {0x0, 0xffff8000, 0xdb, 0xfffff000, 0x6, 0x6991}, {0x0, 0x7, 0x5, 0x92, 0x8001, 0x8}, {0x5, 0xdd22, 0x7fffffff, 0x6, 0x2f, 0x7ff}, {0x5, 0x4, 0x5, 0x39f, 0x5}, {0x7, 0x27f, 0x1, 0x0, 0xca6d, 0x5}, {0x2, 0x7, 0x0, 0xfffffffc, 0x100, 0x8}, {0x5, 0x433e, 0x3, 0x1, 0x20b, 0x4}, {0x2, 0x1, 0xfffffffe, 0xfffffffa, 0x100, 0x800}, {0x0, 0x3ff, 0x81, 0x1ff, 0x0, 0xfc}, {0x6, 0x91, 0x5, 0x7, 0x7fff, 0x7ff}, {0x6, 0x0, 0x5, 0xa38, 0x6, 0x4}, {0x401, 0xffff, 0x2, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x7, 0x800, 0x0, 0xe83f}, {0x0, 0x3ff, 0xfffffffa, 0xfffff800, 0x1, 0x80000001}, {0x3, 0x1800000, 0x917e, 0x5, 0x3, 0x80}, {0x8, 0x0, 0x1f5, 0x8, 0x828}, {0x1, 0x1, 0x6, 0xfff, 0x5, 0x40000}, {0x2, 0x1, 0x4, 0x0, 0x5, 0x8000}, {0x7f, 0x4, 0x7fffffff, 0xffff, 0xfffffffc}, {0xffffffff, 0xfffffff9, 0x1, 0x1, 0x7f, 0x4}, {0x10001, 0x4, 0x5, 0x200, 0xff, 0x2}, {0x3248, 0x2, 0xd8, 0x6, 0x7}, {0x89, 0x40e, 0x8, 0x37, 0x7ff, 0x1}, {0xe7e, 0x8000, 0x5, 0x3, 0x168c, 0x7}, {0x0, 0x2, 0x6, 0xfffffffa, 0x80000000, 0x401}, {0x7, 0xd2, 0x7, 0x7fffffff, 0x8000, 0x8000}, {0x3f, 0x3, 0x0, 0x100, 0x1, 0xffffffff}, {0x389a, 0xffffffe2, 0x4, 0x80, 0x1a, 0x3f}, {0x6a8000, 0x5, 0x1, 0x0, 0xcde}, {0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffff9}, {0x7ff, 0x0, 0x401, 0x3, 0x10001, 0x40}, {0x4, 0xfff, 0x7fff, 0x5, 0x3f, 0x1}, {0x5, 0x7, 0x8001, 0x2, 0x1, 0xffffffff}, {0x9c, 0x0, 0x10, 0x3f, 0x7, 0xffff}, {0x7, 0x1, 0x0, 0x8, 0x1, 0x401}, {0xe87, 0x4, 0x101, 0x7ff, 0x1, 0x910}, {0x7, 0x7, 0x9, 0x4, 0x400, 0xffffffff}, {0xf40e, 0x1, 0x7fffffff, 0x20, 0x80, 0x2}, {0x800000, 0x6, 0x5dd7447b, 0x0, 0x7b, 0x5}, {0x3e, 0x40000000, 0x84, 0x8, 0x1f, 0x4}, {0x8, 0x3, 0x8, 0x0, 0x2, 0x1}, {0x2, 0xab, 0x1, 0x4, 0x9, 0x3f}, {0x7fff, 0x80000001, 0x3, 0x17, 0x9, 0xfffff001}, {0x0, 0x6, 0x10000, 0x1f, 0xfffffffd, 0x400}, {0x2, 0x4, 0xffffff80, 0xed, 0xfffffff8, 0x7f}, {0xffffffff, 0x8, 0x3, 0x1a, 0x20, 0x5}, {0x4, 0x1, 0x4, 0x7, 0xae, 0x3f}, {0xffffcd5e, 0x3, 0x6, 0x1f, 0xfff, 0xffffffff}, {0x80, 0x7, 0x5000, 0x8, 0x5, 0x2}, {0x7fff, 0xa573, 0xc22, 0x6, 0x2, 0x5}, {0x8, 0x6, 0x9, 0x1, 0x9f, 0x6}, {0xd23, 0x6, 0x0, 0x1, 0x2, 0x7}, {0x4, 0x0, 0x0, 0x40, 0x9, 0x1ff}, {0x6, 0x8, 0x6, 0x5, 0x9}, {0x0, 0x1, 0x9, 0x101, 0x7bad, 0x10000}, {0xbbc1, 0xfffffff9, 0x2, 0x14, 0x0, 0x7}, {0x0, 0x0, 0xffff7fff, 0x15, 0x2, 0x9}, {0x4, 0x5, 0x7, 0x807c, 0x9, 0x1f}, {0xfffffff9, 0x0, 0x6, 0x316297a3, 0x4, 0x10000}, {0x2, 0x3ff, 0x8000, 0x5, 0x6, 0x2}, {0x6, 0x7, 0x0, 0x1, 0x7, 0xb2}, {0x5, 0x3ff, 0x7, 0x43ee47cd, 0x100, 0x7f}, {0x4a, 0x9, 0xf6b, 0x7f, 0x400}, {0x6, 0x3ff, 0x2, 0x7ff, 0xb3, 0x9}, {0x7, 0x5, 0x2, 0x8001, 0xfffffe00, 0x29}, {0x2, 0x6, 0xebb, 0x9, 0x8, 0x3}, {0x800, 0x3, 0x1, 0x8000, 0x80000000, 0x8a8}, {0x1f, 0x200, 0x0, 0x5, 0x7, 0x7}, {0x401, 0x227, 0x3, 0x9, 0x5, 0x1f}, {0x3ac00000, 0x5, 0xa5, 0x3ff, 0xffff, 0x9}, {0x9, 0x3, 0xffffffff, 0x0, 0x1, 0xfffffff9}, {0x194, 0x7, 0x8, 0x7fffffff, 0x1, 0xffffffff}, {0x8afe, 0x3f, 0xe7, 0x0, 0xd62, 0x100}, {0x20, 0x1, 0x7f, 0xfffffffb, 0x6, 0x20}, {0x9, 0x4, 0x200, 0x3, 0x8, 0x40000000}, {0xff, 0xd306, 0x2, 0x3, 0x6, 0x7}, {0x8001, 0x3, 0x1000, 0x3, 0x33}, {0x0, 0x2, 0x8, 0x1, 0xb56, 0x48d}, {0x3, 0x1, 0x1, 0x5, 0x81, 0x5}, {0x3, 0x1000, 0x1ff, 0x6b2, 0x9, 0x1}, {0x9, 0x2, 0x7fff, 0x2, 0x0, 0x7}, {0x7, 0x5, 0x3f, 0x0, 0x101, 0x3ff}, {0x2, 0xffffffff, 0x1, 0x2, 0x8, 0x3}, {0xfffffd0b, 0xe00000, 0x4cf, 0x3, 0x8, 0x3}, {0xffffffc0, 0x100, 0x7, 0x8, 0x0, 0x5}, {0x400, 0x6, 0xc5, 0xfff, 0xfffff001, 0x1}, {0x4, 0x8, 0x3, 0x8000, 0x4, 0x6}, {0xff, 0x0, 0x1, 0x4, 0xffffffff, 0x101}, {0x3ff, 0x904, 0x80, 0x8001, 0x4, 0x5}, {0x7, 0xffffffc0, 0x80000001, 0x7ff, 0x81, 0x8001}, {0x9, 0x9, 0x6, 0x0, 0x4, 0xf74d}, {0x800, 0xfff, 0x3, 0xa293, 0x5, 0x3f}, {0x3ff, 0x2, 0xfffffffb, 0x6, 0x7ff, 0x1ff}, {0x100, 0xfffffffc, 0x60, 0xfffffffe, 0x10001, 0x4}, {0x2, 0x3, 0x3f, 0x200, 0x1, 0x3ac9}, {0xdea, 0x0, 0x26f101b6, 0x40, 0x2, 0x8000}, {0x99f, 0x1f, 0x8, 0x1, 0x7f, 0x4}, {0x2, 0x1000, 0x1, 0x5, 0x3, 0xffffffff}, {0x254, 0x9, 0x1, 0xfffffff7, 0x1, 0x400}, {0x0, 0x17, 0x7, 0x1, 0x80000001, 0x2}, {0x4f, 0x0, 0x4, 0x8f6, 0xfffffffc, 0xdf}, {0x87c, 0x5, 0x7, 0x0, 0x3, 0x2dd}, {0x80, 0x3, 0x400, 0x8c21, 0xffff0000, 0xac}, {0x7, 0x5, 0x5, 0x2c5, 0x8, 0x9}, {0xa54, 0xfff, 0x1d, 0x100, 0x3, 0x3}, {0xffff, 0x2, 0x6e, 0xfffffffe, 0x1, 0xec4}, {0x9, 0x6, 0x9, 0x8, 0xfffffff7, 0x10001}, {0xffffffff, 0x3f, 0x0, 0x1, 0x4, 0x9}, {0xa0, 0x5, 0x8, 0x356, 0x81, 0xffffffff}, {0x3, 0x1, 0xfffffff8, 0x3, 0xfdd, 0xaf8}, {0x6, 0x7, 0x80000001, 0x3, 0x9, 0x1ff}, {0x0, 0x5, 0x3ff, 0xf2eb, 0x3, 0x2}, {0x101, 0xd05, 0x1, 0x7, 0x7fff, 0x8}, {0x0, 0x0, 0x26b, 0xfffffff9, 0x40000, 0x582c}, {0x0, 0xd9, 0x3, 0x6, 0x2445, 0x7ff}, {0x4, 0x5, 0x4, 0x8e, 0x7fffffff, 0x2b4}, {0x959, 0x3, 0x1, 0x50, 0x4, 0x8}, {0xffffffe1, 0x9, 0x7, 0x6, 0x91f, 0x5}, {0xf5, 0xe0ac, 0x9, 0x100, 0xfffffff7, 0x2}, {0x4, 0xff, 0x7ff, 0x7cfc, 0x1, 0x7}, {0x5, 0x7, 0x100, 0x3f, 0x9, 0x3f}, {0x6, 0x40, 0x8, 0x3, 0x3, 0x8}, {0x81, 0x9, 0x8, 0x2, 0x9, 0x80000000}, {0x800, 0x3, 0x5, 0x1, 0x2, 0x7f}, {0x5, 0x7, 0xfff, 0xfffffff8, 0x9, 0x2}, {0xffffffe1, 0x3, 0x2, 0x1, 0x0, 0x15c2000}, {0x800, 0x7ff, 0x4, 0xd8f, 0xfffffffe}], [{0x0, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1fa9bf5b4f97ca3e}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0xdb93993d53d6dfc}, {0x5, 0x1}, {0x0, 0x1}, {0x5d2a5ff5e3ec06c0}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x3}, {}, {0x4}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xff, 0x8000, 0x6, 0x5, 0xfff}, 0x80, 0x2, [{0x49, 0x3, 0x5, 0xfffffbff, 0xf1f, 0x8000}, {0x5, 0x1f, 0x8001, 0x101, 0x9, 0x38f}, {0x2, 0x3, 0x6, 0x101, 0xffffff7f, 0xfffffe01}, {0x1000, 0x5, 0x6, 0x37, 0x3, 0x3ff}, {0x1, 0x3, 0x100, 0xfd7b, 0x100, 0x200}, {0x33, 0xfffffffa, 0x7, 0x80000001, 0x80, 0xfffffc01}, {0x9, 0x4, 0x2, 0xfffffff7, 0x101, 0xffffff01}, {0x401, 0x0, 0x1, 0x4, 0x9, 0x8}]}, [{0xff, 0x2, 0x9, 0x20, 0x8, 0x100}, {0x5, 0x4, 0x8001, 0x7, 0x2, 0x1}, {0x2, 0x1ff, 0x101, 0x5, 0x1, 0x4}, {0x0, 0x1, 0x6, 0x1, 0xfffff801}, {0x80000001, 0x3, 0x0, 0xd273, 0x5, 0x1}, {0x7, 0xffffffff, 0x1, 0x100, 0xffffffff, 0x3f}, {0x200, 0x5, 0x7fff, 0xfffffffe, 0x8000, 0x51e}, {0xe9, 0x4, 0x2, 0x0, 0x1, 0xffff64f2}, {0x1, 0x7, 0xfffffff9, 0xaa, 0x8374, 0x8}, {0x6, 0xfff, 0xff, 0x1000, 0x0, 0x2}, {0x8000, 0xff, 0x80000001, 0x8, 0x9, 0x1ff}, {0xe16, 0xf5, 0x400, 0x1ff, 0x6, 0xff}, {0x101, 0xe39, 0x8000, 0x35dc, 0x2, 0x7}, {0x8000, 0x1, 0x9, 0x5, 0x1, 0xb333}, {0x3, 0x3, 0x300000, 0x1f, 0x5f8, 0xff}, {0x10001, 0x2, 0x3ff, 0x4, 0x8, 0x673d}, {0x20, 0x1, 0x8, 0x400, 0x12, 0x5}, {0x7fff, 0x6, 0x1000, 0x3, 0x1, 0x2}, {0x3, 0x894, 0xff, 0x0, 0xfffffffd, 0x9}, {0x101, 0x2, 0x9, 0x4, 0x2, 0x9a}, {0x7, 0x2, 0xfffffffa, 0x1, 0x2, 0xecf}, {0x7fff, 0x400, 0x100, 0x4, 0xff, 0x18}, {0x1, 0x8, 0x7fff, 0x2, 0x800, 0x6f253f2b}, {0x1, 0x3, 0x200, 0x9, 0x10000, 0x6}, {0x40, 0x2185bd1d, 0x18, 0x1, 0x3, 0x400d}, {0x4, 0x2, 0x1, 0x6567cedd, 0x2, 0x100}, {0x9, 0x2, 0x9, 0x3, 0x3a, 0x5}, {0x1, 0x7, 0xff, 0x0, 0x81, 0xe0000000}, {0x40, 0x3f, 0x2, 0xebc2, 0x7, 0x7}, {0x5, 0xfffffffe, 0x80000001, 0x7fff, 0xea, 0xde}, {0x80000001, 0x2, 0xffff, 0x5, 0xbf45, 0x3f}, {0x8000, 0x4, 0x81, 0x6, 0xfffff800, 0xffff}, {0xfffffe01, 0x5966, 0x9, 0x8, 0xfcca, 0xc6a1}, {0x2, 0x0, 0x7, 0x7}, {0x59ce, 0x9, 0x9, 0x40, 0xbb60, 0x10000}, {0x5, 0x4, 0xffffffff, 0x3f, 0x0, 0x10000}, {0x800, 0x1, 0x81, 0x1, 0x0, 0x8}, {0x9d, 0x20, 0x81, 0x3f, 0x80, 0x4}, {0xff, 0x1, 0x6, 0x3, 0xffffffff, 0x1000}, {0x36f, 0x5, 0x6, 0x40, 0xfffffffa, 0x6802}, {0x0, 0x9, 0x1000, 0x331, 0x9, 0x515}, {0x7fff, 0x3, 0xffff0000, 0x800, 0xfffffffe, 0x7e8}, {0x7fff, 0x9, 0x80000000, 0x7, 0x9, 0x800}, {0x6, 0x7, 0x3, 0x9, 0x9, 0x2b2}, {0x2, 0x3, 0x4, 0x6, 0x0, 0x2}, {0x5, 0x3, 0x1000, 0x3, 0x1, 0x40}, {0x7, 0x1, 0x7ff, 0x562, 0x1}, {0x3189, 0xffffffc7, 0x4, 0x1, 0x3, 0x6}, {0x637e, 0x8, 0x0, 0x14, 0x7ff, 0x1f}, {0x7, 0x0, 0x1, 0x4, 0x4, 0x4}, {0xfff, 0xffffffff, 0x79, 0x4, 0x9, 0x5}, {0x3, 0x80000001, 0x2, 0xe980, 0x3, 0x4}, {0x3c2, 0x400, 0x2b, 0xfff, 0x7ff, 0xa0}, {0xfffffff8, 0x7, 0x9, 0x8, 0x475, 0x4}, {0x7d0, 0x5, 0x0, 0x8, 0x9, 0x400}, {0x7, 0x0, 0x9, 0x0, 0x80000001, 0x3f}, {0x2, 0x6, 0x8, 0x0, 0x8, 0xffffffff}, {0x7, 0x14, 0x10000, 0x2, 0x0, 0x4}, {0x3, 0x8, 0x8, 0x6, 0xfffffffd, 0x4}, {0x9, 0x9, 0x1, 0x200, 0x200, 0x796}, {0x3, 0x734c, 0x2, 0x100, 0x5, 0x1}, {0x2638, 0x9, 0x0, 0x9, 0x3, 0x6}, {0x80, 0xfff, 0x8, 0x0, 0xffffffff, 0x2}, {0x9, 0x8001, 0x8001, 0x10001, 0x7f, 0x9}, {0x3ff, 0xe62, 0x25000000, 0xd4, 0x1, 0x3}, {0x5, 0x6, 0x3, 0xfd, 0x0, 0x1a28}, {0x1, 0x1f, 0x1ff, 0x7f, 0x7f, 0x2}, {0xc03, 0x71, 0xfffffff7, 0xffff, 0x2, 0x9f0f}, {0xffffffff, 0x400000, 0x3, 0xe3, 0x6, 0x1}, {0x7ff, 0x0, 0xbcaf, 0x5b0, 0x81, 0x4}, {0x3, 0x6, 0x5, 0x70, 0x4, 0x9}, {0x7, 0xaa, 0xffffffff, 0xc0000000, 0x8000, 0x4}, {0x5, 0x6, 0x9, 0x5, 0xed, 0x200}, {0x1ff, 0x7, 0x8b33, 0x6, 0xff, 0x99}, {0x7, 0x1, 0x4, 0x1ff, 0x4, 0x2}, {0x4, 0x0, 0x2c44, 0x4c54, 0x5}, {0x1, 0x9, 0x7, 0x0, 0x1000, 0x1000}, {0x4, 0x8, 0x4, 0x11, 0x40000000, 0x5a96}, {0xfffffff8, 0xfffffbff, 0x1800, 0x8000, 0x3, 0x9}, {0x1, 0x2582, 0xffffffff, 0xffff, 0x7fff, 0x800}, {0x2, 0x7fff, 0x81, 0x4, 0x80000000, 0x6}, {0x5, 0x1, 0x0, 0x401, 0x4, 0x6}, {0x1, 0x6, 0x1, 0x6, 0x7f, 0x81}, {0x8001, 0x1b8b, 0x0, 0x59, 0x9, 0xff}, {0x80, 0x10001, 0x7f, 0x1197995c, 0xfffffffe, 0xfff}, {0x9, 0x8000, 0x2, 0x10000, 0x7ff, 0x401}, {0x7fff, 0xcb, 0x0, 0x1a, 0x1, 0xe}, {0xcac, 0x846, 0xf356, 0x3ff, 0x3, 0x8000}, {0x2, 0x1, 0x25f, 0x401, 0x2}, {0x2b, 0x1, 0x1000, 0x9, 0x1f, 0x3f}, {0x400, 0x8, 0x8000, 0x1, 0xbd, 0xffffff0b}, {0x6, 0x3, 0x1ff, 0xff, 0x0, 0x5d4}, {0x8, 0x3, 0x3f, 0x8, 0x40, 0x21}, {0x800, 0x6c, 0x5, 0x800, 0x6, 0xffffffc1}, {0x2, 0xd10, 0x6383, 0x2, 0x8, 0x7}, {0x0, 0x6, 0x8, 0x1f, 0x8, 0xf7}, {0x80, 0x8, 0x2, 0xfff, 0xbb47, 0x6}, {0xd4, 0x400, 0x7, 0x3, 0x8000, 0x7fffffff}, {0x80000000, 0x0, 0x0, 0x4, 0x6, 0x8}, {0x0, 0x1, 0x1, 0x7, 0x1f, 0xff}, {0x1, 0x7, 0x0, 0x50, 0x8001, 0x101}, {0xe2a, 0x4b, 0x5de, 0x8, 0x6, 0x3f}, {0x8e, 0xc00000, 0xb6, 0x4000000, 0x2, 0x1}, {0x6, 0x5, 0xa7d, 0x80000001, 0x9, 0x4}, {0x80000000, 0x7, 0x2a, 0x3, 0x7ff}, {0x10001, 0xb69, 0x0, 0x7, 0x7, 0x8000}, {0xffff, 0x0, 0x803, 0x5, 0x7, 0x1}, {0x3, 0x4, 0x7, 0x4, 0x8001, 0xc38f}, {0xfffffffc, 0x5, 0x6, 0x1, 0x93da, 0x3ff}, {0x8, 0x80, 0xe11, 0x8, 0x0, 0x9}, {0xfffffff9, 0x7, 0x3, 0x8000, 0x5889, 0x9}, {0xfff, 0x7fff, 0x0, 0x6, 0x1, 0xfffe00}, {0x5, 0x4c1f, 0x3, 0xffffffff, 0x48, 0x8}, {0x0, 0x907, 0xfff, 0x1c, 0x8, 0x8}, {0x5, 0x0, 0x1, 0x9d, 0x1af2, 0x7fffffff}, {0x1, 0x1, 0x2, 0x7, 0x7, 0x7}, {0xffffffff, 0x8, 0x0, 0x0, 0x2, 0x3}, {0x1, 0x9, 0x6, 0x7, 0x2, 0x8}, {0x0, 0x4, 0x80000001, 0x5, 0x6}, {0x9, 0x401, 0x80000001, 0x8, 0x5}, {0x4c, 0xe8, 0x7, 0x7, 0x9}, {0x401, 0x0, 0x10001, 0xdd, 0xffffffff, 0x3}, {0x0, 0x59d, 0x4, 0x9e3, 0x7ff, 0x4}, {0x2, 0x9, 0x9, 0x7fff, 0x4, 0x8}, {0x6, 0x2, 0x8001, 0xff, 0x80, 0x2}, {0x8001, 0x2, 0x7, 0x9, 0x40, 0x200}, {0x3ff, 0x3f, 0xfffffff9, 0x80000000, 0x2, 0x4f}, {0x6, 0x2, 0x2, 0x5aaf, 0x8, 0x7}], [{0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x6615120342f2de14}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x2}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x3}, {0x4, 0x2575b3b2ed807c92}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x140, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0xef, 0x6, "46691ab7484bf9389fbe8830b0912621f608024a1483f3023f51235ad1bc69a8d9a2470a5262251eac08e3d42647efd953fd59a8cc21a25d5666b1db266e890a342a49a3502f72315c290bf7e079fba892028a5d6f102f11ae8a45b61abec64307b27005c179e64be19deecd7b5d17fefe6f9aa49b01e40262d4f29484ad7049c078aa4f40ec27d2612bd146bba51f4254bf610bb0c5ccb77882ccd599bf0d44a8515f82e3abd0bb28c8ff5a007d707175829a1c273119d8b27816cf18872d7e69b9776a5d813f5e080312b50df6a4e1e5f260ba1b4f19d2072461ba8fa4086595a0ce90e46d2b82657658"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x11c, 0xa, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0xd7, 0x6, "a097c9affaa2b5bc9c55196840173e2974e0f303e482062a97fda667ec96a5bb216ea5c05bafdddde15844248eba7ce008c51f40ce2c64e9429c28a39110710480ef8220ea64212fb3866dbaf9353154aedb8c38a1861255f7e7fa49c546a854560e7440337c4a9240229b83c3b7f2c81bd1c39e20df0f9f7144c8d53a3b732c4ad393d892938b163d5e0e807f3963464e66dcf5bd37245df20530823181141ca6f2ca73b3ef402b6a7579ddea7ea6d9ec6802db7de6900fc89d3d6f67486eac9b7bdbe81dada8f729ebc3286c56ca7d22aabd"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xb4, 0x11, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0x7, 0x4, 0x1000, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x800}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x45, 0x6, "e040250aa7ac343505c22870ac5e98d57033d0b2888158179063ef7cee692d92633db39a5a1e5c210d310f214dfc8a7feff801b633fc4398990c79d6f7db4cdbfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x11c, 0x14, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x401, 0xfff, 0x20000002, 0x6, 0xbe0}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0xcf, 0x6, "716466a88b72f7b870b5a34b05f985aee5da901dd68059a53c82cf95ebded6b01cc4ee45b3d53611d2e513b14fe1f4effd67a083cc51791640843621c12ea65eb8253f093b2b9894d03ab79b7c53bd5eab16bd3489f3db84fc49fe47a6211ab0a8d3312f27092695f524aa591f6a99eb9bb019b70cedbf6d52c5846c15eff1212d41b3c76e41d1d4338ebc4de01ebc5f795e2a4e721a51bd769f1b8f61fd82a6b51c2efcbb3b2d5d659546112c31ff3dd1f7a306a314130eb910bd0bb032496d515fd196fe32573528180a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @filter_kind_options=@f_basic={{0xa}, {0x8f8, 0x2, [@TCA_BASIC_EMATCHES={0xf8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xd990, 0x8, 0xff}, {0x4, 0x1, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x7ff}, {0x9d, 0x2, 0x400, 0x0, 0xa}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x3}, {0xb9, 0x7, 0x0, "1568097adca5dd"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1f, 0x8, 0x2}, {0x3, 0x0, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x6}, {0x1000, 0x80000001, 0x443, 0x8001}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x1, 0x4, 0xff36}, [@TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="6b0880dce7", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="9b", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="6ec08f09", @TCF_META_TYPE_VAR=';:']}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="a141", @TCF_META_TYPE_VAR="025593646ff488bb03", @TCF_META_TYPE_VAR="09b035790c146bb2"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x2}, {0x5, 0x5, 0x7b, 0x0, 0x0, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1f}}]}, @TCA_BASIC_EMATCHES={0x198, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8001, 0x3, 0x3ff}, {0xffff, 0x100, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0xffff, 0x101, 0xfff, 0x7, 0x8}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfffd, 0x8, 0x7}, {0xffffffffffffffff, 0x3, 0x7}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x40}, {0xc3, 0x8, 0x1, "f82207294e4aad62"}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0xb1d}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x720, 0x2, 0x3c8}, {0x3f, 0x9, 0x2, "a4c54321770dfa2679"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0x4, 0x3, 0x5}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_CONTAINER={0xc4, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x7fff}, "40b845552c88b98b87771ed606b082516ccd80c1a832de62120a9e13ccea61e4ac052f10e752a4d08c4bc0007118542ef7457dec1808dd58a8fec3757342922922b8fc989328272f1803ba6076e091268c18fbf0c6f201f7b2a6da90c8e337ce22f2c6b12a0dd1ff7664a7e80578983866b4ad82e3dbd4562ef4f46529d6f844a68a702c2b56dbef12afde055aa02add7a715a39b1f2bf7bdcaeb339504112553135c5a328d13e5dc3045fd789cd7a86a4f88e528a44"}}]}]}, @TCA_BASIC_EMATCHES={0x350, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x344, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0xc000, 0x0, 0xe8e}, "e46e3f0259d33c10c4116c2d5fe7d19e13a69a51a33b925a24cd8178cb68e7b2463785523f31ab4ad0fc3f097a"}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0xfffe, 0x4, 0x400}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b28bf80174d8", @TCF_META_TYPE_VAR="c1", @TCF_META_TYPE_VAR="f2566ef19bcc50549b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x0, 0x2}, {0x20, 0x9}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1ff, 0x8, 0x3}, {0x3, 0x1, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0xd02}, {0x4, 0x1, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xf71}, {0x81, 0x9, 0x8, 0x1, 0x7, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x200, 0x7, 0x8009}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x800}, {0x3f, 0x2, 0x937a, 0x4, 0x0, 0x0, 0x2}}}, @TCF_EM_IPT={0xb4, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9d, 0x5, "5de356711acc5ef99d46159dc04a8f772e8b3b9846088a0a627b3d0a13be9e352b3cff58831e1f10ea5ab360acaea926a72a9570a1fa409d4f465c71f7b20130157d7e3ca9369d7e5cfc92e8179280ea519a625b52e54840bae74dd131de704318c85272ed4472e59e0dc85246a5251d8575ef61f78b4f0072481c0aa150ef82f90c911af786cf6dde74583ef0f33e4e0e38708120d39e3dab"}]}}, @TCF_EM_CONTAINER={0xb4, 0x3, 0x0, 0x0, {{0x75ec, 0x0, 0xe6}, "67767d9bab46db125250425218719f5ec51b6810af48c7d75dffed1fad8c3e0972f78f96f70763c04e2e2af676b03e04811fef57f56b72a5d28d680eaa69b932ba04a40366dd3acb47a2104f39205b16fc5605ad182ebefac8c6ab7d7548257c411b77fc91564b428a6945af486ce562c28b7966638b7e0347b30632076fd81047eb6e7dac36f50cacbd82572a52488114b1bb1bb493e926df0ded5fe4e6f551ffb82467af839b"}}, @TCF_EM_CONTAINER={0x104, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x2}, "20a3f51ba6403d9a4eb8130071e3c1b86dd0376d8ba5e20c07728ee333ba2f23bfe78f41bbd0a737664240b40d6f3516646f6d1aa4c00d130d84a1c36e41d925df7ccea8814066c2a3818109a64e2af640401adf1753bf04c92ac0774919969d558458059be18d9b06e48ed8492ecec1a07f18064a4672bfae6e9cf19c03d136f8717430a32aa46ec711eae328a7ad4e6335d790edea447a1341f8ffe00a92b6a533eb850b90752d9a6a69267c0b4d468b65ae1a3c462f0cb50e9aaff89deefc78f982568e35b67fa20fa3a96712724e9d9f29f236b8f29857b21afb78379652e128b6ba12d3f9f083198384c2645f79b044eeef46cd"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffd1}}]}, @TCA_BASIC_EMATCHES={0xa0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x5}, {0x1, 0x2, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x1fc}, {{0x1, 0x1, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x70, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x1d5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}, @TCA_BASIC_ACT={0x26c, 0x3, [@m_skbedit={0x130, 0x15, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xb}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xa}}]}, {0xd3, 0x6, "9daac4e6e7b092c096ddceab5c1e10a4fd3d5a25ca7c82ec3425731744d8120eeb52c7f7d06afffab7d46a5e6d09adf4e5e1657cc910ea404e1ef2b9fccc320b4165d3e39de074b3fdf376b265ad08212b85c0cff9400c46d0145f015a61840e75ad545fd1f6c34fd33e3230a7387cb2e32bb9d0d3ad28995c143dd4e9b3a1ce8d60b5179ddd62d9cf7888af0a94e77cb746a3834b1096e35d59599d9b22ed1c92eca60c66f8ccac250d10afad1ecbe953f234dc2b0ad7bec32011df604619dab53311cc23dac79e7e17ea987d319d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9ae7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x7, 0x36, 0x5, 0x2, 0x4}, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x7}}}}, @m_gact={0xd4, 0x14, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x169d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xffff, 0x20000000, 0x4, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7b9, 0x7, 0x6, 0xfffffffd, 0x3}}]}, {0x69, 0x6, "0ceaa2d51ce29f6c4dddf3e2f85980b8f90d550cfae4f5f1958ecebf8984d7c6842e5d55ca69ecca1ce2d0ecb372717684408618160622adf877125f8283b75de4458b820af46ead95de636f9da59299ebee98d974a7c602e549eb4034ede97e56db019830"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x6}}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x4}]}}]}, 0x3bcc}, 0x1, 0x0, 0x0, 0x44000}, 0x240080d5) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202020202020a0882848b960c121824"], 0x36) 04:19:28 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000400)={'veth1_virt_wifi\x00', @ifru_mtu=0x80000000}) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000000)=0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xb1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=@deltfilter={0x3bcc, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0xffff, 0x1}, {0xb, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @filter_kind_options=@f_bpf={{0x8}, {0x326c, 0x2, [@TCA_BPF_ACT={0x3260, 0x1, [@m_pedit={0x2f70, 0x1e, 0x0, 0x0, {{0xa}, {0x2e58, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xfc85, 0x8000, 0x3, 0x6, 0x80000000}, 0x5, 0x9, [{0x8001, 0x10000, 0xff, 0x7, 0xcb, 0x7ff}, {0x0, 0x200, 0x0, 0x3, 0x2, 0x1ff}, {0x7, 0x100, 0xffffffff, 0x8, 0xbcb1, 0x34749126}]}, [{0xd8, 0x10000, 0x7, 0x0, 0xba, 0x2b0}, {0x3, 0x4, 0xff, 0x2, 0xfff, 0x1}, {0x9, 0x4d22, 0x9, 0xeda, 0x7000, 0x5}, {0x0, 0x5, 0x0, 0x1}, {0x1, 0xfffffc01, 0x6, 0x7f, 0xfff, 0xfffffff7}, {0x1, 0x10000, 0x1c6000, 0x5, 0x8000, 0x3ff}, {0x3, 0xc1, 0x4, 0x80000000, 0x9, 0x2d}, {0x5, 0x0, 0xfffffff7, 0x9, 0x9, 0x5}, {0x0, 0x1, 0x800, 0x2, 0x9b48, 0x4}, {0x2, 0x9, 0x7ff, 0x8, 0x8, 0x7}, {0x8, 0x4, 0x7, 0x1, 0x6, 0xe9e}, {0xc5, 0x3, 0x8, 0x7, 0x3, 0x8}, {0x401, 0x7ff, 0x1, 0x10001, 0xfffffff9, 0x8}, {0x4, 0x0, 0x9, 0x1, 0x8, 0x9}, {0x5, 0x80, 0x4, 0x7f, 0x7f, 0x8001}, {0x10001, 0xfffff219, 0x3, 0x40, 0x40, 0x7}, {0x3, 0x100, 0x7f, 0x8, 0x101, 0x9194}, {0x4, 0x61be, 0x7fffffff, 0x10001, 0xff, 0x7f}, {0x7fffffff, 0x4, 0x0, 0x2de7, 0xffffffb2, 0x8}, {0x1, 0x5, 0x7c000, 0x4, 0x7, 0x8}, {0x5, 0x4504, 0x1, 0x10000, 0x800, 0x185b}, {0x2, 0xd3d, 0x9, 0x101, 0x6}, {0x1, 0x0, 0x2, 0x0, 0x8, 0x10000}, {0x4, 0x6, 0x6, 0x0, 0x0, 0x8000}, {0x9, 0x0, 0xb84d, 0x9ed, 0x9}, {0x5, 0x1, 0x7305, 0x10001, 0x0, 0x7}, {0x0, 0x9, 0xc0000, 0x0, 0x1, 0x10000}, {0x8, 0xfffffffe, 0x1, 0x1f, 0x7, 0x4}, {0x7, 0x80000001, 0xffff8001, 0xaf2, 0x8000, 0x7}, {0x9, 0x0, 0x1, 0x0, 0x5, 0x1ff}, {0xfffffff9, 0x2, 0x5, 0x16d1f983, 0x8000, 0x9}, {0x100, 0x0, 0x8, 0x7, 0xfffffff8, 0x7}, {0x1, 0xfffffff8, 0x9, 0x8, 0x1a, 0x7c}, {0x7a, 0x2, 0x9, 0x3f, 0x3, 0x1ff}, {0x8da3, 0x3f, 0xf6, 0x5, 0x7, 0xfffffffd}, {0x26d, 0x2, 0x7f4c, 0x9, 0x4, 0x4}, {0xfffffffc, 0x401, 0x9, 0xbe38, 0x7fffffff, 0x1}, {0x5, 0x6, 0x8, 0x4, 0x6, 0x2000000}, {0x20, 0x2, 0x10000, 0x0, 0x1}, {0x40, 0x2, 0x1, 0x80000000, 0x7fff, 0x20}, {0x7fff, 0x48000000, 0x20, 0x1, 0x7, 0x2}, {0x5, 0x0, 0x12, 0x100, 0x3, 0x1}, {0x2, 0x10000, 0xd0, 0x81, 0x800, 0xc721}, {0x1, 0x6, 0x8, 0x6, 0xd1b}, {0x284, 0x100, 0x1, 0x8c, 0x80, 0x80000000}, {0x40000000, 0x1000, 0xff, 0x80000000, 0x5, 0x15df}, {0x65, 0x6, 0x1f, 0x80, 0x7, 0x3}, {0x3f, 0x8, 0xfffffff7, 0xd90, 0xfffffff8, 0x9}, {0x6, 0x3ff, 0x4, 0x8001, 0x2}, {0x1, 0x0, 0xe1, 0x1ff, 0x6, 0xfff}, {0x4, 0x5, 0x40, 0x7, 0x1f, 0x10000}, {0x81, 0x4, 0x18, 0x80000001, 0xada, 0x5}, {0x6, 0x0, 0x17aa, 0x0, 0x8, 0x7f}, {0x200, 0x45, 0x0, 0x2, 0x5, 0x8000}, {0x5, 0x1d, 0xe8, 0x1, 0xd7, 0x9}, {0x7fffffff, 0x4, 0x2, 0x5, 0x10000, 0x101}, {0x7fffffff, 0x5, 0x4, 0x3, 0x18, 0x4}, {0x200, 0x9, 0x5452, 0x0, 0x1, 0x6}, {0x9, 0x6, 0x6, 0x0, 0xfffffff7, 0x8}, {0x100, 0x8, 0x2, 0x80000000, 0x3, 0x18}, {0x382, 0x1, 0xff, 0x793c000, 0x7, 0x548}, {0x8c, 0xff, 0xffff, 0xfa0f, 0x1, 0x4}, {0x1000, 0xffff8001, 0x6, 0x318, 0x2, 0x10001}, {0x0, 0x8d, 0x8, 0x7, 0x9, 0x80}, {0x7, 0x6, 0x7, 0x4dd4, 0x7, 0x7}, {0x9, 0xc0000000, 0x1, 0x8001, 0x8, 0x1000}, {0x0, 0x40, 0x4, 0x5, 0x80, 0x7fff}, {0x80000001, 0x4, 0x9, 0x7fffffff, 0x86, 0x7}, {0x8, 0x100, 0xff, 0x1, 0x80, 0x1000}, {0x5, 0x5, 0x1b7, 0x841, 0x2, 0xfff}, {0x0, 0x6, 0x3, 0x5, 0xffffff80, 0x5}, {0xffff7fff, 0x2, 0x10000, 0x0, 0x1, 0xf4f}, {0x4, 0xffff, 0x4, 0x2, 0x80000001, 0x7}, {0x188, 0xfffff800, 0x6, 0x10001, 0xcd0}, {0x0, 0x1, 0x9, 0x9, 0xfffffffc, 0x3f}, {0xfffffd80, 0x3, 0x3, 0x8, 0x10000, 0x9}, {0x2, 0x80, 0x3, 0x5, 0x90, 0xfff}, {0x9, 0x20, 0x7, 0x0, 0x3, 0x7}, {0x5, 0x8, 0xed, 0x33, 0x7cf73b6d, 0x9f0}, {0x7a, 0x9, 0x2830, 0x0, 0x80000000, 0x50000}, {0x35, 0x2, 0x1100, 0xffffffff, 0x7fff}, {0x98, 0xffffffff, 0x7f, 0x0, 0x7fffffff, 0x4257ea9d}, {0x5, 0x10000, 0x10001, 0x2, 0x2, 0x6}, {0x4, 0x3, 0x80, 0x2, 0x40, 0x800}, {0x2e, 0x1f, 0x1f1, 0x2d, 0x2f0c, 0x4}, {0x2c5c, 0x3, 0x1, 0x5, 0x8000, 0x7}, {0x7f, 0xfffffff7, 0x5, 0x9, 0x4, 0x66}, {0x81, 0x7, 0x2, 0x81, 0x200, 0x1}, {0x20, 0x1a, 0x10000, 0x6, 0x496, 0x1000}, {0x3f, 0x101, 0xffffffff, 0x10000, 0x80ab, 0x6836ef29}, {0x1, 0xffffffff, 0x7, 0x0, 0x1, 0x3db}, {0x1ff, 0x1f, 0x8, 0x80000001, 0xffffffff, 0x3}, {0x9, 0x6, 0x2, 0x3ff}, {0x7, 0x6, 0x3474, 0x5, 0x40, 0x9}, {0x5, 0x7, 0x100, 0x3, 0x7f, 0x5}, {0x3000000, 0x1f, 0x2, 0x8, 0x9f70, 0x9}, {0x2, 0x1, 0x6, 0x5, 0xdaf5, 0xff51}, {0x800, 0x9, 0x4, 0x101, 0x7, 0x9}, {0x80, 0x7, 0xffffffff, 0x1000, 0x3a, 0xfffffffb}, {0x8001, 0xfff, 0x3, 0x9, 0x21, 0xa83}, {0x80, 0x9, 0x5, 0x3, 0x2, 0x6}, {0x719c, 0xc627, 0x4, 0x8, 0x0, 0x2}, {0x7, 0x8000, 0x742, 0x8, 0x5, 0xfdb}, {0x80, 0x9, 0x6, 0x9, 0x6, 0xfffffffe}, {0x7fffffff, 0x32, 0x400, 0x400, 0x7ff, 0x8}, {0x6, 0x3c8e, 0x1ff, 0x16d5, 0xffffffff, 0xbdb}, {0x3, 0x1, 0x7, 0x1f, 0x8, 0x7}, {0x36d1, 0x0, 0xe2db, 0x2, 0x0, 0x6}, {0x7, 0x6, 0x8, 0x1, 0xfffffffe, 0x9}, {0x3, 0x1, 0x3, 0xfffffffc, 0x1000, 0x5}, {0x3f, 0x5, 0x5, 0x40, 0x5, 0x6f}, {0x1046, 0x8, 0x2466, 0x8001, 0x9, 0x9c}, {0x4, 0xd8, 0xe, 0x40, 0x4, 0x9b9}, {0xff, 0x3, 0xbbda, 0x5, 0x80, 0x7}, {0x6, 0x0, 0x5, 0xc294, 0xffffffe1, 0x5}, {0x6, 0x8, 0xffff, 0xa, 0x7, 0x2}, {0x8, 0x3f, 0x2, 0x3, 0x0, 0x8}, {0x1000, 0xbba, 0x1, 0x2, 0x5, 0x3}, {0x0, 0x408, 0x5, 0x5, 0x3, 0x8}, {0x16, 0x5dfb, 0x0, 0x2, 0x3, 0x81}, {0x7f, 0x2, 0x2, 0x8, 0x2, 0x5}, {0x71e, 0x3, 0x4, 0x4}, {0xffff, 0x37f, 0x6, 0xfff, 0x8001, 0x40}, {0x8, 0x8, 0x2, 0x3d, 0xcf, 0x2}, {0x32b, 0xd53b, 0x9, 0x2, 0xffff, 0x1}, {0xd99, 0x3, 0x3, 0x8, 0x2}, {0x6, 0x6, 0x7301b55d, 0x4, 0xfffffff7, 0x3}, {0x8ad7, 0xff, 0xfffffe00, 0x100, 0xc0e7, 0x800}], [{0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x2}, {}, {0x3}, {0x2}, {0x3}, {0x3}, {0x4}, {0x3}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0xd6bc7bf1db8a15e2}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0xe97769f022a852c2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x4ef9aac96bbde2a0}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x6, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0xf5c1fa676eff650}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x7c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x1, 0x0, 0x4, 0x1800, 0x5}, 0x20, 0xff, [{0x5, 0x4, 0x7, 0x1, 0x3, 0x2}, {0x0, 0x1f, 0x0, 0x4, 0x4, 0x5}, {0x1, 0x6, 0x200, 0xd9a6, 0x1, 0x7b3b}, {0x1, 0x1, 0x3, 0x80000001, 0x3, 0x2d7}, {0x3f, 0xfffff801, 0xc80e, 0x6, 0x1, 0x8}, {0x5, 0x401, 0x6c, 0xfffffffe, 0x8000, 0xbb}, {0x7ff, 0xff, 0x80000000, 0x4, 0xfff, 0x6}, {0x2, 0x4, 0x4, 0x800, 0x80, 0x80}, {0x2, 0x7fffffff, 0x34, 0x0, 0x1c00000, 0xfffffffc}, {0x7fff, 0x7fffffff, 0x3ff, 0x9, 0x40, 0xd9cf}]}, [{0x3f, 0x348, 0x5, 0x782ceb35, 0x1, 0x1}, {0x0, 0xffff8000, 0xdb, 0xfffff000, 0x6, 0x6991}, {0x0, 0x7, 0x5, 0x92, 0x8001, 0x8}, {0x5, 0xdd22, 0x7fffffff, 0x6, 0x2f, 0x7ff}, {0x5, 0x4, 0x5, 0x39f, 0x5}, {0x7, 0x27f, 0x1, 0x0, 0xca6d, 0x5}, {0x2, 0x7, 0x0, 0xfffffffc, 0x100, 0x8}, {0x5, 0x433e, 0x3, 0x1, 0x20b, 0x4}, {0x2, 0x1, 0xfffffffe, 0xfffffffa, 0x100, 0x800}, {0x0, 0x3ff, 0x81, 0x1ff, 0x0, 0xfc}, {0x6, 0x91, 0x5, 0x7, 0x7fff, 0x7ff}, {0x6, 0x0, 0x5, 0xa38, 0x6, 0x4}, {0x401, 0xffff, 0x2, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x7, 0x800, 0x0, 0xe83f}, {0x0, 0x3ff, 0xfffffffa, 0xfffff800, 0x1, 0x80000001}, {0x3, 0x1800000, 0x917e, 0x5, 0x3, 0x80}, {0x8, 0x0, 0x1f5, 0x8, 0x828}, {0x1, 0x1, 0x6, 0xfff, 0x5, 0x40000}, {0x2, 0x1, 0x4, 0x0, 0x5, 0x8000}, {0x7f, 0x4, 0x7fffffff, 0xffff, 0xfffffffc}, {0xffffffff, 0xfffffff9, 0x1, 0x1, 0x7f, 0x4}, {0x10001, 0x4, 0x5, 0x200, 0xff, 0x2}, {0x3248, 0x2, 0xd8, 0x6, 0x7}, {0x89, 0x40e, 0x8, 0x37, 0x7ff, 0x1}, {0xe7e, 0x8000, 0x5, 0x3, 0x168c, 0x7}, {0x0, 0x2, 0x6, 0xfffffffa, 0x80000000, 0x401}, {0x7, 0xd2, 0x7, 0x7fffffff, 0x8000, 0x8000}, {0x3f, 0x3, 0x0, 0x100, 0x1, 0xffffffff}, {0x389a, 0xffffffe2, 0x4, 0x80, 0x1a, 0x3f}, {0x6a8000, 0x5, 0x1, 0x0, 0xcde}, {0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffff9}, {0x7ff, 0x0, 0x401, 0x3, 0x10001, 0x40}, {0x4, 0xfff, 0x7fff, 0x5, 0x3f, 0x1}, {0x5, 0x7, 0x8001, 0x2, 0x1, 0xffffffff}, {0x9c, 0x0, 0x10, 0x3f, 0x7, 0xffff}, {0x7, 0x1, 0x0, 0x8, 0x1, 0x401}, {0xe87, 0x4, 0x101, 0x7ff, 0x1, 0x910}, {0x7, 0x7, 0x9, 0x4, 0x400, 0xffffffff}, {0xf40e, 0x1, 0x7fffffff, 0x20, 0x80, 0x2}, {0x800000, 0x6, 0x5dd7447b, 0x0, 0x7b, 0x5}, {0x3e, 0x40000000, 0x84, 0x8, 0x1f, 0x4}, {0x8, 0x3, 0x8, 0x0, 0x2, 0x1}, {0x2, 0xab, 0x1, 0x4, 0x9, 0x3f}, {0x7fff, 0x80000001, 0x3, 0x17, 0x9, 0xfffff001}, {0x0, 0x6, 0x10000, 0x1f, 0xfffffffd, 0x400}, {0x2, 0x4, 0xffffff80, 0xed, 0xfffffff8, 0x7f}, {0xffffffff, 0x8, 0x3, 0x1a, 0x20, 0x5}, {0x4, 0x1, 0x4, 0x7, 0xae, 0x3f}, {0xffffcd5e, 0x3, 0x6, 0x1f, 0xfff, 0xffffffff}, {0x80, 0x7, 0x5000, 0x8, 0x5, 0x2}, {0x7fff, 0xa573, 0xc22, 0x6, 0x2, 0x5}, {0x8, 0x6, 0x9, 0x1, 0x9f, 0x6}, {0xd23, 0x6, 0x0, 0x1, 0x2, 0x7}, {0x4, 0x0, 0x0, 0x40, 0x9, 0x1ff}, {0x6, 0x8, 0x6, 0x5, 0x9}, {0x0, 0x1, 0x9, 0x101, 0x7bad, 0x10000}, {0xbbc1, 0xfffffff9, 0x2, 0x14, 0x0, 0x7}, {0x0, 0x0, 0xffff7fff, 0x15, 0x2, 0x9}, {0x4, 0x5, 0x7, 0x807c, 0x9, 0x1f}, {0xfffffff9, 0x0, 0x6, 0x316297a3, 0x4, 0x10000}, {0x2, 0x3ff, 0x8000, 0x5, 0x6, 0x2}, {0x6, 0x7, 0x0, 0x1, 0x7, 0xb2}, {0x5, 0x3ff, 0x7, 0x43ee47cd, 0x100, 0x7f}, {0x4a, 0x9, 0xf6b, 0x7f, 0x400}, {0x6, 0x3ff, 0x2, 0x7ff, 0xb3, 0x9}, {0x7, 0x5, 0x2, 0x8001, 0xfffffe00, 0x29}, {0x2, 0x6, 0xebb, 0x9, 0x8, 0x3}, {0x800, 0x3, 0x1, 0x8000, 0x80000000, 0x8a8}, {0x1f, 0x200, 0x0, 0x5, 0x7, 0x7}, {0x401, 0x227, 0x3, 0x9, 0x5, 0x1f}, {0x3ac00000, 0x5, 0xa5, 0x3ff, 0xffff, 0x9}, {0x9, 0x3, 0xffffffff, 0x0, 0x1, 0xfffffff9}, {0x194, 0x7, 0x8, 0x7fffffff, 0x1, 0xffffffff}, {0x8afe, 0x3f, 0xe7, 0x0, 0xd62, 0x100}, {0x20, 0x1, 0x7f, 0xfffffffb, 0x6, 0x20}, {0x9, 0x4, 0x200, 0x3, 0x8, 0x40000000}, {0xff, 0xd306, 0x2, 0x3, 0x6, 0x7}, {0x8001, 0x3, 0x1000, 0x3, 0x33}, {0x0, 0x2, 0x8, 0x1, 0xb56, 0x48d}, {0x3, 0x1, 0x1, 0x5, 0x81, 0x5}, {0x3, 0x1000, 0x1ff, 0x6b2, 0x9, 0x1}, {0x9, 0x2, 0x7fff, 0x2, 0x0, 0x7}, {0x7, 0x5, 0x3f, 0x0, 0x101, 0x3ff}, {0x2, 0xffffffff, 0x1, 0x2, 0x8, 0x3}, {0xfffffd0b, 0xe00000, 0x4cf, 0x3, 0x8, 0x3}, {0xffffffc0, 0x100, 0x7, 0x8, 0x0, 0x5}, {0x400, 0x6, 0xc5, 0xfff, 0xfffff001, 0x1}, {0x4, 0x8, 0x3, 0x8000, 0x4, 0x6}, {0xff, 0x0, 0x1, 0x4, 0xffffffff, 0x101}, {0x3ff, 0x904, 0x80, 0x8001, 0x4, 0x5}, {0x7, 0xffffffc0, 0x80000001, 0x7ff, 0x81, 0x8001}, {0x9, 0x9, 0x6, 0x0, 0x4, 0xf74d}, {0x800, 0xfff, 0x3, 0xa293, 0x5, 0x3f}, {0x3ff, 0x2, 0xfffffffb, 0x6, 0x7ff, 0x1ff}, {0x100, 0xfffffffc, 0x60, 0xfffffffe, 0x10001, 0x4}, {0x2, 0x3, 0x3f, 0x200, 0x1, 0x3ac9}, {0xdea, 0x0, 0x26f101b6, 0x40, 0x2, 0x8000}, {0x99f, 0x1f, 0x8, 0x1, 0x7f, 0x4}, {0x2, 0x1000, 0x1, 0x5, 0x3, 0xffffffff}, {0x254, 0x9, 0x1, 0xfffffff7, 0x1, 0x400}, {0x0, 0x17, 0x7, 0x1, 0x80000001, 0x2}, {0x4f, 0x0, 0x4, 0x8f6, 0xfffffffc, 0xdf}, {0x87c, 0x5, 0x7, 0x0, 0x3, 0x2dd}, {0x80, 0x3, 0x400, 0x8c21, 0xffff0000, 0xac}, {0x7, 0x5, 0x5, 0x2c5, 0x8, 0x9}, {0xa54, 0xfff, 0x1d, 0x100, 0x3, 0x3}, {0xffff, 0x2, 0x6e, 0xfffffffe, 0x1, 0xec4}, {0x9, 0x6, 0x9, 0x8, 0xfffffff7, 0x10001}, {0xffffffff, 0x3f, 0x0, 0x1, 0x4, 0x9}, {0xa0, 0x5, 0x8, 0x356, 0x81, 0xffffffff}, {0x3, 0x1, 0xfffffff8, 0x3, 0xfdd, 0xaf8}, {0x6, 0x7, 0x80000001, 0x3, 0x9, 0x1ff}, {0x0, 0x5, 0x3ff, 0xf2eb, 0x3, 0x2}, {0x101, 0xd05, 0x1, 0x7, 0x7fff, 0x8}, {0x0, 0x0, 0x26b, 0xfffffff9, 0x40000, 0x582c}, {0x0, 0xd9, 0x3, 0x6, 0x2445, 0x7ff}, {0x4, 0x5, 0x4, 0x8e, 0x7fffffff, 0x2b4}, {0x959, 0x3, 0x1, 0x50, 0x4, 0x8}, {0xffffffe1, 0x9, 0x7, 0x6, 0x91f, 0x5}, {0xf5, 0xe0ac, 0x9, 0x100, 0xfffffff7, 0x2}, {0x4, 0xff, 0x7ff, 0x7cfc, 0x1, 0x7}, {0x5, 0x7, 0x100, 0x3f, 0x9, 0x3f}, {0x6, 0x40, 0x8, 0x3, 0x3, 0x8}, {0x81, 0x9, 0x8, 0x2, 0x9, 0x80000000}, {0x800, 0x3, 0x5, 0x1, 0x2, 0x7f}, {0x5, 0x7, 0xfff, 0xfffffff8, 0x9, 0x2}, {0xffffffe1, 0x3, 0x2, 0x1, 0x0, 0x15c2000}, {0x800, 0x7ff, 0x4, 0xd8f, 0xfffffffe}], [{0x0, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1fa9bf5b4f97ca3e}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0xdb93993d53d6dfc}, {0x5, 0x1}, {0x0, 0x1}, {0x5d2a5ff5e3ec06c0}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x3}, {}, {0x4}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xff, 0x8000, 0x6, 0x5, 0xfff}, 0x80, 0x2, [{0x49, 0x3, 0x5, 0xfffffbff, 0xf1f, 0x8000}, {0x5, 0x1f, 0x8001, 0x101, 0x9, 0x38f}, {0x2, 0x3, 0x6, 0x101, 0xffffff7f, 0xfffffe01}, {0x1000, 0x5, 0x6, 0x37, 0x3, 0x3ff}, {0x1, 0x3, 0x100, 0xfd7b, 0x100, 0x200}, {0x33, 0xfffffffa, 0x7, 0x80000001, 0x80, 0xfffffc01}, {0x9, 0x4, 0x2, 0xfffffff7, 0x101, 0xffffff01}, {0x401, 0x0, 0x1, 0x4, 0x9, 0x8}]}, [{0xff, 0x2, 0x9, 0x20, 0x8, 0x100}, {0x5, 0x4, 0x8001, 0x7, 0x2, 0x1}, {0x2, 0x1ff, 0x101, 0x5, 0x1, 0x4}, {0x0, 0x1, 0x6, 0x1, 0xfffff801}, {0x80000001, 0x3, 0x0, 0xd273, 0x5, 0x1}, {0x7, 0xffffffff, 0x1, 0x100, 0xffffffff, 0x3f}, {0x200, 0x5, 0x7fff, 0xfffffffe, 0x8000, 0x51e}, {0xe9, 0x4, 0x2, 0x0, 0x1, 0xffff64f2}, {0x1, 0x7, 0xfffffff9, 0xaa, 0x8374, 0x8}, {0x6, 0xfff, 0xff, 0x1000, 0x0, 0x2}, {0x8000, 0xff, 0x80000001, 0x8, 0x9, 0x1ff}, {0xe16, 0xf5, 0x400, 0x1ff, 0x6, 0xff}, {0x101, 0xe39, 0x8000, 0x35dc, 0x2, 0x7}, {0x8000, 0x1, 0x9, 0x5, 0x1, 0xb333}, {0x3, 0x3, 0x300000, 0x1f, 0x5f8, 0xff}, {0x10001, 0x2, 0x3ff, 0x4, 0x8, 0x673d}, {0x20, 0x1, 0x8, 0x400, 0x12, 0x5}, {0x7fff, 0x6, 0x1000, 0x3, 0x1, 0x2}, {0x3, 0x894, 0xff, 0x0, 0xfffffffd, 0x9}, {0x101, 0x2, 0x9, 0x4, 0x2, 0x9a}, {0x7, 0x2, 0xfffffffa, 0x1, 0x2, 0xecf}, {0x7fff, 0x400, 0x100, 0x4, 0xff, 0x18}, {0x1, 0x8, 0x7fff, 0x2, 0x800, 0x6f253f2b}, {0x1, 0x3, 0x200, 0x9, 0x10000, 0x6}, {0x40, 0x2185bd1d, 0x18, 0x1, 0x3, 0x400d}, {0x4, 0x2, 0x1, 0x6567cedd, 0x2, 0x100}, {0x9, 0x2, 0x9, 0x3, 0x3a, 0x5}, {0x1, 0x7, 0xff, 0x0, 0x81, 0xe0000000}, {0x40, 0x3f, 0x2, 0xebc2, 0x7, 0x7}, {0x5, 0xfffffffe, 0x80000001, 0x7fff, 0xea, 0xde}, {0x80000001, 0x2, 0xffff, 0x5, 0xbf45, 0x3f}, {0x8000, 0x4, 0x81, 0x6, 0xfffff800, 0xffff}, {0xfffffe01, 0x5966, 0x9, 0x8, 0xfcca, 0xc6a1}, {0x2, 0x0, 0x7, 0x7}, {0x59ce, 0x9, 0x9, 0x40, 0xbb60, 0x10000}, {0x5, 0x4, 0xffffffff, 0x3f, 0x0, 0x10000}, {0x800, 0x1, 0x81, 0x1, 0x0, 0x8}, {0x9d, 0x20, 0x81, 0x3f, 0x80, 0x4}, {0xff, 0x1, 0x6, 0x3, 0xffffffff, 0x1000}, {0x36f, 0x5, 0x6, 0x40, 0xfffffffa, 0x6802}, {0x0, 0x9, 0x1000, 0x331, 0x9, 0x515}, {0x7fff, 0x3, 0xffff0000, 0x800, 0xfffffffe, 0x7e8}, {0x7fff, 0x9, 0x80000000, 0x7, 0x9, 0x800}, {0x6, 0x7, 0x3, 0x9, 0x9, 0x2b2}, {0x2, 0x3, 0x4, 0x6, 0x0, 0x2}, {0x5, 0x3, 0x1000, 0x3, 0x1, 0x40}, {0x7, 0x1, 0x7ff, 0x562, 0x1}, {0x3189, 0xffffffc7, 0x4, 0x1, 0x3, 0x6}, {0x637e, 0x8, 0x0, 0x14, 0x7ff, 0x1f}, {0x7, 0x0, 0x1, 0x4, 0x4, 0x4}, {0xfff, 0xffffffff, 0x79, 0x4, 0x9, 0x5}, {0x3, 0x80000001, 0x2, 0xe980, 0x3, 0x4}, {0x3c2, 0x400, 0x2b, 0xfff, 0x7ff, 0xa0}, {0xfffffff8, 0x7, 0x9, 0x8, 0x475, 0x4}, {0x7d0, 0x5, 0x0, 0x8, 0x9, 0x400}, {0x7, 0x0, 0x9, 0x0, 0x80000001, 0x3f}, {0x2, 0x6, 0x8, 0x0, 0x8, 0xffffffff}, {0x7, 0x14, 0x10000, 0x2, 0x0, 0x4}, {0x3, 0x8, 0x8, 0x6, 0xfffffffd, 0x4}, {0x9, 0x9, 0x1, 0x200, 0x200, 0x796}, {0x3, 0x734c, 0x2, 0x100, 0x5, 0x1}, {0x2638, 0x9, 0x0, 0x9, 0x3, 0x6}, {0x80, 0xfff, 0x8, 0x0, 0xffffffff, 0x2}, {0x9, 0x8001, 0x8001, 0x10001, 0x7f, 0x9}, {0x3ff, 0xe62, 0x25000000, 0xd4, 0x1, 0x3}, {0x5, 0x6, 0x3, 0xfd, 0x0, 0x1a28}, {0x1, 0x1f, 0x1ff, 0x7f, 0x7f, 0x2}, {0xc03, 0x71, 0xfffffff7, 0xffff, 0x2, 0x9f0f}, {0xffffffff, 0x400000, 0x3, 0xe3, 0x6, 0x1}, {0x7ff, 0x0, 0xbcaf, 0x5b0, 0x81, 0x4}, {0x3, 0x6, 0x5, 0x70, 0x4, 0x9}, {0x7, 0xaa, 0xffffffff, 0xc0000000, 0x8000, 0x4}, {0x5, 0x6, 0x9, 0x5, 0xed, 0x200}, {0x1ff, 0x7, 0x8b33, 0x6, 0xff, 0x99}, {0x7, 0x1, 0x4, 0x1ff, 0x4, 0x2}, {0x4, 0x0, 0x2c44, 0x4c54, 0x5}, {0x1, 0x9, 0x7, 0x0, 0x1000, 0x1000}, {0x4, 0x8, 0x4, 0x11, 0x40000000, 0x5a96}, {0xfffffff8, 0xfffffbff, 0x1800, 0x8000, 0x3, 0x9}, {0x1, 0x2582, 0xffffffff, 0xffff, 0x7fff, 0x800}, {0x2, 0x7fff, 0x81, 0x4, 0x80000000, 0x6}, {0x5, 0x1, 0x0, 0x401, 0x4, 0x6}, {0x1, 0x6, 0x1, 0x6, 0x7f, 0x81}, {0x8001, 0x1b8b, 0x0, 0x59, 0x9, 0xff}, {0x80, 0x10001, 0x7f, 0x1197995c, 0xfffffffe, 0xfff}, {0x9, 0x8000, 0x2, 0x10000, 0x7ff, 0x401}, {0x7fff, 0xcb, 0x0, 0x1a, 0x1, 0xe}, {0xcac, 0x846, 0xf356, 0x3ff, 0x3, 0x8000}, {0x2, 0x1, 0x25f, 0x401, 0x2}, {0x2b, 0x1, 0x1000, 0x9, 0x1f, 0x3f}, {0x400, 0x8, 0x8000, 0x1, 0xbd, 0xffffff0b}, {0x6, 0x3, 0x1ff, 0xff, 0x0, 0x5d4}, {0x8, 0x3, 0x3f, 0x8, 0x40, 0x21}, {0x800, 0x6c, 0x5, 0x800, 0x6, 0xffffffc1}, {0x2, 0xd10, 0x6383, 0x2, 0x8, 0x7}, {0x0, 0x6, 0x8, 0x1f, 0x8, 0xf7}, {0x80, 0x8, 0x2, 0xfff, 0xbb47, 0x6}, {0xd4, 0x400, 0x7, 0x3, 0x8000, 0x7fffffff}, {0x80000000, 0x0, 0x0, 0x4, 0x6, 0x8}, {0x0, 0x1, 0x1, 0x7, 0x1f, 0xff}, {0x1, 0x7, 0x0, 0x50, 0x8001, 0x101}, {0xe2a, 0x4b, 0x5de, 0x8, 0x6, 0x3f}, {0x8e, 0xc00000, 0xb6, 0x4000000, 0x2, 0x1}, {0x6, 0x5, 0xa7d, 0x80000001, 0x9, 0x4}, {0x80000000, 0x7, 0x2a, 0x3, 0x7ff}, {0x10001, 0xb69, 0x0, 0x7, 0x7, 0x8000}, {0xffff, 0x0, 0x803, 0x5, 0x7, 0x1}, {0x3, 0x4, 0x7, 0x4, 0x8001, 0xc38f}, {0xfffffffc, 0x5, 0x6, 0x1, 0x93da, 0x3ff}, {0x8, 0x80, 0xe11, 0x8, 0x0, 0x9}, {0xfffffff9, 0x7, 0x3, 0x8000, 0x5889, 0x9}, {0xfff, 0x7fff, 0x0, 0x6, 0x1, 0xfffe00}, {0x5, 0x4c1f, 0x3, 0xffffffff, 0x48, 0x8}, {0x0, 0x907, 0xfff, 0x1c, 0x8, 0x8}, {0x5, 0x0, 0x1, 0x9d, 0x1af2, 0x7fffffff}, {0x1, 0x1, 0x2, 0x7, 0x7, 0x7}, {0xffffffff, 0x8, 0x0, 0x0, 0x2, 0x3}, {0x1, 0x9, 0x6, 0x7, 0x2, 0x8}, {0x0, 0x4, 0x80000001, 0x5, 0x6}, {0x9, 0x401, 0x80000001, 0x8, 0x5}, {0x4c, 0xe8, 0x7, 0x7, 0x9}, {0x401, 0x0, 0x10001, 0xdd, 0xffffffff, 0x3}, {0x0, 0x59d, 0x4, 0x9e3, 0x7ff, 0x4}, {0x2, 0x9, 0x9, 0x7fff, 0x4, 0x8}, {0x6, 0x2, 0x8001, 0xff, 0x80, 0x2}, {0x8001, 0x2, 0x7, 0x9, 0x40, 0x200}, {0x3ff, 0x3f, 0xfffffff9, 0x80000000, 0x2, 0x4f}, {0x6, 0x2, 0x2, 0x5aaf, 0x8, 0x7}], [{0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x6615120342f2de14}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x2}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x3}, {0x4, 0x2575b3b2ed807c92}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x140, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0xef, 0x6, "46691ab7484bf9389fbe8830b0912621f608024a1483f3023f51235ad1bc69a8d9a2470a5262251eac08e3d42647efd953fd59a8cc21a25d5666b1db266e890a342a49a3502f72315c290bf7e079fba892028a5d6f102f11ae8a45b61abec64307b27005c179e64be19deecd7b5d17fefe6f9aa49b01e40262d4f29484ad7049c078aa4f40ec27d2612bd146bba51f4254bf610bb0c5ccb77882ccd599bf0d44a8515f82e3abd0bb28c8ff5a007d707175829a1c273119d8b27816cf18872d7e69b9776a5d813f5e080312b50df6a4e1e5f260ba1b4f19d2072461ba8fa4086595a0ce90e46d2b82657658"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x11c, 0xa, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0xd7, 0x6, "a097c9affaa2b5bc9c55196840173e2974e0f303e482062a97fda667ec96a5bb216ea5c05bafdddde15844248eba7ce008c51f40ce2c64e9429c28a39110710480ef8220ea64212fb3866dbaf9353154aedb8c38a1861255f7e7fa49c546a854560e7440337c4a9240229b83c3b7f2c81bd1c39e20df0f9f7144c8d53a3b732c4ad393d892938b163d5e0e807f3963464e66dcf5bd37245df20530823181141ca6f2ca73b3ef402b6a7579ddea7ea6d9ec6802db7de6900fc89d3d6f67486eac9b7bdbe81dada8f729ebc3286c56ca7d22aabd"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xb4, 0x11, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0x7, 0x4, 0x1000, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x800}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x45, 0x6, "e040250aa7ac343505c22870ac5e98d57033d0b2888158179063ef7cee692d92633db39a5a1e5c210d310f214dfc8a7feff801b633fc4398990c79d6f7db4cdbfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x11c, 0x14, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x401, 0xfff, 0x20000002, 0x6, 0xbe0}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0xcf, 0x6, "716466a88b72f7b870b5a34b05f985aee5da901dd68059a53c82cf95ebded6b01cc4ee45b3d53611d2e513b14fe1f4effd67a083cc51791640843621c12ea65eb8253f093b2b9894d03ab79b7c53bd5eab16bd3489f3db84fc49fe47a6211ab0a8d3312f27092695f524aa591f6a99eb9bb019b70cedbf6d52c5846c15eff1212d41b3c76e41d1d4338ebc4de01ebc5f795e2a4e721a51bd769f1b8f61fd82a6b51c2efcbb3b2d5d659546112c31ff3dd1f7a306a314130eb910bd0bb032496d515fd196fe32573528180a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @filter_kind_options=@f_basic={{0xa}, {0x8f8, 0x2, [@TCA_BASIC_EMATCHES={0xf8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xd990, 0x8, 0xff}, {0x4, 0x1, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x7ff}, {0x9d, 0x2, 0x400, 0x0, 0xa}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x3}, {0xb9, 0x7, 0x0, "1568097adca5dd"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1f, 0x8, 0x2}, {0x3, 0x0, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x6}, {0x1000, 0x80000001, 0x443, 0x8001}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x1, 0x4, 0xff36}, [@TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="6b0880dce7", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="9b", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="6ec08f09", @TCF_META_TYPE_VAR=';:']}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="a141", @TCF_META_TYPE_VAR="025593646ff488bb03", @TCF_META_TYPE_VAR="09b035790c146bb2"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x2}, {0x5, 0x5, 0x7b, 0x0, 0x0, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1f}}]}, @TCA_BASIC_EMATCHES={0x198, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8001, 0x3, 0x3ff}, {0xffff, 0x100, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0xffff, 0x101, 0xfff, 0x7, 0x8}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfffd, 0x8, 0x7}, {0xffffffffffffffff, 0x3, 0x7}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x40}, {0xc3, 0x8, 0x1, "f82207294e4aad62"}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0xb1d}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x720, 0x2, 0x3c8}, {0x3f, 0x9, 0x2, "a4c54321770dfa2679"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0x4, 0x3, 0x5}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_CONTAINER={0xc4, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x7fff}, "40b845552c88b98b87771ed606b082516ccd80c1a832de62120a9e13ccea61e4ac052f10e752a4d08c4bc0007118542ef7457dec1808dd58a8fec3757342922922b8fc989328272f1803ba6076e091268c18fbf0c6f201f7b2a6da90c8e337ce22f2c6b12a0dd1ff7664a7e80578983866b4ad82e3dbd4562ef4f46529d6f844a68a702c2b56dbef12afde055aa02add7a715a39b1f2bf7bdcaeb339504112553135c5a328d13e5dc3045fd789cd7a86a4f88e528a44"}}]}]}, @TCA_BASIC_EMATCHES={0x350, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x344, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0xc000, 0x0, 0xe8e}, "e46e3f0259d33c10c4116c2d5fe7d19e13a69a51a33b925a24cd8178cb68e7b2463785523f31ab4ad0fc3f097a"}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0xfffe, 0x4, 0x400}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b28bf80174d8", @TCF_META_TYPE_VAR="c1", @TCF_META_TYPE_VAR="f2566ef19bcc50549b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x0, 0x2}, {0x20, 0x9}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1ff, 0x8, 0x3}, {0x3, 0x1, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0xd02}, {0x4, 0x1, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xf71}, {0x81, 0x9, 0x8, 0x1, 0x7, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x200, 0x7, 0x8009}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x800}, {0x3f, 0x2, 0x937a, 0x4, 0x0, 0x0, 0x2}}}, @TCF_EM_IPT={0xb4, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9d, 0x5, "5de356711acc5ef99d46159dc04a8f772e8b3b9846088a0a627b3d0a13be9e352b3cff58831e1f10ea5ab360acaea926a72a9570a1fa409d4f465c71f7b20130157d7e3ca9369d7e5cfc92e8179280ea519a625b52e54840bae74dd131de704318c85272ed4472e59e0dc85246a5251d8575ef61f78b4f0072481c0aa150ef82f90c911af786cf6dde74583ef0f33e4e0e38708120d39e3dab"}]}}, @TCF_EM_CONTAINER={0xb4, 0x3, 0x0, 0x0, {{0x75ec, 0x0, 0xe6}, "67767d9bab46db125250425218719f5ec51b6810af48c7d75dffed1fad8c3e0972f78f96f70763c04e2e2af676b03e04811fef57f56b72a5d28d680eaa69b932ba04a40366dd3acb47a2104f39205b16fc5605ad182ebefac8c6ab7d7548257c411b77fc91564b428a6945af486ce562c28b7966638b7e0347b30632076fd81047eb6e7dac36f50cacbd82572a52488114b1bb1bb493e926df0ded5fe4e6f551ffb82467af839b"}}, @TCF_EM_CONTAINER={0x104, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x2}, "20a3f51ba6403d9a4eb8130071e3c1b86dd0376d8ba5e20c07728ee333ba2f23bfe78f41bbd0a737664240b40d6f3516646f6d1aa4c00d130d84a1c36e41d925df7ccea8814066c2a3818109a64e2af640401adf1753bf04c92ac0774919969d558458059be18d9b06e48ed8492ecec1a07f18064a4672bfae6e9cf19c03d136f8717430a32aa46ec711eae328a7ad4e6335d790edea447a1341f8ffe00a92b6a533eb850b90752d9a6a69267c0b4d468b65ae1a3c462f0cb50e9aaff89deefc78f982568e35b67fa20fa3a96712724e9d9f29f236b8f29857b21afb78379652e128b6ba12d3f9f083198384c2645f79b044eeef46cd"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffd1}}]}, @TCA_BASIC_EMATCHES={0xa0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x5}, {0x1, 0x2, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x1fc}, {{0x1, 0x1, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x70, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x1d5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}, @TCA_BASIC_ACT={0x26c, 0x3, [@m_skbedit={0x130, 0x15, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xb}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xa}}]}, {0xd3, 0x6, "9daac4e6e7b092c096ddceab5c1e10a4fd3d5a25ca7c82ec3425731744d8120eeb52c7f7d06afffab7d46a5e6d09adf4e5e1657cc910ea404e1ef2b9fccc320b4165d3e39de074b3fdf376b265ad08212b85c0cff9400c46d0145f015a61840e75ad545fd1f6c34fd33e3230a7387cb2e32bb9d0d3ad28995c143dd4e9b3a1ce8d60b5179ddd62d9cf7888af0a94e77cb746a3834b1096e35d59599d9b22ed1c92eca60c66f8ccac250d10afad1ecbe953f234dc2b0ad7bec32011df604619dab53311cc23dac79e7e17ea987d319d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9ae7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x7, 0x36, 0x5, 0x2, 0x4}, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x7}}}}, @m_gact={0xd4, 0x14, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x169d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xffff, 0x20000000, 0x4, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7b9, 0x7, 0x6, 0xfffffffd, 0x3}}]}, {0x69, 0x6, "0ceaa2d51ce29f6c4dddf3e2f85980b8f90d550cfae4f5f1958ecebf8984d7c6842e5d55ca69ecca1ce2d0ecb372717684408618160622adf877125f8283b75de4458b820af46ead95de636f9da59299ebee98d974a7c602e549eb4034ede97e56db019830"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x6}}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x4}]}}]}, 0x3bcc}, 0x1, 0x0, 0x0, 0x44000}, 0x240080d5) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202020202020a0882848b960c121824"], 0x36) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000400)={'veth1_virt_wifi\x00', @ifru_mtu=0x80000000}) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) open_by_handle_at(r1, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000000)=0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xb1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=@deltfilter={0x3bcc, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0xffff, 0x1}, {0xb, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @filter_kind_options=@f_bpf={{0x8}, {0x326c, 0x2, [@TCA_BPF_ACT={0x3260, 0x1, [@m_pedit={0x2f70, 0x1e, 0x0, 0x0, {{0xa}, {0x2e58, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xfc85, 0x8000, 0x3, 0x6, 0x80000000}, 0x5, 0x9, [{0x8001, 0x10000, 0xff, 0x7, 0xcb, 0x7ff}, {0x0, 0x200, 0x0, 0x3, 0x2, 0x1ff}, {0x7, 0x100, 0xffffffff, 0x8, 0xbcb1, 0x34749126}]}, [{0xd8, 0x10000, 0x7, 0x0, 0xba, 0x2b0}, {0x3, 0x4, 0xff, 0x2, 0xfff, 0x1}, {0x9, 0x4d22, 0x9, 0xeda, 0x7000, 0x5}, {0x0, 0x5, 0x0, 0x1}, {0x1, 0xfffffc01, 0x6, 0x7f, 0xfff, 0xfffffff7}, {0x1, 0x10000, 0x1c6000, 0x5, 0x8000, 0x3ff}, {0x3, 0xc1, 0x4, 0x80000000, 0x9, 0x2d}, {0x5, 0x0, 0xfffffff7, 0x9, 0x9, 0x5}, {0x0, 0x1, 0x800, 0x2, 0x9b48, 0x4}, {0x2, 0x9, 0x7ff, 0x8, 0x8, 0x7}, {0x8, 0x4, 0x7, 0x1, 0x6, 0xe9e}, {0xc5, 0x3, 0x8, 0x7, 0x3, 0x8}, {0x401, 0x7ff, 0x1, 0x10001, 0xfffffff9, 0x8}, {0x4, 0x0, 0x9, 0x1, 0x8, 0x9}, {0x5, 0x80, 0x4, 0x7f, 0x7f, 0x8001}, {0x10001, 0xfffff219, 0x3, 0x40, 0x40, 0x7}, {0x3, 0x100, 0x7f, 0x8, 0x101, 0x9194}, {0x4, 0x61be, 0x7fffffff, 0x10001, 0xff, 0x7f}, {0x7fffffff, 0x4, 0x0, 0x2de7, 0xffffffb2, 0x8}, {0x1, 0x5, 0x7c000, 0x4, 0x7, 0x8}, {0x5, 0x4504, 0x1, 0x10000, 0x800, 0x185b}, {0x2, 0xd3d, 0x9, 0x101, 0x6}, {0x1, 0x0, 0x2, 0x0, 0x8, 0x10000}, {0x4, 0x6, 0x6, 0x0, 0x0, 0x8000}, {0x9, 0x0, 0xb84d, 0x9ed, 0x9}, {0x5, 0x1, 0x7305, 0x10001, 0x0, 0x7}, {0x0, 0x9, 0xc0000, 0x0, 0x1, 0x10000}, {0x8, 0xfffffffe, 0x1, 0x1f, 0x7, 0x4}, {0x7, 0x80000001, 0xffff8001, 0xaf2, 0x8000, 0x7}, {0x9, 0x0, 0x1, 0x0, 0x5, 0x1ff}, {0xfffffff9, 0x2, 0x5, 0x16d1f983, 0x8000, 0x9}, {0x100, 0x0, 0x8, 0x7, 0xfffffff8, 0x7}, {0x1, 0xfffffff8, 0x9, 0x8, 0x1a, 0x7c}, {0x7a, 0x2, 0x9, 0x3f, 0x3, 0x1ff}, {0x8da3, 0x3f, 0xf6, 0x5, 0x7, 0xfffffffd}, {0x26d, 0x2, 0x7f4c, 0x9, 0x4, 0x4}, {0xfffffffc, 0x401, 0x9, 0xbe38, 0x7fffffff, 0x1}, {0x5, 0x6, 0x8, 0x4, 0x6, 0x2000000}, {0x20, 0x2, 0x10000, 0x0, 0x1}, {0x40, 0x2, 0x1, 0x80000000, 0x7fff, 0x20}, {0x7fff, 0x48000000, 0x20, 0x1, 0x7, 0x2}, {0x5, 0x0, 0x12, 0x100, 0x3, 0x1}, {0x2, 0x10000, 0xd0, 0x81, 0x800, 0xc721}, {0x1, 0x6, 0x8, 0x6, 0xd1b}, {0x284, 0x100, 0x1, 0x8c, 0x80, 0x80000000}, {0x40000000, 0x1000, 0xff, 0x80000000, 0x5, 0x15df}, {0x65, 0x6, 0x1f, 0x80, 0x7, 0x3}, {0x3f, 0x8, 0xfffffff7, 0xd90, 0xfffffff8, 0x9}, {0x6, 0x3ff, 0x4, 0x8001, 0x2}, {0x1, 0x0, 0xe1, 0x1ff, 0x6, 0xfff}, {0x4, 0x5, 0x40, 0x7, 0x1f, 0x10000}, {0x81, 0x4, 0x18, 0x80000001, 0xada, 0x5}, {0x6, 0x0, 0x17aa, 0x0, 0x8, 0x7f}, {0x200, 0x45, 0x0, 0x2, 0x5, 0x8000}, {0x5, 0x1d, 0xe8, 0x1, 0xd7, 0x9}, {0x7fffffff, 0x4, 0x2, 0x5, 0x10000, 0x101}, {0x7fffffff, 0x5, 0x4, 0x3, 0x18, 0x4}, {0x200, 0x9, 0x5452, 0x0, 0x1, 0x6}, {0x9, 0x6, 0x6, 0x0, 0xfffffff7, 0x8}, {0x100, 0x8, 0x2, 0x80000000, 0x3, 0x18}, {0x382, 0x1, 0xff, 0x793c000, 0x7, 0x548}, {0x8c, 0xff, 0xffff, 0xfa0f, 0x1, 0x4}, {0x1000, 0xffff8001, 0x6, 0x318, 0x2, 0x10001}, {0x0, 0x8d, 0x8, 0x7, 0x9, 0x80}, {0x7, 0x6, 0x7, 0x4dd4, 0x7, 0x7}, {0x9, 0xc0000000, 0x1, 0x8001, 0x8, 0x1000}, {0x0, 0x40, 0x4, 0x5, 0x80, 0x7fff}, {0x80000001, 0x4, 0x9, 0x7fffffff, 0x86, 0x7}, {0x8, 0x100, 0xff, 0x1, 0x80, 0x1000}, {0x5, 0x5, 0x1b7, 0x841, 0x2, 0xfff}, {0x0, 0x6, 0x3, 0x5, 0xffffff80, 0x5}, {0xffff7fff, 0x2, 0x10000, 0x0, 0x1, 0xf4f}, {0x4, 0xffff, 0x4, 0x2, 0x80000001, 0x7}, {0x188, 0xfffff800, 0x6, 0x10001, 0xcd0}, {0x0, 0x1, 0x9, 0x9, 0xfffffffc, 0x3f}, {0xfffffd80, 0x3, 0x3, 0x8, 0x10000, 0x9}, {0x2, 0x80, 0x3, 0x5, 0x90, 0xfff}, {0x9, 0x20, 0x7, 0x0, 0x3, 0x7}, {0x5, 0x8, 0xed, 0x33, 0x7cf73b6d, 0x9f0}, {0x7a, 0x9, 0x2830, 0x0, 0x80000000, 0x50000}, {0x35, 0x2, 0x1100, 0xffffffff, 0x7fff}, {0x98, 0xffffffff, 0x7f, 0x0, 0x7fffffff, 0x4257ea9d}, {0x5, 0x10000, 0x10001, 0x2, 0x2, 0x6}, {0x4, 0x3, 0x80, 0x2, 0x40, 0x800}, {0x2e, 0x1f, 0x1f1, 0x2d, 0x2f0c, 0x4}, {0x2c5c, 0x3, 0x1, 0x5, 0x8000, 0x7}, {0x7f, 0xfffffff7, 0x5, 0x9, 0x4, 0x66}, {0x81, 0x7, 0x2, 0x81, 0x200, 0x1}, {0x20, 0x1a, 0x10000, 0x6, 0x496, 0x1000}, {0x3f, 0x101, 0xffffffff, 0x10000, 0x80ab, 0x6836ef29}, {0x1, 0xffffffff, 0x7, 0x0, 0x1, 0x3db}, {0x1ff, 0x1f, 0x8, 0x80000001, 0xffffffff, 0x3}, {0x9, 0x6, 0x2, 0x3ff}, {0x7, 0x6, 0x3474, 0x5, 0x40, 0x9}, {0x5, 0x7, 0x100, 0x3, 0x7f, 0x5}, {0x3000000, 0x1f, 0x2, 0x8, 0x9f70, 0x9}, {0x2, 0x1, 0x6, 0x5, 0xdaf5, 0xff51}, {0x800, 0x9, 0x4, 0x101, 0x7, 0x9}, {0x80, 0x7, 0xffffffff, 0x1000, 0x3a, 0xfffffffb}, {0x8001, 0xfff, 0x3, 0x9, 0x21, 0xa83}, {0x80, 0x9, 0x5, 0x3, 0x2, 0x6}, {0x719c, 0xc627, 0x4, 0x8, 0x0, 0x2}, {0x7, 0x8000, 0x742, 0x8, 0x5, 0xfdb}, {0x80, 0x9, 0x6, 0x9, 0x6, 0xfffffffe}, {0x7fffffff, 0x32, 0x400, 0x400, 0x7ff, 0x8}, {0x6, 0x3c8e, 0x1ff, 0x16d5, 0xffffffff, 0xbdb}, {0x3, 0x1, 0x7, 0x1f, 0x8, 0x7}, {0x36d1, 0x0, 0xe2db, 0x2, 0x0, 0x6}, {0x7, 0x6, 0x8, 0x1, 0xfffffffe, 0x9}, {0x3, 0x1, 0x3, 0xfffffffc, 0x1000, 0x5}, {0x3f, 0x5, 0x5, 0x40, 0x5, 0x6f}, {0x1046, 0x8, 0x2466, 0x8001, 0x9, 0x9c}, {0x4, 0xd8, 0xe, 0x40, 0x4, 0x9b9}, {0xff, 0x3, 0xbbda, 0x5, 0x80, 0x7}, {0x6, 0x0, 0x5, 0xc294, 0xffffffe1, 0x5}, {0x6, 0x8, 0xffff, 0xa, 0x7, 0x2}, {0x8, 0x3f, 0x2, 0x3, 0x0, 0x8}, {0x1000, 0xbba, 0x1, 0x2, 0x5, 0x3}, {0x0, 0x408, 0x5, 0x5, 0x3, 0x8}, {0x16, 0x5dfb, 0x0, 0x2, 0x3, 0x81}, {0x7f, 0x2, 0x2, 0x8, 0x2, 0x5}, {0x71e, 0x3, 0x4, 0x4}, {0xffff, 0x37f, 0x6, 0xfff, 0x8001, 0x40}, {0x8, 0x8, 0x2, 0x3d, 0xcf, 0x2}, {0x32b, 0xd53b, 0x9, 0x2, 0xffff, 0x1}, {0xd99, 0x3, 0x3, 0x8, 0x2}, {0x6, 0x6, 0x7301b55d, 0x4, 0xfffffff7, 0x3}, {0x8ad7, 0xff, 0xfffffe00, 0x100, 0xc0e7, 0x800}], [{0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x2}, {}, {0x3}, {0x2}, {0x3}, {0x3}, {0x4}, {0x3}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0xd6bc7bf1db8a15e2}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0xe97769f022a852c2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x4ef9aac96bbde2a0}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x6, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0xf5c1fa676eff650}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x7c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x1, 0x0, 0x4, 0x1800, 0x5}, 0x20, 0xff, [{0x5, 0x4, 0x7, 0x1, 0x3, 0x2}, {0x0, 0x1f, 0x0, 0x4, 0x4, 0x5}, {0x1, 0x6, 0x200, 0xd9a6, 0x1, 0x7b3b}, {0x1, 0x1, 0x3, 0x80000001, 0x3, 0x2d7}, {0x3f, 0xfffff801, 0xc80e, 0x6, 0x1, 0x8}, {0x5, 0x401, 0x6c, 0xfffffffe, 0x8000, 0xbb}, {0x7ff, 0xff, 0x80000000, 0x4, 0xfff, 0x6}, {0x2, 0x4, 0x4, 0x800, 0x80, 0x80}, {0x2, 0x7fffffff, 0x34, 0x0, 0x1c00000, 0xfffffffc}, {0x7fff, 0x7fffffff, 0x3ff, 0x9, 0x40, 0xd9cf}]}, [{0x3f, 0x348, 0x5, 0x782ceb35, 0x1, 0x1}, {0x0, 0xffff8000, 0xdb, 0xfffff000, 0x6, 0x6991}, {0x0, 0x7, 0x5, 0x92, 0x8001, 0x8}, {0x5, 0xdd22, 0x7fffffff, 0x6, 0x2f, 0x7ff}, {0x5, 0x4, 0x5, 0x39f, 0x5}, {0x7, 0x27f, 0x1, 0x0, 0xca6d, 0x5}, {0x2, 0x7, 0x0, 0xfffffffc, 0x100, 0x8}, {0x5, 0x433e, 0x3, 0x1, 0x20b, 0x4}, {0x2, 0x1, 0xfffffffe, 0xfffffffa, 0x100, 0x800}, {0x0, 0x3ff, 0x81, 0x1ff, 0x0, 0xfc}, {0x6, 0x91, 0x5, 0x7, 0x7fff, 0x7ff}, {0x6, 0x0, 0x5, 0xa38, 0x6, 0x4}, {0x401, 0xffff, 0x2, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x7, 0x800, 0x0, 0xe83f}, {0x0, 0x3ff, 0xfffffffa, 0xfffff800, 0x1, 0x80000001}, {0x3, 0x1800000, 0x917e, 0x5, 0x3, 0x80}, {0x8, 0x0, 0x1f5, 0x8, 0x828}, {0x1, 0x1, 0x6, 0xfff, 0x5, 0x40000}, {0x2, 0x1, 0x4, 0x0, 0x5, 0x8000}, {0x7f, 0x4, 0x7fffffff, 0xffff, 0xfffffffc}, {0xffffffff, 0xfffffff9, 0x1, 0x1, 0x7f, 0x4}, {0x10001, 0x4, 0x5, 0x200, 0xff, 0x2}, {0x3248, 0x2, 0xd8, 0x6, 0x7}, {0x89, 0x40e, 0x8, 0x37, 0x7ff, 0x1}, {0xe7e, 0x8000, 0x5, 0x3, 0x168c, 0x7}, {0x0, 0x2, 0x6, 0xfffffffa, 0x80000000, 0x401}, {0x7, 0xd2, 0x7, 0x7fffffff, 0x8000, 0x8000}, {0x3f, 0x3, 0x0, 0x100, 0x1, 0xffffffff}, {0x389a, 0xffffffe2, 0x4, 0x80, 0x1a, 0x3f}, {0x6a8000, 0x5, 0x1, 0x0, 0xcde}, {0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffff9}, {0x7ff, 0x0, 0x401, 0x3, 0x10001, 0x40}, {0x4, 0xfff, 0x7fff, 0x5, 0x3f, 0x1}, {0x5, 0x7, 0x8001, 0x2, 0x1, 0xffffffff}, {0x9c, 0x0, 0x10, 0x3f, 0x7, 0xffff}, {0x7, 0x1, 0x0, 0x8, 0x1, 0x401}, {0xe87, 0x4, 0x101, 0x7ff, 0x1, 0x910}, {0x7, 0x7, 0x9, 0x4, 0x400, 0xffffffff}, {0xf40e, 0x1, 0x7fffffff, 0x20, 0x80, 0x2}, {0x800000, 0x6, 0x5dd7447b, 0x0, 0x7b, 0x5}, {0x3e, 0x40000000, 0x84, 0x8, 0x1f, 0x4}, {0x8, 0x3, 0x8, 0x0, 0x2, 0x1}, {0x2, 0xab, 0x1, 0x4, 0x9, 0x3f}, {0x7fff, 0x80000001, 0x3, 0x17, 0x9, 0xfffff001}, {0x0, 0x6, 0x10000, 0x1f, 0xfffffffd, 0x400}, {0x2, 0x4, 0xffffff80, 0xed, 0xfffffff8, 0x7f}, {0xffffffff, 0x8, 0x3, 0x1a, 0x20, 0x5}, {0x4, 0x1, 0x4, 0x7, 0xae, 0x3f}, {0xffffcd5e, 0x3, 0x6, 0x1f, 0xfff, 0xffffffff}, {0x80, 0x7, 0x5000, 0x8, 0x5, 0x2}, {0x7fff, 0xa573, 0xc22, 0x6, 0x2, 0x5}, {0x8, 0x6, 0x9, 0x1, 0x9f, 0x6}, {0xd23, 0x6, 0x0, 0x1, 0x2, 0x7}, {0x4, 0x0, 0x0, 0x40, 0x9, 0x1ff}, {0x6, 0x8, 0x6, 0x5, 0x9}, {0x0, 0x1, 0x9, 0x101, 0x7bad, 0x10000}, {0xbbc1, 0xfffffff9, 0x2, 0x14, 0x0, 0x7}, {0x0, 0x0, 0xffff7fff, 0x15, 0x2, 0x9}, {0x4, 0x5, 0x7, 0x807c, 0x9, 0x1f}, {0xfffffff9, 0x0, 0x6, 0x316297a3, 0x4, 0x10000}, {0x2, 0x3ff, 0x8000, 0x5, 0x6, 0x2}, {0x6, 0x7, 0x0, 0x1, 0x7, 0xb2}, {0x5, 0x3ff, 0x7, 0x43ee47cd, 0x100, 0x7f}, {0x4a, 0x9, 0xf6b, 0x7f, 0x400}, {0x6, 0x3ff, 0x2, 0x7ff, 0xb3, 0x9}, {0x7, 0x5, 0x2, 0x8001, 0xfffffe00, 0x29}, {0x2, 0x6, 0xebb, 0x9, 0x8, 0x3}, {0x800, 0x3, 0x1, 0x8000, 0x80000000, 0x8a8}, {0x1f, 0x200, 0x0, 0x5, 0x7, 0x7}, {0x401, 0x227, 0x3, 0x9, 0x5, 0x1f}, {0x3ac00000, 0x5, 0xa5, 0x3ff, 0xffff, 0x9}, {0x9, 0x3, 0xffffffff, 0x0, 0x1, 0xfffffff9}, {0x194, 0x7, 0x8, 0x7fffffff, 0x1, 0xffffffff}, {0x8afe, 0x3f, 0xe7, 0x0, 0xd62, 0x100}, {0x20, 0x1, 0x7f, 0xfffffffb, 0x6, 0x20}, {0x9, 0x4, 0x200, 0x3, 0x8, 0x40000000}, {0xff, 0xd306, 0x2, 0x3, 0x6, 0x7}, {0x8001, 0x3, 0x1000, 0x3, 0x33}, {0x0, 0x2, 0x8, 0x1, 0xb56, 0x48d}, {0x3, 0x1, 0x1, 0x5, 0x81, 0x5}, {0x3, 0x1000, 0x1ff, 0x6b2, 0x9, 0x1}, {0x9, 0x2, 0x7fff, 0x2, 0x0, 0x7}, {0x7, 0x5, 0x3f, 0x0, 0x101, 0x3ff}, {0x2, 0xffffffff, 0x1, 0x2, 0x8, 0x3}, {0xfffffd0b, 0xe00000, 0x4cf, 0x3, 0x8, 0x3}, {0xffffffc0, 0x100, 0x7, 0x8, 0x0, 0x5}, {0x400, 0x6, 0xc5, 0xfff, 0xfffff001, 0x1}, {0x4, 0x8, 0x3, 0x8000, 0x4, 0x6}, {0xff, 0x0, 0x1, 0x4, 0xffffffff, 0x101}, {0x3ff, 0x904, 0x80, 0x8001, 0x4, 0x5}, {0x7, 0xffffffc0, 0x80000001, 0x7ff, 0x81, 0x8001}, {0x9, 0x9, 0x6, 0x0, 0x4, 0xf74d}, {0x800, 0xfff, 0x3, 0xa293, 0x5, 0x3f}, {0x3ff, 0x2, 0xfffffffb, 0x6, 0x7ff, 0x1ff}, {0x100, 0xfffffffc, 0x60, 0xfffffffe, 0x10001, 0x4}, {0x2, 0x3, 0x3f, 0x200, 0x1, 0x3ac9}, {0xdea, 0x0, 0x26f101b6, 0x40, 0x2, 0x8000}, {0x99f, 0x1f, 0x8, 0x1, 0x7f, 0x4}, {0x2, 0x1000, 0x1, 0x5, 0x3, 0xffffffff}, {0x254, 0x9, 0x1, 0xfffffff7, 0x1, 0x400}, {0x0, 0x17, 0x7, 0x1, 0x80000001, 0x2}, {0x4f, 0x0, 0x4, 0x8f6, 0xfffffffc, 0xdf}, {0x87c, 0x5, 0x7, 0x0, 0x3, 0x2dd}, {0x80, 0x3, 0x400, 0x8c21, 0xffff0000, 0xac}, {0x7, 0x5, 0x5, 0x2c5, 0x8, 0x9}, {0xa54, 0xfff, 0x1d, 0x100, 0x3, 0x3}, {0xffff, 0x2, 0x6e, 0xfffffffe, 0x1, 0xec4}, {0x9, 0x6, 0x9, 0x8, 0xfffffff7, 0x10001}, {0xffffffff, 0x3f, 0x0, 0x1, 0x4, 0x9}, {0xa0, 0x5, 0x8, 0x356, 0x81, 0xffffffff}, {0x3, 0x1, 0xfffffff8, 0x3, 0xfdd, 0xaf8}, {0x6, 0x7, 0x80000001, 0x3, 0x9, 0x1ff}, {0x0, 0x5, 0x3ff, 0xf2eb, 0x3, 0x2}, {0x101, 0xd05, 0x1, 0x7, 0x7fff, 0x8}, {0x0, 0x0, 0x26b, 0xfffffff9, 0x40000, 0x582c}, {0x0, 0xd9, 0x3, 0x6, 0x2445, 0x7ff}, {0x4, 0x5, 0x4, 0x8e, 0x7fffffff, 0x2b4}, {0x959, 0x3, 0x1, 0x50, 0x4, 0x8}, {0xffffffe1, 0x9, 0x7, 0x6, 0x91f, 0x5}, {0xf5, 0xe0ac, 0x9, 0x100, 0xfffffff7, 0x2}, {0x4, 0xff, 0x7ff, 0x7cfc, 0x1, 0x7}, {0x5, 0x7, 0x100, 0x3f, 0x9, 0x3f}, {0x6, 0x40, 0x8, 0x3, 0x3, 0x8}, {0x81, 0x9, 0x8, 0x2, 0x9, 0x80000000}, {0x800, 0x3, 0x5, 0x1, 0x2, 0x7f}, {0x5, 0x7, 0xfff, 0xfffffff8, 0x9, 0x2}, {0xffffffe1, 0x3, 0x2, 0x1, 0x0, 0x15c2000}, {0x800, 0x7ff, 0x4, 0xd8f, 0xfffffffe}], [{0x0, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1fa9bf5b4f97ca3e}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0xdb93993d53d6dfc}, {0x5, 0x1}, {0x0, 0x1}, {0x5d2a5ff5e3ec06c0}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x3}, {}, {0x4}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xff, 0x8000, 0x6, 0x5, 0xfff}, 0x80, 0x2, [{0x49, 0x3, 0x5, 0xfffffbff, 0xf1f, 0x8000}, {0x5, 0x1f, 0x8001, 0x101, 0x9, 0x38f}, {0x2, 0x3, 0x6, 0x101, 0xffffff7f, 0xfffffe01}, {0x1000, 0x5, 0x6, 0x37, 0x3, 0x3ff}, {0x1, 0x3, 0x100, 0xfd7b, 0x100, 0x200}, {0x33, 0xfffffffa, 0x7, 0x80000001, 0x80, 0xfffffc01}, {0x9, 0x4, 0x2, 0xfffffff7, 0x101, 0xffffff01}, {0x401, 0x0, 0x1, 0x4, 0x9, 0x8}]}, [{0xff, 0x2, 0x9, 0x20, 0x8, 0x100}, {0x5, 0x4, 0x8001, 0x7, 0x2, 0x1}, {0x2, 0x1ff, 0x101, 0x5, 0x1, 0x4}, {0x0, 0x1, 0x6, 0x1, 0xfffff801}, {0x80000001, 0x3, 0x0, 0xd273, 0x5, 0x1}, {0x7, 0xffffffff, 0x1, 0x100, 0xffffffff, 0x3f}, {0x200, 0x5, 0x7fff, 0xfffffffe, 0x8000, 0x51e}, {0xe9, 0x4, 0x2, 0x0, 0x1, 0xffff64f2}, {0x1, 0x7, 0xfffffff9, 0xaa, 0x8374, 0x8}, {0x6, 0xfff, 0xff, 0x1000, 0x0, 0x2}, {0x8000, 0xff, 0x80000001, 0x8, 0x9, 0x1ff}, {0xe16, 0xf5, 0x400, 0x1ff, 0x6, 0xff}, {0x101, 0xe39, 0x8000, 0x35dc, 0x2, 0x7}, {0x8000, 0x1, 0x9, 0x5, 0x1, 0xb333}, {0x3, 0x3, 0x300000, 0x1f, 0x5f8, 0xff}, {0x10001, 0x2, 0x3ff, 0x4, 0x8, 0x673d}, {0x20, 0x1, 0x8, 0x400, 0x12, 0x5}, {0x7fff, 0x6, 0x1000, 0x3, 0x1, 0x2}, {0x3, 0x894, 0xff, 0x0, 0xfffffffd, 0x9}, {0x101, 0x2, 0x9, 0x4, 0x2, 0x9a}, {0x7, 0x2, 0xfffffffa, 0x1, 0x2, 0xecf}, {0x7fff, 0x400, 0x100, 0x4, 0xff, 0x18}, {0x1, 0x8, 0x7fff, 0x2, 0x800, 0x6f253f2b}, {0x1, 0x3, 0x200, 0x9, 0x10000, 0x6}, {0x40, 0x2185bd1d, 0x18, 0x1, 0x3, 0x400d}, {0x4, 0x2, 0x1, 0x6567cedd, 0x2, 0x100}, {0x9, 0x2, 0x9, 0x3, 0x3a, 0x5}, {0x1, 0x7, 0xff, 0x0, 0x81, 0xe0000000}, {0x40, 0x3f, 0x2, 0xebc2, 0x7, 0x7}, {0x5, 0xfffffffe, 0x80000001, 0x7fff, 0xea, 0xde}, {0x80000001, 0x2, 0xffff, 0x5, 0xbf45, 0x3f}, {0x8000, 0x4, 0x81, 0x6, 0xfffff800, 0xffff}, {0xfffffe01, 0x5966, 0x9, 0x8, 0xfcca, 0xc6a1}, {0x2, 0x0, 0x7, 0x7}, {0x59ce, 0x9, 0x9, 0x40, 0xbb60, 0x10000}, {0x5, 0x4, 0xffffffff, 0x3f, 0x0, 0x10000}, {0x800, 0x1, 0x81, 0x1, 0x0, 0x8}, {0x9d, 0x20, 0x81, 0x3f, 0x80, 0x4}, {0xff, 0x1, 0x6, 0x3, 0xffffffff, 0x1000}, {0x36f, 0x5, 0x6, 0x40, 0xfffffffa, 0x6802}, {0x0, 0x9, 0x1000, 0x331, 0x9, 0x515}, {0x7fff, 0x3, 0xffff0000, 0x800, 0xfffffffe, 0x7e8}, {0x7fff, 0x9, 0x80000000, 0x7, 0x9, 0x800}, {0x6, 0x7, 0x3, 0x9, 0x9, 0x2b2}, {0x2, 0x3, 0x4, 0x6, 0x0, 0x2}, {0x5, 0x3, 0x1000, 0x3, 0x1, 0x40}, {0x7, 0x1, 0x7ff, 0x562, 0x1}, {0x3189, 0xffffffc7, 0x4, 0x1, 0x3, 0x6}, {0x637e, 0x8, 0x0, 0x14, 0x7ff, 0x1f}, {0x7, 0x0, 0x1, 0x4, 0x4, 0x4}, {0xfff, 0xffffffff, 0x79, 0x4, 0x9, 0x5}, {0x3, 0x80000001, 0x2, 0xe980, 0x3, 0x4}, {0x3c2, 0x400, 0x2b, 0xfff, 0x7ff, 0xa0}, {0xfffffff8, 0x7, 0x9, 0x8, 0x475, 0x4}, {0x7d0, 0x5, 0x0, 0x8, 0x9, 0x400}, {0x7, 0x0, 0x9, 0x0, 0x80000001, 0x3f}, {0x2, 0x6, 0x8, 0x0, 0x8, 0xffffffff}, {0x7, 0x14, 0x10000, 0x2, 0x0, 0x4}, {0x3, 0x8, 0x8, 0x6, 0xfffffffd, 0x4}, {0x9, 0x9, 0x1, 0x200, 0x200, 0x796}, {0x3, 0x734c, 0x2, 0x100, 0x5, 0x1}, {0x2638, 0x9, 0x0, 0x9, 0x3, 0x6}, {0x80, 0xfff, 0x8, 0x0, 0xffffffff, 0x2}, {0x9, 0x8001, 0x8001, 0x10001, 0x7f, 0x9}, {0x3ff, 0xe62, 0x25000000, 0xd4, 0x1, 0x3}, {0x5, 0x6, 0x3, 0xfd, 0x0, 0x1a28}, {0x1, 0x1f, 0x1ff, 0x7f, 0x7f, 0x2}, {0xc03, 0x71, 0xfffffff7, 0xffff, 0x2, 0x9f0f}, {0xffffffff, 0x400000, 0x3, 0xe3, 0x6, 0x1}, {0x7ff, 0x0, 0xbcaf, 0x5b0, 0x81, 0x4}, {0x3, 0x6, 0x5, 0x70, 0x4, 0x9}, {0x7, 0xaa, 0xffffffff, 0xc0000000, 0x8000, 0x4}, {0x5, 0x6, 0x9, 0x5, 0xed, 0x200}, {0x1ff, 0x7, 0x8b33, 0x6, 0xff, 0x99}, {0x7, 0x1, 0x4, 0x1ff, 0x4, 0x2}, {0x4, 0x0, 0x2c44, 0x4c54, 0x5}, {0x1, 0x9, 0x7, 0x0, 0x1000, 0x1000}, {0x4, 0x8, 0x4, 0x11, 0x40000000, 0x5a96}, {0xfffffff8, 0xfffffbff, 0x1800, 0x8000, 0x3, 0x9}, {0x1, 0x2582, 0xffffffff, 0xffff, 0x7fff, 0x800}, {0x2, 0x7fff, 0x81, 0x4, 0x80000000, 0x6}, {0x5, 0x1, 0x0, 0x401, 0x4, 0x6}, {0x1, 0x6, 0x1, 0x6, 0x7f, 0x81}, {0x8001, 0x1b8b, 0x0, 0x59, 0x9, 0xff}, {0x80, 0x10001, 0x7f, 0x1197995c, 0xfffffffe, 0xfff}, {0x9, 0x8000, 0x2, 0x10000, 0x7ff, 0x401}, {0x7fff, 0xcb, 0x0, 0x1a, 0x1, 0xe}, {0xcac, 0x846, 0xf356, 0x3ff, 0x3, 0x8000}, {0x2, 0x1, 0x25f, 0x401, 0x2}, {0x2b, 0x1, 0x1000, 0x9, 0x1f, 0x3f}, {0x400, 0x8, 0x8000, 0x1, 0xbd, 0xffffff0b}, {0x6, 0x3, 0x1ff, 0xff, 0x0, 0x5d4}, {0x8, 0x3, 0x3f, 0x8, 0x40, 0x21}, {0x800, 0x6c, 0x5, 0x800, 0x6, 0xffffffc1}, {0x2, 0xd10, 0x6383, 0x2, 0x8, 0x7}, {0x0, 0x6, 0x8, 0x1f, 0x8, 0xf7}, {0x80, 0x8, 0x2, 0xfff, 0xbb47, 0x6}, {0xd4, 0x400, 0x7, 0x3, 0x8000, 0x7fffffff}, {0x80000000, 0x0, 0x0, 0x4, 0x6, 0x8}, {0x0, 0x1, 0x1, 0x7, 0x1f, 0xff}, {0x1, 0x7, 0x0, 0x50, 0x8001, 0x101}, {0xe2a, 0x4b, 0x5de, 0x8, 0x6, 0x3f}, {0x8e, 0xc00000, 0xb6, 0x4000000, 0x2, 0x1}, {0x6, 0x5, 0xa7d, 0x80000001, 0x9, 0x4}, {0x80000000, 0x7, 0x2a, 0x3, 0x7ff}, {0x10001, 0xb69, 0x0, 0x7, 0x7, 0x8000}, {0xffff, 0x0, 0x803, 0x5, 0x7, 0x1}, {0x3, 0x4, 0x7, 0x4, 0x8001, 0xc38f}, {0xfffffffc, 0x5, 0x6, 0x1, 0x93da, 0x3ff}, {0x8, 0x80, 0xe11, 0x8, 0x0, 0x9}, {0xfffffff9, 0x7, 0x3, 0x8000, 0x5889, 0x9}, {0xfff, 0x7fff, 0x0, 0x6, 0x1, 0xfffe00}, {0x5, 0x4c1f, 0x3, 0xffffffff, 0x48, 0x8}, {0x0, 0x907, 0xfff, 0x1c, 0x8, 0x8}, {0x5, 0x0, 0x1, 0x9d, 0x1af2, 0x7fffffff}, {0x1, 0x1, 0x2, 0x7, 0x7, 0x7}, {0xffffffff, 0x8, 0x0, 0x0, 0x2, 0x3}, {0x1, 0x9, 0x6, 0x7, 0x2, 0x8}, {0x0, 0x4, 0x80000001, 0x5, 0x6}, {0x9, 0x401, 0x80000001, 0x8, 0x5}, {0x4c, 0xe8, 0x7, 0x7, 0x9}, {0x401, 0x0, 0x10001, 0xdd, 0xffffffff, 0x3}, {0x0, 0x59d, 0x4, 0x9e3, 0x7ff, 0x4}, {0x2, 0x9, 0x9, 0x7fff, 0x4, 0x8}, {0x6, 0x2, 0x8001, 0xff, 0x80, 0x2}, {0x8001, 0x2, 0x7, 0x9, 0x40, 0x200}, {0x3ff, 0x3f, 0xfffffff9, 0x80000000, 0x2, 0x4f}, {0x6, 0x2, 0x2, 0x5aaf, 0x8, 0x7}], [{0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x6615120342f2de14}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x2}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x3}, {0x4, 0x2575b3b2ed807c92}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x140, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0xef, 0x6, "46691ab7484bf9389fbe8830b0912621f608024a1483f3023f51235ad1bc69a8d9a2470a5262251eac08e3d42647efd953fd59a8cc21a25d5666b1db266e890a342a49a3502f72315c290bf7e079fba892028a5d6f102f11ae8a45b61abec64307b27005c179e64be19deecd7b5d17fefe6f9aa49b01e40262d4f29484ad7049c078aa4f40ec27d2612bd146bba51f4254bf610bb0c5ccb77882ccd599bf0d44a8515f82e3abd0bb28c8ff5a007d707175829a1c273119d8b27816cf18872d7e69b9776a5d813f5e080312b50df6a4e1e5f260ba1b4f19d2072461ba8fa4086595a0ce90e46d2b82657658"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x11c, 0xa, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0xd7, 0x6, "a097c9affaa2b5bc9c55196840173e2974e0f303e482062a97fda667ec96a5bb216ea5c05bafdddde15844248eba7ce008c51f40ce2c64e9429c28a39110710480ef8220ea64212fb3866dbaf9353154aedb8c38a1861255f7e7fa49c546a854560e7440337c4a9240229b83c3b7f2c81bd1c39e20df0f9f7144c8d53a3b732c4ad393d892938b163d5e0e807f3963464e66dcf5bd37245df20530823181141ca6f2ca73b3ef402b6a7579ddea7ea6d9ec6802db7de6900fc89d3d6f67486eac9b7bdbe81dada8f729ebc3286c56ca7d22aabd"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xb4, 0x11, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0x7, 0x4, 0x1000, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x800}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x45, 0x6, "e040250aa7ac343505c22870ac5e98d57033d0b2888158179063ef7cee692d92633db39a5a1e5c210d310f214dfc8a7feff801b633fc4398990c79d6f7db4cdbfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x11c, 0x14, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x401, 0xfff, 0x20000002, 0x6, 0xbe0}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0xcf, 0x6, "716466a88b72f7b870b5a34b05f985aee5da901dd68059a53c82cf95ebded6b01cc4ee45b3d53611d2e513b14fe1f4effd67a083cc51791640843621c12ea65eb8253f093b2b9894d03ab79b7c53bd5eab16bd3489f3db84fc49fe47a6211ab0a8d3312f27092695f524aa591f6a99eb9bb019b70cedbf6d52c5846c15eff1212d41b3c76e41d1d4338ebc4de01ebc5f795e2a4e721a51bd769f1b8f61fd82a6b51c2efcbb3b2d5d659546112c31ff3dd1f7a306a314130eb910bd0bb032496d515fd196fe32573528180a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @filter_kind_options=@f_basic={{0xa}, {0x8f8, 0x2, [@TCA_BASIC_EMATCHES={0xf8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xd990, 0x8, 0xff}, {0x4, 0x1, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x7ff}, {0x9d, 0x2, 0x400, 0x0, 0xa}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x3}, {0xb9, 0x7, 0x0, "1568097adca5dd"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1f, 0x8, 0x2}, {0x3, 0x0, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x6}, {0x1000, 0x80000001, 0x443, 0x8001}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x1, 0x4, 0xff36}, [@TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="6b0880dce7", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="9b", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="6ec08f09", @TCF_META_TYPE_VAR=';:']}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="a141", @TCF_META_TYPE_VAR="025593646ff488bb03", @TCF_META_TYPE_VAR="09b035790c146bb2"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x2}, {0x5, 0x5, 0x7b, 0x0, 0x0, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1f}}]}, @TCA_BASIC_EMATCHES={0x198, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8001, 0x3, 0x3ff}, {0xffff, 0x100, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0xffff, 0x101, 0xfff, 0x7, 0x8}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfffd, 0x8, 0x7}, {0xffffffffffffffff, 0x3, 0x7}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x40}, {0xc3, 0x8, 0x1, "f82207294e4aad62"}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0xb1d}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x720, 0x2, 0x3c8}, {0x3f, 0x9, 0x2, "a4c54321770dfa2679"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0x4, 0x3, 0x5}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_CONTAINER={0xc4, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x7fff}, "40b845552c88b98b87771ed606b082516ccd80c1a832de62120a9e13ccea61e4ac052f10e752a4d08c4bc0007118542ef7457dec1808dd58a8fec3757342922922b8fc989328272f1803ba6076e091268c18fbf0c6f201f7b2a6da90c8e337ce22f2c6b12a0dd1ff7664a7e80578983866b4ad82e3dbd4562ef4f46529d6f844a68a702c2b56dbef12afde055aa02add7a715a39b1f2bf7bdcaeb339504112553135c5a328d13e5dc3045fd789cd7a86a4f88e528a44"}}]}]}, @TCA_BASIC_EMATCHES={0x350, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x344, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0xc000, 0x0, 0xe8e}, "e46e3f0259d33c10c4116c2d5fe7d19e13a69a51a33b925a24cd8178cb68e7b2463785523f31ab4ad0fc3f097a"}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0xfffe, 0x4, 0x400}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b28bf80174d8", @TCF_META_TYPE_VAR="c1", @TCF_META_TYPE_VAR="f2566ef19bcc50549b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x0, 0x2}, {0x20, 0x9}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1ff, 0x8, 0x3}, {0x3, 0x1, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0xd02}, {0x4, 0x1, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xf71}, {0x81, 0x9, 0x8, 0x1, 0x7, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x200, 0x7, 0x8009}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x800}, {0x3f, 0x2, 0x937a, 0x4, 0x0, 0x0, 0x2}}}, @TCF_EM_IPT={0xb4, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9d, 0x5, "5de356711acc5ef99d46159dc04a8f772e8b3b9846088a0a627b3d0a13be9e352b3cff58831e1f10ea5ab360acaea926a72a9570a1fa409d4f465c71f7b20130157d7e3ca9369d7e5cfc92e8179280ea519a625b52e54840bae74dd131de704318c85272ed4472e59e0dc85246a5251d8575ef61f78b4f0072481c0aa150ef82f90c911af786cf6dde74583ef0f33e4e0e38708120d39e3dab"}]}}, @TCF_EM_CONTAINER={0xb4, 0x3, 0x0, 0x0, {{0x75ec, 0x0, 0xe6}, "67767d9bab46db125250425218719f5ec51b6810af48c7d75dffed1fad8c3e0972f78f96f70763c04e2e2af676b03e04811fef57f56b72a5d28d680eaa69b932ba04a40366dd3acb47a2104f39205b16fc5605ad182ebefac8c6ab7d7548257c411b77fc91564b428a6945af486ce562c28b7966638b7e0347b30632076fd81047eb6e7dac36f50cacbd82572a52488114b1bb1bb493e926df0ded5fe4e6f551ffb82467af839b"}}, @TCF_EM_CONTAINER={0x104, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x2}, "20a3f51ba6403d9a4eb8130071e3c1b86dd0376d8ba5e20c07728ee333ba2f23bfe78f41bbd0a737664240b40d6f3516646f6d1aa4c00d130d84a1c36e41d925df7ccea8814066c2a3818109a64e2af640401adf1753bf04c92ac0774919969d558458059be18d9b06e48ed8492ecec1a07f18064a4672bfae6e9cf19c03d136f8717430a32aa46ec711eae328a7ad4e6335d790edea447a1341f8ffe00a92b6a533eb850b90752d9a6a69267c0b4d468b65ae1a3c462f0cb50e9aaff89deefc78f982568e35b67fa20fa3a96712724e9d9f29f236b8f29857b21afb78379652e128b6ba12d3f9f083198384c2645f79b044eeef46cd"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffd1}}]}, @TCA_BASIC_EMATCHES={0xa0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x5}, {0x1, 0x2, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x1fc}, {{0x1, 0x1, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x70, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x1d5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}, @TCA_BASIC_ACT={0x26c, 0x3, [@m_skbedit={0x130, 0x15, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xb}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xa}}]}, {0xd3, 0x6, "9daac4e6e7b092c096ddceab5c1e10a4fd3d5a25ca7c82ec3425731744d8120eeb52c7f7d06afffab7d46a5e6d09adf4e5e1657cc910ea404e1ef2b9fccc320b4165d3e39de074b3fdf376b265ad08212b85c0cff9400c46d0145f015a61840e75ad545fd1f6c34fd33e3230a7387cb2e32bb9d0d3ad28995c143dd4e9b3a1ce8d60b5179ddd62d9cf7888af0a94e77cb746a3834b1096e35d59599d9b22ed1c92eca60c66f8ccac250d10afad1ecbe953f234dc2b0ad7bec32011df604619dab53311cc23dac79e7e17ea987d319d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9ae7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x7, 0x36, 0x5, 0x2, 0x4}, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x7}}}}, @m_gact={0xd4, 0x14, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x169d, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xffff, 0x20000000, 0x4, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7b9, 0x7, 0x6, 0xfffffffd, 0x3}}]}, {0x69, 0x6, "0ceaa2d51ce29f6c4dddf3e2f85980b8f90d550cfae4f5f1958ecebf8984d7c6842e5d55ca69ecca1ce2d0ecb372717684408618160622adf877125f8283b75de4458b820af46ead95de636f9da59299ebee98d974a7c602e549eb4034ede97e56db019830"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x6}}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x4}]}}]}, 0x3bcc}, 0x1, 0x0, 0x0, 0x44000}, 0x240080d5) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202020202020a0882848b960c121824"], 0x36) (async) [ 630.826842][T19264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 630.832131][T19264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000740)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @initial, {0x5, 0x1}}, @ver_80211n={0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x9, @default, 0x200, @void, @val={0x1, 0x6, [{0x18}, {0x16, 0x1}, {0x2, 0x1}, {0x1}, {0x36}, {0x4, 0x1}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x3, 0x80, 0x0, 0x3f, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x1c44}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x2}}, [{0xdd, 0xde, "8919783fea13fc3c88137c49c107030f704f3ffea87ff2e1af3d8cb331827f62dc21d95af3c73fc8497e68cf2a62b0a6cffd5fb33faa1ff00f9dde5ed8b69d7f2e67f143e60825e916212bb0e6bd9a1c858e474534b55b941062709a231b2b1d04edd79f755eea21e30ed5e6289ec59462bc9ff1ba41d4aa7687551311cf5362b55432a942637852965e31aed3b71faa2ebd7f5f4dbed95c574c445b105148ffb1e21a53e153d95160e52056a606838540c3175ef740f5ddf35244cce033ec54338dbdfc164a302f283e1585630ff136196dd0173d3eb95605581bfaef8b"}, {0xdd, 0x18, "beabc7b5ea5b74411d8fbb65cf6772e4050b232ebf0252fd"}, {0xdd, 0xb8, "c5a36ae92873d6aef4692395d84938a9e44ce7239e65cd7c291aa083d6f7f08a04c8b9549f3656890e14143cddf117fd426d9f39024d997ee5a16c98f6a18618219153979a7ca449a9811d6c499db2949f5ed5d8baad4cb37d5930a5c82898f05782e4e83ae26c1ca3b757152c0f29cd76e2bbed44a602eb05a2e7f734158c6b6d6d2bbdb4b7864977d0bf4bd64e09c896119920d3e05cf074c3da1f2ce6b58160105e3fa65c12d0143b9f94ec951061c08dc80d1f102da9"}, {0xdd, 0x1a, "9052b050ff687513fdd351c81f12720a5d6f614d39da0900ecb2"}, {0xdd, 0x47, "050ba082f617840ffd217282ad8bcc9f16984dbc1e59b89deec8689f5c1b79fb09321f1aa236ad98c7dd8910ecbd81cc77c1bb17b9a4f546764b63f132a6f4766d253ed9ddee85"}, {0xdd, 0xce, "01d8a0db6eb27ce56bcb4bc37a8008b7a806ff165a2833629ac1231e5035cc882fe61aa1b5b95189310b20000298bf9ea38181f5ecc0373e88eb4d074e77fb13295ef132ec36c67a96b9b844725af85b9155387ae1149c95990753b8c35b50f544980e1e00f6b2456b30769ce5b7cd1e14faba146bc5f497c1cfe8b4ade27e3390c787c52443f99aacf04157969c3ffb2de3ceeda2468570d0aff75d30337debaacdfbf7b0a2086f0dc19e2896789e2e0976ba73428261e71d81e5c5755f092e6bb641e5ca47b97d5e37e028c658"}, {0xdd, 0x94, "a13f2cea1a5deff4a40862b5c8ee36c71981776e5b4ee2838000c38c539f4a63c9d4031c780c6c9eae6afe70d67962a0977ff0a30bc19e546618f373e874d7e61b4571f3abf0363c712466be6a0cdec020c4abde0f138ed7dbdeb3dab50433fb13eb26c4e47953db2ed2094cc73c2a87ccf557a3e0295ad4613485b133c3e336c8c4bfae165167fd6cb0a9cf7722b1af318b8f04"}]}, 0x3d4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000100fedbdf25100000000800030070a24e3f969dd53f0a949d8a1d96aa2768245c72fe52fcff55fd84e03a19c47656b744e72aae20f4472c73d53050c3f5c8b247371b9c222eeb17c90e10b8374bdf", @ANYRES32=r4, @ANYBLOB="0c0099000100000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000100fedbdf25100000000800030070a24e3f969dd53f0a949d8a1d96aa2768245c72fe52fcff55fd84e03a19c47656b744e72aae20f4472c73d53050c3f5c8b247371b9c222eeb17c90e10b8374bdf", @ANYRES32=r4, @ANYBLOB="0c0099000100000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 630.854002][T19264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.859934][T19266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.864995][T19267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.870553][T19266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.882612][T19266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.887746][T19267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000740)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @initial, {0x5, 0x1}}, @ver_80211n={0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x9, @default, 0x200, @void, @val={0x1, 0x6, [{0x18}, {0x16, 0x1}, {0x2, 0x1}, {0x1}, {0x36}, {0x4, 0x1}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x3, 0x80, 0x0, 0x3f, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x1c44}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x2}}, [{0xdd, 0xde, "8919783fea13fc3c88137c49c107030f704f3ffea87ff2e1af3d8cb331827f62dc21d95af3c73fc8497e68cf2a62b0a6cffd5fb33faa1ff00f9dde5ed8b69d7f2e67f143e60825e916212bb0e6bd9a1c858e474534b55b941062709a231b2b1d04edd79f755eea21e30ed5e6289ec59462bc9ff1ba41d4aa7687551311cf5362b55432a942637852965e31aed3b71faa2ebd7f5f4dbed95c574c445b105148ffb1e21a53e153d95160e52056a606838540c3175ef740f5ddf35244cce033ec54338dbdfc164a302f283e1585630ff136196dd0173d3eb95605581bfaef8b"}, {0xdd, 0x18, "beabc7b5ea5b74411d8fbb65cf6772e4050b232ebf0252fd"}, {0xdd, 0xb8, "c5a36ae92873d6aef4692395d84938a9e44ce7239e65cd7c291aa083d6f7f08a04c8b9549f3656890e14143cddf117fd426d9f39024d997ee5a16c98f6a18618219153979a7ca449a9811d6c499db2949f5ed5d8baad4cb37d5930a5c82898f05782e4e83ae26c1ca3b757152c0f29cd76e2bbed44a602eb05a2e7f734158c6b6d6d2bbdb4b7864977d0bf4bd64e09c896119920d3e05cf074c3da1f2ce6b58160105e3fa65c12d0143b9f94ec951061c08dc80d1f102da9"}, {0xdd, 0x1a, "9052b050ff687513fdd351c81f12720a5d6f614d39da0900ecb2"}, {0xdd, 0x47, "050ba082f617840ffd217282ad8bcc9f16984dbc1e59b89deec8689f5c1b79fb09321f1aa236ad98c7dd8910ecbd81cc77c1bb17b9a4f546764b63f132a6f4766d253ed9ddee85"}, {0xdd, 0xce, "01d8a0db6eb27ce56bcb4bc37a8008b7a806ff165a2833629ac1231e5035cc882fe61aa1b5b95189310b20000298bf9ea38181f5ecc0373e88eb4d074e77fb13295ef132ec36c67a96b9b844725af85b9155387ae1149c95990753b8c35b50f544980e1e00f6b2456b30769ce5b7cd1e14faba146bc5f497c1cfe8b4ade27e3390c787c52443f99aacf04157969c3ffb2de3ceeda2468570d0aff75d30337debaacdfbf7b0a2086f0dc19e2896789e2e0976ba73428261e71d81e5c5755f092e6bb641e5ca47b97d5e37e028c658"}, {0xdd, 0x94, "a13f2cea1a5deff4a40862b5c8ee36c71981776e5b4ee2838000c38c539f4a63c9d4031c780c6c9eae6afe70d67962a0977ff0a30bc19e546618f373e874d7e61b4571f3abf0363c712466be6a0cdec020c4abde0f138ed7dbdeb3dab50433fb13eb26c4e47953db2ed2094cc73c2a87ccf557a3e0295ad4613485b133c3e336c8c4bfae165167fd6cb0a9cf7722b1af318b8f04"}]}, 0x3d4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000100fedbdf25100000000800030070a24e3f969dd53f0a949d8a1d96aa2768245c72fe52fcff55fd84e03a19c47656b744e72aae20f4472c73d53050c3f5c8b247371b9c222eeb17c90e10b8374bdf", @ANYRES32=r4, @ANYBLOB="0c0099000100000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x198, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x17e, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_a, @broadcast, @random="7128f0e4b6e9", {0x8, 0xe04}}, @ver_80211n={0x0, 0x233, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x10, 0x4f, @default, @val={0x1, 0x1, [{0xb, 0x1}]}, @void, [{0xdd, 0x83, "dadf02983196ca08ffb17f003692c30fd750fede022ad3784eb4d5b1600cd9ba44a624b185a8faa878cec70371681c421b50cafcf961655eca28dcc842b7f929551283780a6f73314ae32cb7f1aa6477b3264acf6b40297ef3183a0fa6cfffa56babfe8de24baf6d87a0345d6f48ffc40a328b70fa7975a259cc24cfd4324736ef71c7"}, {0xdd, 0xce, "92407f7aedf6f1c58a4524e41debeeba03ca410c69699e387a58bbf472e8d7655d4e08fafdf46b7e4e891daeffa667f3e69725e606329bc6f259d08106850ab8268a7e3aecb99049135fceb6508ee1c24d3270337dfbd3ce65a820d0f75220ae0f5d83eaeb29a4d1e311dda033316e54253c9148c84df19e17b99605312cca64417590e77c4a62fb2ef95d68b56ebdef1a47e97328c7e485c6518f58d04fd2ac112a9e6873fefaba0f85b6f5ed1eb0c0c332125c04acffb34c222b57bb09650ec061e5e2804b13c353f6c8a065ec"}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4840}, 0xb49d343512fd8051) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x4c}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x80001, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "7b35d04a4aafc300e77d908f899d99f209763e51dc15c8762afc5047415248d9d5727b001a8fa8d5bd4c96f7ad655982d6613af1d872c94287575e004b341a11", "81930c551484280bd62df2490893dca4e2a918026d0bab6927b11c294653d9de8ef5cec2f31c644d836b57d0c9790372ce0943aa39379ddc96f02097934b0cb7", "ddc22c11d7b317903dc4e25f9dfc7a8e893359a64d70460baf3984cf3b2baf82"}}) chdir(0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 631.386196][T19273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.398112][T19273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.398238][T19280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.401538][T19282] loop0: detected capacity change from 0 to 8 [ 631.405407][ C3] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.413702][ C3] Buffer I/O error on dev loop0, logical block 0, async page read 04:19:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbcc}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x23, 0x33, @action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @random="44ee4894cbb6", {0x5, 0x86}}, @ver_80211n={0x0, 0x40, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @vht_op_mode_ntf={0x15, 0x2, {0x2, 0x0, 0x0, 0x2}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0xa081}, 0x1) [ 631.428764][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.432777][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 631.436600][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.440808][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 631.441508][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.444726][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.452628][T19286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.452663][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 631.461627][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.463634][T19286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.465628][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 631.465976][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.477024][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 631.480725][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.484827][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 631.488920][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.493019][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 631.496566][T19282] ldm_validate_partition_table(): Disk read failed. [ 631.499927][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.501553][T19274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.503815][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 631.511047][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.514543][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 631.517996][T19282] Dev loop0: unable to read RDB block 0 [ 631.520562][T19282] loop0: unable to read partition table [ 631.522815][T19282] loop0: partition table beyond EOD, truncated [ 631.525197][T19282] loop_reread_partitions: partition scan of loop0 ({5ÐJJ¯Ã) failed (rc=-5) 04:19:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x80001, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "7b35d04a4aafc300e77d908f899d99f209763e51dc15c8762afc5047415248d9d5727b001a8fa8d5bd4c96f7ad655982d6613af1d872c94287575e004b341a11", "81930c551484280bd62df2490893dca4e2a918026d0bab6927b11c294653d9de8ef5cec2f31c644d836b57d0c9790372ce0943aa39379ddc96f02097934b0cb7", "ddc22c11d7b317903dc4e25f9dfc7a8e893359a64d70460baf3984cf3b2baf82"}}) chdir(0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 04:19:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x80001, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "7b35d04a4aafc300e77d908f899d99f209763e51dc15c8762afc5047415248d9d5727b001a8fa8d5bd4c96f7ad655982d6613af1d872c94287575e004b341a11", "81930c551484280bd62df2490893dca4e2a918026d0bab6927b11c294653d9de8ef5cec2f31c644d836b57d0c9790372ce0943aa39379ddc96f02097934b0cb7", "ddc22c11d7b317903dc4e25f9dfc7a8e893359a64d70460baf3984cf3b2baf82"}}) chdir(0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 631.568903][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x80001, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "7b35d04a4aafc300e77d908f899d99f209763e51dc15c8762afc5047415248d9d5727b001a8fa8d5bd4c96f7ad655982d6613af1d872c94287575e004b341a11", "81930c551484280bd62df2490893dca4e2a918026d0bab6927b11c294653d9de8ef5cec2f31c644d836b57d0c9790372ce0943aa39379ddc96f02097934b0cb7", "ddc22c11d7b317903dc4e25f9dfc7a8e893359a64d70460baf3984cf3b2baf82"}}) chdir(0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 04:19:29 executing program 1: prctl$PR_SET_SECCOMP(0x43, 0x0, &(0x7f0000000c00)={0x0, 0x0}) 04:19:29 executing program 1: r0 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(r0, 0x0, 0x0) [ 631.724417][ T39] audit: type=1800 audit(1688357969.684:388): pid=19297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1978 res=0 errno=0 04:19:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x198, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x17e, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_a, @broadcast, @random="7128f0e4b6e9", {0x8, 0xe04}}, @ver_80211n={0x0, 0x233, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x10, 0x4f, @default, @val={0x1, 0x1, [{0xb, 0x1}]}, @void, [{0xdd, 0x83, "dadf02983196ca08ffb17f003692c30fd750fede022ad3784eb4d5b1600cd9ba44a624b185a8faa878cec70371681c421b50cafcf961655eca28dcc842b7f929551283780a6f73314ae32cb7f1aa6477b3264acf6b40297ef3183a0fa6cfffa56babfe8de24baf6d87a0345d6f48ffc40a328b70fa7975a259cc24cfd4324736ef71c7"}, {0xdd, 0xce, "92407f7aedf6f1c58a4524e41debeeba03ca410c69699e387a58bbf472e8d7655d4e08fafdf46b7e4e891daeffa667f3e69725e606329bc6f259d08106850ab8268a7e3aecb99049135fceb6508ee1c24d3270337dfbd3ce65a820d0f75220ae0f5d83eaeb29a4d1e311dda033316e54253c9148c84df19e17b99605312cca64417590e77c4a62fb2ef95d68b56ebdef1a47e97328c7e485c6518f58d04fd2ac112a9e6873fefaba0f85b6f5ed1eb0c0c332125c04acffb34c222b57bb09650ec061e5e2804b13c353f6c8a065ec"}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4840}, 0xb49d343512fd8051) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x198, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x17e, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_a, @broadcast, @random="7128f0e4b6e9", {0x8, 0xe04}}, @ver_80211n={0x0, 0x233, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x10, 0x4f, @default, @val={0x1, 0x1, [{0xb, 0x1}]}, @void, [{0xdd, 0x83, "dadf02983196ca08ffb17f003692c30fd750fede022ad3784eb4d5b1600cd9ba44a624b185a8faa878cec70371681c421b50cafcf961655eca28dcc842b7f929551283780a6f73314ae32cb7f1aa6477b3264acf6b40297ef3183a0fa6cfffa56babfe8de24baf6d87a0345d6f48ffc40a328b70fa7975a259cc24cfd4324736ef71c7"}, {0xdd, 0xce, "92407f7aedf6f1c58a4524e41debeeba03ca410c69699e387a58bbf472e8d7655d4e08fafdf46b7e4e891daeffa667f3e69725e606329bc6f259d08106850ab8268a7e3aecb99049135fceb6508ee1c24d3270337dfbd3ce65a820d0f75220ae0f5d83eaeb29a4d1e311dda033316e54253c9148c84df19e17b99605312cca64417590e77c4a62fb2ef95d68b56ebdef1a47e97328c7e485c6518f58d04fd2ac112a9e6873fefaba0f85b6f5ed1eb0c0c332125c04acffb34c222b57bb09650ec061e5e2804b13c353f6c8a065ec"}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4840}, 0xb49d343512fd8051) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) 04:19:29 executing program 1: syz_clone(0x2822000, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)="6d971ad10d4b367c66c88063991e74826d0d2f5e96c1d229af2c878f1fb23c934cac2547e0b9a0fc90c14918d431b539840295c174cac1a7118d64678c57d37491fd7af2487bf2bcb5a2eaa9fda20feeb7357ae4f94e72412bb32a3956ba55100f0e1b59acf709da5d83af1d") 04:19:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbcc}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x23, 0x33, @action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @random="44ee4894cbb6", {0x5, 0x86}}, @ver_80211n={0x0, 0x40, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @vht_op_mode_ntf={0x15, 0x2, {0x2, 0x0, 0x0, 0x2}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0xa081}, 0x1) [ 631.892014][T19301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.902493][T19301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='lo\x00', 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='lo\x00', 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) [ 631.915620][T19309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.919587][T19306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (rerun: 32) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x198, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x17e, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_a, @broadcast, @random="7128f0e4b6e9", {0x8, 0xe04}}, @ver_80211n={0x0, 0x233, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x10, 0x4f, @default, @val={0x1, 0x1, [{0xb, 0x1}]}, @void, [{0xdd, 0x83, "dadf02983196ca08ffb17f003692c30fd750fede022ad3784eb4d5b1600cd9ba44a624b185a8faa878cec70371681c421b50cafcf961655eca28dcc842b7f929551283780a6f73314ae32cb7f1aa6477b3264acf6b40297ef3183a0fa6cfffa56babfe8de24baf6d87a0345d6f48ffc40a328b70fa7975a259cc24cfd4324736ef71c7"}, {0xdd, 0xce, "92407f7aedf6f1c58a4524e41debeeba03ca410c69699e387a58bbf472e8d7655d4e08fafdf46b7e4e891daeffa667f3e69725e606329bc6f259d08106850ab8268a7e3aecb99049135fceb6508ee1c24d3270337dfbd3ce65a820d0f75220ae0f5d83eaeb29a4d1e311dda033316e54253c9148c84df19e17b99605312cca64417590e77c4a62fb2ef95d68b56ebdef1a47e97328c7e485c6518f58d04fd2ac112a9e6873fefaba0f85b6f5ed1eb0c0c332125c04acffb34c222b57bb09650ec061e5e2804b13c353f6c8a065ec"}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4840}, 0xb49d343512fd8051) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 631.928115][T19306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbcc}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x23, 0x33, @action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @random="44ee4894cbb6", {0x5, 0x86}}, @ver_80211n={0x0, 0x40, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @vht_op_mode_ntf={0x15, 0x2, {0x2, 0x0, 0x0, 0x2}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0xa081}, 0x1) [ 631.963872][T19319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 631.986716][T19321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.001332][T19328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.009217][T19327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.114333][T19307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.126297][T19307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x72}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfffffff0000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = open(&(0x7f0000000280)='./file1\x00', 0x280000, 0x102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendmsg$unix(r7, &(0x7f0000000c40)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)}, {&(0x7f0000000480)="4734fe2b85ce5ae1575e3a423a382b049d7e4991ea245ae22258b581f808618942f738c008c272eb744546187ee78915c7cba309b4bd303730eddcd08c34dad4eef7033696be1d2ed6dfeeb573f1d07061e8d84f8060ef4f5e37777fb2a97a3bbdad92da77b111ee432489134479dd9eb289783b6dee06e4dc8538adbc8bd852b26dad87ddaa5f4b42f93a6a9d6f185bb065fa42a24f911b7d181db567bdeaea1d6296818939eefc5e731a7f379dee4d7c5c604b462ccf3389dff6adc55391453bfd55ad81b427f1d335f876f7", 0xcd}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001000000000000000fd5d3faadf2d04fea6e83ab40e90100000000000000ed78e4e5e6253599442431aea3bb9aee6e3a9de5020000000000009f814d49a206a9f217b0408908d495d2a30abceb34546148e9220b856ddd0baf62976c70d9e008177e9a45ff922323d956aed7da8535880e4be19857b10c27332238f87baab8bd5c69a9410ccfa507f7890332d1acb4aea1d178baa6c261d35f9b016d0272ae", @ANYRES32, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f8"], 0xa8, 0x4000800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000280)='GPL\x00', 0x401, 0x34, &(0x7f0000000300)=""/52, 0x41100, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r7, 0xffffffffffffffff]}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x128, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x20, 0x8, 0x7f, 0xfc9}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x4, 0x9870}, {0x1f, 0x3, 0x9, 0x4}, {0xffff, 0x6, 0xff, 0x1000}, {0x5, 0x0, 0x1, 0x10000}]}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x400481c}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="020026fd7000fddbd725370000000800030076ba3ee66cc80fff6d36efc2553ea7961589a0a64280b375baccc82d352c1c6c7defbe605b42bc78c773780ef2ed8ff7b50cec4513063eae1c15518bc4b3928a3df1727a60f62fe74d62cc9443c7319554aeea5c82fddbc3d2a4c8fefaf3ba81f6da87752a0abc941846647bf44124d842397ec136ef41acef8108006a2a1ce1fbc59f887e", @ANYRES32=0x0, @ANYBLOB="050018011600000008002700010000000800a0000500000008009f000200000008002201920200000800a10000000100050018011e00000008009f0000000000050019010c0000000800a000010400000800a000090000000800a10005000000050018010600000008002201d5010000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x800) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 632.451056][T19335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.458391][T19337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 632.462442][T19335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.469441][T19337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 632.518865][T19347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x8, 0x7, 0x81, 0x0, 0x1}, 0x48) 04:19:30 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x101, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000440)=0x7fffffff) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) [ 632.574104][T19347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.630168][T19340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x2000000, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 04:19:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="020026fd7000fddbd725370000000800030076ba3ee66cc80fff6d36efc2553ea7961589a0a64280b375baccc82d352c1c6c7defbe605b42bc78c773780ef2ed8ff7b50cec4513063eae1c15518bc4b3928a3df1727a60f62fe74d62cc9443c7319554aeea5c82fddbc3d2a4c8fefaf3ba81f6da87752a0abc941846647bf44124d842397ec136ef41acef8108006a2a1ce1fbc59f887e", @ANYRES32=0x0, @ANYBLOB="050018011600000008002700010000000800a0000500000008009f000200000008002201920200000800a10000000100050018011e00000008009f0000000000050019010c0000000800a000010400000800a000090000000800a10005000000050018010600000008002201d5010000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x800) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="020026fd7000fddbd725370000000800030076ba3ee66cc80fff6d36efc2553ea7961589a0a64280b375baccc82d352c1c6c7defbe605b42bc78c773780ef2ed8ff7b50cec4513063eae1c15518bc4b3928a3df1727a60f62fe74d62cc9443c7319554aeea5c82fddbc3d2a4c8fefaf3ba81f6da87752a0abc941846647bf44124d842397ec136ef41acef8108006a2a1ce1fbc59f887e", @ANYRES32=0x0, @ANYBLOB="050018011600000008002700010000000800a0000500000008009f000200000008002201920200000800a10000000100050018011e00000008009f0000000000050019010c0000000800a000010400000800a000090000000800a10005000000050018010600000008002201d5010000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x800) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) 04:19:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfffffff0000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r7 = open(&(0x7f0000000280)='./file1\x00', 0x280000, 0x102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) (async) sendmsg$unix(r7, &(0x7f0000000c40)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)}, {&(0x7f0000000480)="4734fe2b85ce5ae1575e3a423a382b049d7e4991ea245ae22258b581f808618942f738c008c272eb744546187ee78915c7cba309b4bd303730eddcd08c34dad4eef7033696be1d2ed6dfeeb573f1d07061e8d84f8060ef4f5e37777fb2a97a3bbdad92da77b111ee432489134479dd9eb289783b6dee06e4dc8538adbc8bd852b26dad87ddaa5f4b42f93a6a9d6f185bb065fa42a24f911b7d181db567bdeaea1d6296818939eefc5e731a7f379dee4d7c5c604b462ccf3389dff6adc55391453bfd55ad81b427f1d335f876f7", 0xcd}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001000000000000000fd5d3faadf2d04fea6e83ab40e90100000000000000ed78e4e5e6253599442431aea3bb9aee6e3a9de5020000000000009f814d49a206a9f217b0408908d495d2a30abceb34546148e9220b856ddd0baf62976c70d9e008177e9a45ff922323d956aed7da8535880e4be19857b10c27332238f87baab8bd5c69a9410ccfa507f7890332d1acb4aea1d178baa6c261d35f9b016d0272ae", @ANYRES32, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f8"], 0xa8, 0x4000800}, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000280)='GPL\x00', 0x401, 0x34, &(0x7f0000000300)=""/52, 0x41100, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r7, 0xffffffffffffffff]}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x128, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x20, 0x8, 0x7f, 0xfc9}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x4, 0x9870}, {0x1f, 0x3, 0x9, 0x4}, {0xffff, 0x6, 0xff, 0x1000}, {0x5, 0x0, 0x1, 0x10000}]}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x400481c}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 632.949738][T19353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xef84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304, 0x37}, "08134ed8dfc0a130", "009d1557875499fff5d654d3dfe100", "01215875", "b712b5bdb15bfad4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180), 0x4) [ 632.960625][T19353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.970678][T19365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfffffff0000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = open(&(0x7f0000000280)='./file1\x00', 0x280000, 0x102) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendmsg$unix(r7, &(0x7f0000000c40)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)}, {&(0x7f0000000480)="4734fe2b85ce5ae1575e3a423a382b049d7e4991ea245ae22258b581f808618942f738c008c272eb744546187ee78915c7cba309b4bd303730eddcd08c34dad4eef7033696be1d2ed6dfeeb573f1d07061e8d84f8060ef4f5e37777fb2a97a3bbdad92da77b111ee432489134479dd9eb289783b6dee06e4dc8538adbc8bd852b26dad87ddaa5f4b42f93a6a9d6f185bb065fa42a24f911b7d181db567bdeaea1d6296818939eefc5e731a7f379dee4d7c5c604b462ccf3389dff6adc55391453bfd55ad81b427f1d335f876f7", 0xcd}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001000000000000000fd5d3faadf2d04fea6e83ab40e90100000000000000ed78e4e5e6253599442431aea3bb9aee6e3a9de5020000000000009f814d49a206a9f217b0408908d495d2a30abceb34546148e9220b856ddd0baf62976c70d9e008177e9a45ff922323d956aed7da8535880e4be19857b10c27332238f87baab8bd5c69a9410ccfa507f7890332d1acb4aea1d178baa6c261d35f9b016d0272ae", @ANYRES32, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f8"], 0xa8, 0x4000800}, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000280)='GPL\x00', 0x401, 0x34, &(0x7f0000000300)=""/52, 0x41100, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r7, 0xffffffffffffffff]}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x128, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x20, 0x8, 0x7f, 0xfc9}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x4, 0x9870}, {0x1f, 0x3, 0x9, 0x4}, {0xffff, 0x6, 0xff, 0x1000}, {0x5, 0x0, 0x1, 0x10000}]}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x400481c}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="020026fd7000fddbd725370000000800030076ba3ee66cc80fff6d36efc2553ea7961589a0a64280b375baccc82d352c1c6c7defbe605b42bc78c773780ef2ed8ff7b50cec4513063eae1c15518bc4b3928a3df1727a60f62fe74d62cc9443c7319554aeea5c82fddbc3d2a4c8fefaf3ba81f6da87752a0abc941846647bf44124d842397ec136ef41acef8108006a2a1ce1fbc59f887e", @ANYRES32=0x0, @ANYBLOB="050018011600000008002700010000000800a0000500000008009f000200000008002201920200000800a10000000100050018011e00000008009f0000000000050019010c0000000800a000010400000800a000090000000800a10005000000050018010600000008002201d5010000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open_by_handle_at(r3, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x4a}}, 0x103040) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x800) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 633.021067][T19378] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 633.025612][T19378] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 633.035869][T19380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x811) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x18, 0x1406, 0x10, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="0ff98000000008021100000108021100000008021113fd0000000000000000000000640001000006020202020202010882848bfec5416624"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 633.056684][T19390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.064229][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.082520][T19390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.106704][T19391] loop1: detected capacity change from 0 to 2048 [ 633.116273][ T39] audit: type=1800 audit(1688357971.073:389): pid=19391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=1048891 res=0 errno=0 [ 633.126113][ T39] audit: type=1804 audit(1688357971.083:390): pid=19391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1187/file0/file0" dev="loop1" ino=1048891 res=1 errno=0 [ 633.153973][T19392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.209640][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x7, 0x400, 0x4}) open_by_handle_at(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="00004a000000009f2023ab1aa3b1ebd3d98bfa5b00081154edc7be3500000000000000002de3635a3cca8f4cbf72496ce93bdf3d6c9c5aa62f88666407a9dcd754dfb6cc4d85171f200f05301f442fbe3f254903e28f9e16fb84acd1ae24c424616a67509f763f522872bb511aa29731b50982a50dd82f5dddde12f8e449745a2de2e4a9a16fad40ee28d88bcb6bd8dfed70b7d7f8f35006d2adfa7495bb97f250b76a50e4a94d180811f39360625f3d5b45e006b5258d5147a511b36e82c56f5d0a973ce8da40544fce84"], 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x44010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f00000002c0)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x59}}, @void}, 0x3f) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x811) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x18, 0x1406, 0x10, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="0ff98000000008021100000108021100000008021113fd0000000000000000000000640001000006020202020202010882848bfec5416624"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 04:19:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:19:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xef84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304, 0x37}, "08134ed8dfc0a130", "009d1557875499fff5d654d3dfe100", "01215875", "b712b5bdb15bfad4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180), 0x4) [ 634.106669][T19400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) r3 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x811) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x18, 0x1406, 0x10, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="0ff98000000008021100000108021100000008021113fd0000000000000000000000640001000006020202020202010882848bfec5416624"], 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 634.116201][T19400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.133424][T19409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.144562][T19403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.148700][T19408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.200231][T19403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.226213][T19412] loop1: detected capacity change from 0 to 2048 [ 634.234165][ T39] audit: type=1800 audit(1688357972.193:391): pid=19412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=1048892 res=0 errno=0 [ 634.245387][ T39] audit: type=1804 audit(1688357972.203:392): pid=19412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1188/file0/file0" dev="loop1" ino=1048892 res=1 errno=0 [ 634.256502][T19403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x7, 0x400, 0x4}) open_by_handle_at(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="00004a000000009f2023ab1aa3b1ebd3d98bfa5b00081154edc7be3500000000000000002de3635a3cca8f4cbf72496ce93bdf3d6c9c5aa62f88666407a9dcd754dfb6cc4d85171f200f05301f442fbe3f254903e28f9e16fb84acd1ae24c424616a67509f763f522872bb511aa29731b50982a50dd82f5dddde12f8e449745a2de2e4a9a16fad40ee28d88bcb6bd8dfed70b7d7f8f35006d2adfa7495bb97f250b76a50e4a94d180811f39360625f3d5b45e006b5258d5147a511b36e82c56f5d0a973ce8da40544fce84"], 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x44010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f00000002c0)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x59}}, @void}, 0x3f) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x7, 0x400, 0x4}) (async) open_by_handle_at(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="00004a000000009f2023ab1aa3b1ebd3d98bfa5b00081154edc7be3500000000000000002de3635a3cca8f4cbf72496ce93bdf3d6c9c5aa62f88666407a9dcd754dfb6cc4d85171f200f05301f442fbe3f254903e28f9e16fb84acd1ae24c424616a67509f763f522872bb511aa29731b50982a50dd82f5dddde12f8e449745a2de2e4a9a16fad40ee28d88bcb6bd8dfed70b7d7f8f35006d2adfa7495bb97f250b76a50e4a94d180811f39360625f3d5b45e006b5258d5147a511b36e82c56f5d0a973ce8da40544fce84"], 0x103040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x44010) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f00000002c0)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x59}}, @void}, 0x3f) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) 04:19:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x40, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0xb9, 0x9, 0xfff, 0x8}}, @void, @void, @void, @void}, 0x3e) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @random="7a40d23f7e39", {0xe, 0x8}}, @ver_80211n={0x0, 0x3143, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2031, 0x2c, @default, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0xaf76, 0x9}}, [{0xdd, 0x9, "05cafd2eb5c4cdd212"}]}, 0x49) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000280)=@ctrl_frame=@ack={{}, {0xff}}, 0xa) [ 634.478677][T19414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.489575][T19416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.497282][T19414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.501859][T19416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.502892][T19416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.520093][T19416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x7, 0x400, 0x4}) open_by_handle_at(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="00004a000000009f2023ab1aa3b1ebd3d98bfa5b00081154edc7be3500000000000000002de3635a3cca8f4cbf72496ce93bdf3d6c9c5aa62f88666407a9dcd754dfb6cc4d85171f200f05301f442fbe3f254903e28f9e16fb84acd1ae24c424616a67509f763f522872bb511aa29731b50982a50dd82f5dddde12f8e449745a2de2e4a9a16fad40ee28d88bcb6bd8dfed70b7d7f8f35006d2adfa7495bb97f250b76a50e4a94d180811f39360625f3d5b45e006b5258d5147a511b36e82c56f5d0a973ce8da40544fce84"], 0x103040) (async) open_by_handle_at(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="00004a000000009f2023ab1aa3b1ebd3d98bfa5b00081154edc7be3500000000000000002de3635a3cca8f4cbf72496ce93bdf3d6c9c5aa62f88666407a9dcd754dfb6cc4d85171f200f05301f442fbe3f254903e28f9e16fb84acd1ae24c424616a67509f763f522872bb511aa29731b50982a50dd82f5dddde12f8e449745a2de2e4a9a16fad40ee28d88bcb6bd8dfed70b7d7f8f35006d2adfa7495bb97f250b76a50e4a94d180811f39360625f3d5b45e006b5258d5147a511b36e82c56f5d0a973ce8da40544fce84"], 0x103040) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x44010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f00000002c0)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x59}}, @void}, 0x3f) (async) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f00000002c0)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x59}}, @void}, 0x3f) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 634.560350][T19422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.566604][T19422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2e, 0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 634.647380][T19425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.703279][T19425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.758905][T19425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x40, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0xb9, 0x9, 0xfff, 0x8}}, @void, @void, @void, @void}, 0x3e) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x40, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0xb9, 0x9, 0xfff, 0x8}}, @void, @void, @void, @void}, 0x3e) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @random="7a40d23f7e39", {0xe, 0x8}}, @ver_80211n={0x0, 0x3143, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2031, 0x2c, @default, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0xaf76, 0x9}}, [{0xdd, 0x9, "05cafd2eb5c4cdd212"}]}, 0x49) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @random="7a40d23f7e39", {0xe, 0x8}}, @ver_80211n={0x0, 0x3143, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2031, 0x2c, @default, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0xaf76, 0x9}}, [{0xdd, 0x9, "05cafd2eb5c4cdd212"}]}, 0x49) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000280)=@ctrl_frame=@ack={{}, {0xff}}, 0xa) [ 634.843851][T19429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.850418][T19430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.855905][T19430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.861540][T19429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x682, 0x0) finit_module(r3, &(0x7f0000000100)='nl80211\x00', 0x2) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@ctrl_frame=@bar={{}, {0x47d3}, @device_a, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x3}, {0x1, 0x3f}}}, 0x14) [ 634.908070][T19432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.919196][T19432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.925127][T19432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xef84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304, 0x37}, "08134ed8dfc0a130", "009d1557875499fff5d654d3dfe100", "01215875", "b712b5bdb15bfad4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180), 0x4) 04:19:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2e, 0x3}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 635.115186][T19439] loop1: detected capacity change from 0 to 2048 [ 635.131446][ T39] audit: type=1800 audit(1688357973.092:393): pid=19439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=1048893 res=0 errno=0 [ 635.140360][T19437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.141979][ T39] audit: type=1804 audit(1688357973.102:394): pid=19439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir12610327/syzkaller.5MFG29/1189/file0/file0" dev="loop1" ino=1048893 res=1 errno=0 04:19:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x40, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0xb9, 0x9, 0xfff, 0x8}}, @void, @void, @void, @void}, 0x3e) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @random="7a40d23f7e39", {0xe, 0x8}}, @ver_80211n={0x0, 0x3143, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2031, 0x2c, @default, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0xaf76, 0x9}}, [{0xdd, 0x9, "05cafd2eb5c4cdd212"}]}, 0x49) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000280)=@ctrl_frame=@ack={{}, {0xff}}, 0xa) [ 635.195352][T19444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.197014][T19445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.205975][T19443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.216200][T19443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:19:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async, rerun: 64) r3 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x682, 0x0) finit_module(r3, &(0x7f0000000100)='nl80211\x00', 0x2) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 32) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@ctrl_frame=@bar={{}, {0x47d3}, @device_a, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x3}, {0x1, 0x3f}}}, 0x14) [ 635.261147][T19437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.273112][T19449] ================================================================== [ 635.273809][T19450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.276785][T19449] BUG: KASAN: out-of-bounds in init_module_from_file+0x62c/0x6a0 [ 635.276824][T19449] Read of size 8 at addr ffffc9000300fe00 by task syz-executor.2/19449 [ 635.276840][T19449] [ 635.276844][T19449] CPU: 3 PID: 19449 Comm: syz-executor.2 Not tainted 6.4.0-syzkaller-10173-ga901a3568fd2 #0 [ 635.294664][T19449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 635.299137][T19449] Call Trace: [ 635.300654][T19449] [ 635.301934][T19449] dump_stack_lvl+0xd9/0x150 [ 635.303741][T19449] print_address_description.constprop.0+0x2c/0x3c0 [ 635.306703][T19449] kasan_report+0x11d/0x130 [ 635.309004][T19449] ? init_module_from_file+0x62c/0x6a0 [ 635.311629][T19449] init_module_from_file+0x62c/0x6a0 [ 635.314100][T19449] ? __do_sys_init_module+0x2e0/0x2e0 [ 635.316491][T19449] __ia32_sys_finit_module+0xfd/0x190 [ 635.318803][T19449] __do_fast_syscall_32+0x65/0xf0 [ 635.320991][T19449] do_fast_syscall_32+0x33/0x70 [ 635.322995][T19449] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 635.325562][T19449] RIP: 0023:0xf7fd7579 [ 635.327107][T19449] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 635.334314][T19449] RSP: 002b:00000000f7fb15cc EFLAGS: 00000296 ORIG_RAX: 000000000000015e [ 635.337979][T19449] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000100 [ 635.341416][T19449] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 635.344673][T19449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.347947][T19449] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 635.351199][T19449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.355008][T19449] [ 635.356500][T19449] [ 635.357599][T19449] The buggy address belongs to the virtual mapping at [ 635.357599][T19449] [ffffc90003008000, ffffc90003011000) created by: [ 635.357599][T19449] kernel_clone+0xeb/0x890 [ 635.365517][T19449] [ 635.366636][T19449] The buggy address belongs to the physical page: [ 635.369646][T19449] page:ffffea000157ddc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55f77 [ 635.374304][T19449] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 635.377627][T19449] page_type: 0xffffffff() [ 635.379665][T19449] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 635.383598][T19449] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 635.387530][T19449] page dumped because: kasan: bad access detected [ 635.390413][T19449] page_owner tracks the page as allocated [ 635.392790][T19449] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 19352, tgid 19352 (syz-executor.2), ts 632973423084, free_ts 626365292275 [ 635.400435][T19449] post_alloc_hook+0x2db/0x350 [ 635.402500][T19449] get_page_from_freelist+0xfed/0x2d30 [ 635.404757][T19449] __alloc_pages+0x1cb/0x4a0 [ 635.406518][T19449] alloc_pages+0x1aa/0x270 [ 635.408398][T19449] __vmalloc_node_range+0xb1c/0x14c0 [ 635.410590][T19449] copy_process+0x13bb/0x75c0 [ 635.412408][T19449] kernel_clone+0xeb/0x890 [ 635.414158][T19449] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 635.416609][T19449] do_int80_syscall_32+0x4a/0x90 [ 635.418943][T19449] entry_INT80_compat+0x8f/0xa0 [ 635.421322][T19449] page last free stack trace: [ 635.423546][T19449] free_unref_page_prepare+0x62e/0xcb0 [ 635.426062][T19449] free_unref_page+0x33/0x370 [ 635.428822][T19449] __folio_put+0xc5/0x140 [ 635.430811][T19449] free_page_and_swap_cache+0x257/0x2c0 [ 635.433405][T19449] tlb_remove_table_rcu+0x89/0xe0 [ 635.435703][T19449] rcu_core+0x802/0x1c10 [ 635.437432][T19449] __do_softirq+0x1d4/0x905 [ 635.439295][T19449] [ 635.440333][T19449] Memory state around the buggy address: [ 635.442815][T19449] ffffc9000300fd00: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 635.446369][T19449] ffffc9000300fd80: 04 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 f1 [ 635.449990][T19449] >ffffc9000300fe00: f1 f1 f1 00 00 00 00 00 00 00 00 00 00 00 f3 f3 [ 635.453518][T19449] ^ [ 635.455496][T19449] ffffc9000300fe80: f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 635.459033][T19449] ffffc9000300ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 635.462571][T19449] ================================================================== [ 635.466674][T19449] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 635.469871][T19449] CPU: 3 PID: 19449 Comm: syz-executor.2 Not tainted 6.4.0-syzkaller-10173-ga901a3568fd2 #0 [ 635.474041][T19449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 635.477527][T19449] Call Trace: [ 635.478861][T19449] [ 635.480053][T19449] dump_stack_lvl+0xd9/0x150 [ 635.481889][T19449] panic+0x686/0x730 [ 635.483599][T19449] ? panic_smp_self_stop+0xa0/0xa0 [ 635.485930][T19449] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.488689][T19449] check_panic_on_warn+0xb1/0xc0 [ 635.490971][T19449] end_report+0x108/0x150 [ 635.492980][T19449] kasan_report+0xfa/0x130 [ 635.494992][T19449] ? init_module_from_file+0x62c/0x6a0 [ 635.497357][T19449] init_module_from_file+0x62c/0x6a0 [ 635.499706][T19449] ? __do_sys_init_module+0x2e0/0x2e0 [ 635.502131][T19449] __ia32_sys_finit_module+0xfd/0x190 [ 635.504529][T19449] __do_fast_syscall_32+0x65/0xf0 [ 635.506684][T19449] do_fast_syscall_32+0x33/0x70 [ 635.508865][T19449] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 635.511645][T19449] RIP: 0023:0xf7fd7579 [ 635.513459][T19449] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 635.522077][T19449] RSP: 002b:00000000f7fb15cc EFLAGS: 00000296 ORIG_RAX: 000000000000015e [ 635.525743][T19449] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000100 [ 635.529260][T19449] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 635.532433][T19449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.535742][T19449] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 635.539174][T19449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.542706][T19449] Connection to localhost closed by remote host. [ 635. VM DIAGNOSIS: 04:19:33 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=1ffff9200065ceb1 RCX=ffffffff8165a90e RDX=fffffbfff230a7e6 RSI=0000000000000008 RDI=ffffffff91853f28 RBP=0000000000000004 RSP=ffffc900032e7550 R8 =0000000000000000 R9 =fffffbfff230a7e5 R10=ffffffff91853f2f R11=0000000000000001 R12=ffff88801ed82ec8 R13=0000000000000002 R14=000000000000055b R15=ffff88801ed82ee8 RIP=ffffffff8165a90e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200a9018 CR3=0000000053d22000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fff4ae1ddb00000003000000018 XMM02=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM03=000000ff0000000000ff000000000000 XMM04=000000000000000000ff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=0000000000000000000000000000ff00 XMM09=73730c85f2cc685373730c85f2cc6853 XMM10=737373737373734273732612e16c1e73 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000092788b RBX=ffffe8ffad721ca0 RCX=ffffffff8a1dff55 RDX=0000000000000002 RSI=ffffffff8d3f1cc0 RDI=ffffe8ffad721ca0 RBP=ffffffff8d3f1cc0 RSP=ffffc90000467d78 R8 =0000000000000001 R9 =ffffed10058e6d9d R10=ffff88802c736ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d3f1da8 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1e1d73 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f8f584 CR3=000000000c775000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000001 XMM01=00007ffc511688400000003000000010 XMM02=65656565656565656565656565656565 XMM03=00000000000000000000000000000000 XMM04=ff00ff00000000000000000000000000 XMM05=ffffffffffffffffffffffffffff0000 XMM06=ff00ff00000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=000000000095dc5f RBX=ffffe8ffad821ca0 RCX=ffffffff8a1dff55 RDX=0000000000000002 RSI=ffffffff8d3f1cc0 RDI=ffffe8ffad821ca0 RBP=ffffffff8d3f1cc0 RSP=ffffc90000477d78 R8 =0000000000000001 R9 =ffffed1005906d9d R10=ffff88802c836ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d3f1da8 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1e1d73 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f4dd80 CR3=000000000c775000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=adab731dd45bffb8948ba674902676be XMM01=c4053c0d237b02e919e4f333ca0e3ccf XMM02=62854bc3e17019037c8aa16843e68a81 XMM03=9517410259a31188ea24032e4ade9597 XMM04=000000000000000000000000000101c0 XMM05=00000000000000000000000000000040 XMM06=c38caef2c4f05c320000018100000181 XMM07=c3e317e8c508c118c5e7d6f400000000 XMM08=c479ef0c000001810000018100000181 XMM09=0000018100000000c5dc5ffa00000181 XMM10=34fe4c8b735edc2aaebf9f63cbb572bf XMM11=602b2ab819130e5d76e351b85195d58f XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=a54ff53a3c6ef372bb67ae856a09e667 XMM15=5be0cd191f83d9ab9b05688c510e527f info registers vcpu 3 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff848ba295 RDI=ffffffff92410220 RBP=ffffffff924101e0 RSP=ffffc90003747790 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=0000000000000054 R14=ffffffff848ba230 R15=0000000000000000 RIP=ffffffff848ba2bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005765808c CR3=000000004eec1000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000