atadv0: Adding interface: batadv_slave_1 [ 3067.127793][T18971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3067.161317][T18971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3067.221130][T18971] device hsr_slave_0 entered promiscuous mode [ 3067.238453][T18971] device hsr_slave_1 entered promiscuous mode [ 3067.246130][T18971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3067.265489][T18971] Cannot create hsr debugfs directory [ 3067.407591][T18971] bridge0: port 2(bridge_slave_1) entered blocking state [ 3067.415628][T18971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3067.423017][T18971] bridge0: port 1(bridge_slave_0) entered blocking state [ 3067.430052][T18971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3067.508714][T18971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3067.529898][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3067.538777][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 3067.553780][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 3067.565963][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3067.592126][T18971] 8021q: adding VLAN 0 to HW filter on device team0 [ 3067.610411][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3067.620183][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3067.637852][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 3067.645255][ T5653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3067.675715][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3067.686338][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3067.703523][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 3067.710580][ T5653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3067.726432][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3067.738788][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3067.766800][T18971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3067.785875][T18971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3067.808634][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3067.826954][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3067.838992][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3067.854088][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3067.866554][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3067.878738][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3067.899271][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3067.914454][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3067.946072][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3067.958571][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3067.970503][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3067.987452][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3067.998266][T18971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3068.088689][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3068.106996][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3068.130012][T18971] device veth0_vlan entered promiscuous mode [ 3068.146801][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3068.159723][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3068.179682][T18971] device veth1_vlan entered promiscuous mode [ 3068.189982][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3068.208043][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3068.226416][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3068.256775][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3068.270460][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3068.286812][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3068.303238][T18971] device veth0_macvtap entered promiscuous mode [ 3068.322954][T18971] device veth1_macvtap entered promiscuous mode [ 3068.347083][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.364300][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.380221][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.398245][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.410494][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.428306][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.438893][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.450853][T28627] Bluetooth: hci6: command 0x0409 tx timeout [ 3068.459545][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.477269][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.488701][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.505969][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.520211][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.539886][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.557570][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.568506][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.586162][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.597190][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.620101][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.638351][T18971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3068.648895][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3068.665604][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3068.677181][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3068.690183][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3068.709588][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.729577][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.740346][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.758107][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.768694][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.787007][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.798113][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.817625][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.829518][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.847483][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.859607][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.877784][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.888609][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.906262][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.917972][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.940611][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.957690][T18971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.968897][T18971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.987051][T18971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3068.996135][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3069.014211][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3069.177922][T13359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3069.242579][T13359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3069.279213][T32525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3069.295938][T32525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3069.315541][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3069.338599][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3069.429986][T19317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3069.458379][T19317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:32 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:10:32 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xe000000}, 0x0) 18:10:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000040), 0x4) 18:10:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffffff}]}, 0x24}}, 0x0) 18:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x4000000}, 0x0) 18:10:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="08000f0000000000"], 0x24}}, 0x0) [ 3069.850673][T19323] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3069.871005][T19323] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x5000000}, 0x0) 18:10:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/46, 0x2e}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000400)=""/74, 0x4a}], 0x6}, 0x40002100) syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0xd0, 0x8, &(0x7f0000000bc0)=[{&(0x7f00000005c0)="612558f479aa37b0d9e71c1a6735ee54cd85958c7b6cc290028a1df0faf6295534bec2773f473d2abf9ee58dcd34f81c346536bc97b263d2d89172fb9ec763fe51d7867d6b9a0183644d220548c566ecef124b4d3583ee2c9ead56c251587e90041eaca22c30ce493226b11cb16f0dac0b652f6cb6d4ee937a666eb2116a61e31ed8ee88ca54d49dbcc1053c31a16457e97b5be4b3b6d41dd5", 0x99, 0x1}, {&(0x7f0000000680)="dec6865108a8805a68f67e857da8e6f99c82c5ff9a7789364645e438325984a633c0d00f347e6fdd91dce6ded73e56b7375abfb1ade0bb105c89706db6070a062e95119c5fbad72611b40e41cfa238cd3c4017583a992ed8ac1c3905a867a06ac376e5c20b915ac766b6a8cf82efe14b497a853324dcde0f2bfed6959f1be1a59c82570ff4e7cae59fdcb7847622cd5da7ab42e93d421031889bcce116a4ae0a32d978afe1c8aade7a0e81dc9aad4b49128cd430623133b9ee09512a655a2c5d5f4edff605e377430685", 0xca, 0x9}, {&(0x7f0000000780)="db18bf4701d6d0b336c9ca574d615f410fb635b8bca8e56b63949774566bf427d8f3a25739518f3d7eb539bd85ce30081a73b92a6a285511f578b2ffe471bd2acd431688252833693694365d4916345184cf857ec0574ad1122c6963ff5ddc0359ea781185e597f35c8d72a0c825e45bd4b7813a59ee6e02ab295730bf5de2130bbfeccb195c64530c07c67f25e72f", 0x8f, 0x1b8}, {&(0x7f0000000840)="5f5133bb74a2c086b750026602729466e8b72b6a6ac6a38251", 0x19, 0x1400000000000}, {&(0x7f0000000880)="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", 0xfa, 0x6}, {&(0x7f0000000980)="8221a2216233fe240bc20b201ea5c6028938b984f8809b99bf3ee9ba71f4631eb472c093f4e1bef7d1593367f6196f567d88cd9ecb05e3c52fd5ec50cbf04d08d9c59027f39ea52ab9a90e0a77a0c3d441f94b7c3904cf432ead125686a8ecf476e0c919a03b909b17b6b4313a7ada3bad5a9c6f3c28ad1691f9098ff8baf9e0aa2167499fdeb9917012abbf2e8ae9582b80d10c224a6e8bb45c9d4dda1a1297431d0451f496b7711c27239122e4aa9407c9373150b6a9410252be3545d639943fb90a54a8943aed1e75601f0e325644e235282ad370e3d5616489b8e28bceb24be3b409ecb0e5edbd7edcfbf008efce869a71088131", 0xf6, 0x8}, {&(0x7f0000000a80)="82b690089566024d09a870b30a38f1dcede6891c667d76d9e46e581379c4b64976d585606b4bc444e44bb4f52492f6c137738905e45831b15640ff7b0f8e4dc6474c2bcb204954551b074ac8a16a5339831cb873a068137837ee56d85057451a721ff45e31df2fb918ede71b340fc5eb02249178c9be539cfede11226273c7f72a57f944d540de4771fcba9c2c1c2a5a11b27328578fd2c9edba53737db3b6e3e6ea3e072562c6e77dad36ff2e2bc1", 0xaf, 0x7}, {&(0x7f0000000b40)="56a54d9d3c9db196bc54b9e3fafe9c8eaffd9d9ec4d084c99c93783511e9fc85b8ab07d294aad452c0a30d3179b6a0787c937cadfb6c2868f170ac964c27c1bf8b795cf63c5d18d7f74e36ae5ac3a834f2f9078c5ccc02e388a0ed567b73844a57e402d68e945562328a9b00eba92bc63430441d7dcfd6e39d85", 0x7a, 0xfffffffffffffff7}], 0x12002, &(0x7f0000000dc0)=ANY=[@ANYBLOB="687567653d6e657665b6951e8f643d775cfa19e47076ebe175a82d18b6d8b055b2ac2605ee81ba4e20d803395db2345af6b06b56c969e06680d48112740be42a372b90887ce71aa71a8c39b97e83706e1873fc82882b56a6bb2c3853a29ccbb6c1dbe31285b269b0a0397784c91a9236e8b5f351e2d0362ff490549b0ccbd7aab430beda13c2578c59df3350452597649843a65593804b8d655cfa88ac9bc7010762580976420b8243d9692c13b32131ce126380a9fadcf8cbb524fbda84a9a2498eae8a37285ed98195357ed9f2ec1feff403f5747164e0e0e221d25699a513197ee2598f", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESDEC, @ANYBLOB=',\x00']) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000919a000008000000000000000d8100", @ANYRES32=0x0, @ANYBLOB="6b79853bd9295e9599afbe5319cf67d3fe736905d66f7c047f25e9faca8c9572f7c02c3f38efdda6991c488340d4eaefa17ec984eb7c"], 0x24}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[], 0xff01) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb3ae6e8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x4004800) [ 3070.027015][T19337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3070.098616][T19338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:32 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xf000000}, 0x0) 18:10:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0xc4, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "130c6dbf384be8c24e79f68d4060d5046df24f062bade786"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "26280cc9d54aac07b51ea557e16d5740103f50dd6fb62ca8"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "afdd1d986a1e9aec4cec21b458e61061c089b83238aa7234"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000040}, 0x8c8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) [ 3070.245986][T19351] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x6000000}, 0x0) [ 3070.355794][T19351] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:32 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x1f000000}, 0x0) [ 3070.461884][T19364] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3070.472703][T19364] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:33 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:10:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0xf}}, 0x0) 18:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x7000000}, 0x0) [ 3070.530820][T28627] Bluetooth: hci6: command 0x041b tx timeout 18:10:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x14}}, 0x0) [ 3070.689181][T19377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x8000000}, 0x0) [ 3070.747488][T19380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0xc0}}, 0x0) 18:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x9000000}, 0x0) 18:10:33 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:33 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:10:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 18:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xe000000}, 0x0) 18:10:33 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x20000000}, 0x0) [ 3071.278088][T19400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3071.329755][T19404] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3071.344754][T19406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3071.426752][T19404] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x1dc, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x3}, {0x1}, {0x1, 0x6}, {0x4, 0x3}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x4}, {0x1, 0xa}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x2, 0xa}, {0x1}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0xa}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x4, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0xa}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x5, 0x18, 0x36, 0x24, 0x16, 0x1b, 0x12, 0x60, 0x18, 0x60, 0x60, 0x24, 0x1, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xcb, 0x9b4, 0x101, 0x208, 0x6, 0x4, 0xd4d7]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0xa}, {0x1, 0x4}, {0x2}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x8}, {0x3, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x7, 0xa}, {0x4, 0x2}, {0x7, 0x6}, {0x2, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x3}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0xa}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x2}, {0x6, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x7}, {0x6, 0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {0x2, 0x8}, {0x2}, {0x6, 0x4}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x9}, {0x5, 0x9}, {0x6, 0x8}, {0x4, 0x8}, {0x5, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x5}, {}, {0x0, 0x9}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x2}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x2, 0xa}, {0x4, 0x1}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x6, 0x8, 0x5, 0xbc6e, 0x9cd8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8001, 0xffff, 0x1, 0x5, 0x1, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0xa}, {0x5, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x5}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {}, {0x3, 0x7}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x1b, 0x16, 0x18, 0xb, 0x30, 0x36, 0x3, 0x4, 0x3, 0x12, 0x60, 0x43, 0x1b, 0xd, 0x4, 0x2, 0x36, 0x1, 0x5, 0x1, 0x0, 0x18, 0x1, 0x5, 0x3, 0x2, 0x1, 0x6c]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0xf, 0x30, 0x12, 0x18, 0x3, 0x6c, 0x29, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x30, 0x3f, 0x62, 0x4000, 0x4, 0xf6, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x24, 0x48, 0x5, 0x6, 0x48, 0x16, 0xc, 0x3, 0x1b, 0x6c, 0x5e70766e7f873a98, 0x5, 0x12, 0x16, 0x18, 0x4, 0x4, 0x9, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x18, 0x36, 0x9, 0x4, 0x9, 0x2, 0x4, 0x14, 0x5, 0x9, 0x12, 0x1b, 0x48, 0x60, 0xf, 0x5, 0xb]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x24008040}, 0x48841) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xe4, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa7}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x7}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x3, 0xa}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x2}, {0x7}, {0x3}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x4, 0x5}, {0x7, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x7}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x3}, {0x6, 0x6}, {0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x2}, {0x5, 0xc}, {0x3, 0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x100, 0xfe36, 0x3, 0x1, 0x9, 0x800]}}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0xc, 0x9, 0x2, 0x30, 0x30]}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x5}, {0x1b}, {0x60}, {0x60, 0x1}, {0xb}, {0x4}, {0x12, 0x1}, {0x6, 0x1}, {0x6c}, {0x18}, {0x9d2e21d8acbd334f, 0x1}, {0x9}, {0x4, 0x1}, {0x48, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x1e}, {0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xe4}}, 0x8040) 18:10:34 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x2e8377a3}, 0x0) 18:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xf000000}, 0x0) [ 3071.561593][T19420] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3071.572663][T19420] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0xec0}}, 0x0) 18:10:34 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:10:34 executing program 0: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="00000600000000002d36ec97e2f2ad22d405000000000000001d3e20b8beca987653a81cf5578e938242b54c30685aeb8df6cf5db049eb4f73d10a856cd133efd4ea6ca9db80d8355b18c57d6fdd9c95ec8fe3e7b5666ddff557501de1228d4b6d3e59e52c38c1cfca8adfa11f24456a7cc8d0ca22e4c75f6e8000000da03de479fd009eb11cca0db34b5f172505e7b36d3a434a7f33d6743ff369a94502979dfb36587a4c128faafbb7ba7377089d60031f3e337941277920f0bcd822b9eae20c5ef4db00802fda834b094493d04a01ab5df3b1498d869038195fb73a917f2ebf291830f02a995cae804055207c00"/249], 0x24}}, 0x0) 18:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x3f000000}, 0x0) [ 3071.903750][T19439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x60000000}, 0x0) [ 3071.980009][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:10:34 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x315f0900}, 0x0) [ 3072.169152][T19451] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3072.241655][T19451] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000300)={0x0, 0x367a, [0x3a, 0x0, 0x0, 0x1f, 0x80, 0x1f]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff01) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7f}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x20}]}, 0x60}, 0x1, 0x0, 0x0, 0x14011}, 0x1000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 18:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x80002000}, 0x0) 18:10:34 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:10:34 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x325f0900}, 0x0) [ 3072.385367][T19463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3072.395149][T19463] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x33fe0}}, 0x0) [ 3072.481773][T19466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x9effffff}, 0x0) [ 3072.533219][T19472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3072.610801][T28627] Bluetooth: hci6: command 0x040f tx timeout 18:10:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 18:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xe4130000}, 0x0) [ 3072.746768][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:10:35 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x81, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x37}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) 18:10:35 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xf0ffffff}, 0x0) 18:10:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3d12da59", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a0007609000008009f0004000000080026006c0900000800a100b6dc0000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08006b00000000002400128008001a000300000006000200e6000006201900a2ed00020000000000bf0000"], 0x4c}}, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, r9, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0xa8, 0x5b, "792ee331c98e8b6b7efe7e544ff6840f626371a02d3e84f2f3b07abf2c5eed709241cf61b9acf5365aa8e6124ef33fd3ff202a64033c00a37c2a4155057c6f209b0e073aa1809b861f6880c11ba3a05353568b916b0964c0f127a56dc6f2ae03693393a43488f1ab81631c6e3d896267d93939d37e791ffaf8bdfe2002764fec087ea1a53da1f6d578af739be613a621d7cd80dbe7d6875ad9909cf9ee90b78296d82a16"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x810}, 0x20044000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x3c6fbe5344c183c) r12 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r12, 0xc0389424, &(0x7f0000000400)={0x0, 0x8, '\x00', 0x1, &(0x7f00000002c0)=[0x0]}) 18:10:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000eaffffffffffff4300000008000300", @ANYRES32=0x0, @ANYBLOB="08000f0000000000"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 3073.151974][T19501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3073.182314][T19503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:35 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x335f0900}, 0x0) [ 3073.236574][T19509] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xfffff000}, 0x0) [ 3073.326303][T19509] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3073.374531][T19517] netlink: 'syz-executor.3': attribute type 18 has an invalid length. 18:10:35 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x345f0900}, 0x0) [ 3073.456966][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3073.467494][T19527] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3073.477578][T19527] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x200001e4}}, 0x0) 18:10:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x20}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x20010044) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7ce38cfc", @ANYRES16=r1, @ANYBLOB="000827bd7000fedbdf25270000000c009900130400006d00000038002a008c1061081421fcbc561466b5b8be03195250bd06ffffffffffff8c10450b5888c8f82e06b5746eaf61e376450006010101010101"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40008001) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000018000000001c0100000001000000", @ANYRES32=0x0, @ANYBLOB="08000f0000000000"], 0x24}}, 0x0) 18:10:36 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, 0x0, 0x34) [ 3073.608510][T19524] netlink: 'syz-executor.3': attribute type 18 has an invalid length. 18:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 3073.672366][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3073.793160][T19541] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 18:10:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r3, 0x0, r4, 0x0, 0x10003, 0x0) ioctl$FIONCLEX(r3, 0x5450) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 18:10:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x7ffff000}}, 0x0) [ 3073.867835][T19545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3073.907292][T19547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xffffff9e}, 0x0) 18:10:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0xfffffdef}}, 0x0) 18:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xfffffff0}, 0x0) 18:10:36 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x355f0900}, 0x0) 18:10:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x2}, 0x0) 18:10:36 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, 0x0, 0x34) [ 3074.355349][T19571] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3074.365517][T19571] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x3000000000000}, 0x0) 18:10:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="26100000", @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="08000f0000000000"], 0x24}}, 0x0) [ 3074.573692][T19580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3074.621136][T19583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x20008000000000}, 0x0) [ 3074.690811][T28627] Bluetooth: hci6: command 0x0419 tx timeout 18:10:37 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20e000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000300)={0x7a, r0, 0x1, 0xfffffffe, 0x0, {{}, {@void, @val={0xc, 0x99, {0xf4b, 0x4f}}}}, [@NL80211_ATTR_TX_RATES={0x0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x0, 0x2, [{0x1, 0x1}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x2d, 0x9, 0x6c, 0x6, 0x14, 0xb, 0x5, 0x12, 0x16, 0x12, 0x18, 0x4, 0x48, 0x12, 0x36, 0x0, 0x5, 0x6c, 0x6, 0x16, 0x60, 0x36, 0xc, 0x60, 0x4, 0x18, 0x5, 0x48]}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x0, 0x9}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x4}, {0x7}, {0x6}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x9}, {0x2}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_GI, @NL80211_TXRATE_HT={0x0, 0x2, [{0x2, 0x3}, {0x2, 0x4}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x6, 0xa}, {0x7}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0xa}, {0x5, 0x8}, {0x6}, {0x1, 0x7}, {0x1}, {0x1, 0x7}, {0x6, 0x9}, {0x2, 0x7}, {0x7, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x5, 0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x7, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x2}, {0x2, 0x3}, {0x2, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x3, 0x3}, {0x2}, {0x7}]}, @NL80211_TXRATE_GI={0x0, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x0, 0x3, {[0xb6b9, 0x1ff, 0x200, 0x7ff, 0x8, 0x7, 0x401, 0x23a]}}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x0, 0x2, [{0x0, 0x5}, {0x5, 0x3}, {0x2, 0x5}, {0x7}, {0x6, 0x1}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x4, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {}, {0x1, 0x3}, {0x7, 0x5}, {0x5, 0x8}, {0x2, 0x6}, {0x0, 0xa}, {0x7, 0x9}, {0x7}, {0x4, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x6}, {0x6, 0x9}, {0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x4, 0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x1, 0x7}, {0x5, 0x7}, {0x7}, {0x7, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x4}, {0x7, 0x5}, {0x4, 0x5}, {0x2, 0x9}, {0x0, 0x6}, {0x5, 0xa}, {0x3, 0xf}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {}, {0x1}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x2}, {}, {0x0, 0x8}, {0x7, 0x8}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x6, 0x1}, {}, {0x4, 0x7}, {0x2, 0x1}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x5, 0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x9}, {0x5, 0x3}, {0x7, 0x1}, {0x7, 0x7}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x1}, {0x6, 0xa}, {0x4}, {0x2, 0x3}, {0x5, 0x4}, {0x4, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x5, 0x5}, {0x3, 0xa}, {0x4, 0x4}, {0x2, 0x4}, {0x4, 0x8}, {0x7, 0x1}, {0x1, 0x6}, {0x5, 0x8}, {0x3}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x4}, {0x2}, {0x3, 0x1}, {0x4, 0x7}, {0x6, 0x9}, {0x6}, {0x7, 0x7}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x7, 0x4}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x7}, {0x2}, {0x1, 0x8}, {0x2}, {0x3, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x3, 0x3}, {0x3}, {0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x0, 0x60, 0x3, 0x30, 0x4, 0x16, 0x6, 0x5, 0x61, 0x6c, 0x6, 0x9, 0x5, 0x17, 0xc, 0x1, 0x36, 0x1b, 0x36, 0x1b, 0x30, 0x4, 0x2, 0x1b, 0x36, 0x36, 0x12, 0x4]}]}, @NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0x1b, 0x36, 0x9, 0x5, 0x16, 0x36, 0x2, 0x1b, 0x30, 0x6c, 0x3, 0x16, 0x30, 0x16, 0x6, 0x36, 0x1b, 0x18, 0x2]}, @NL80211_TXRATE_GI, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x0, 0x9, 0x5, 0xab2, 0x5, 0x1, 0x5, 0x200]}}, @NL80211_TXRATE_GI={0x0, 0x4, 0x2}, @NL80211_TXRATE_GI={0x0, 0x4, 0x2}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x3, 0x9}, {0x4}, {0x6, 0x1}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x2}, {0x7, 0x1}, {0x6, 0x3}, {}, {0x3, 0xa}, {0x6, 0x7}, {0x3, 0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x8}, {0x6, 0x8}, {0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x6, 0x8}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x2}, {0x6}, {0x7, 0x3}, {0x4, 0x9}, {0x5, 0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x3, 0x2}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x7, 0x9}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x2, 0x2}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x7}, {0x1}, {0x1}, {0x7, 0x4}, {0x4, 0x4}, {0x3, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x9}, {0x3, 0x3}, {0x3, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0x4}, {0x1, 0x2}, {0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x1, 0x6}, {0x2}, {0x2, 0x9}, {0x6, 0x6}, {0x6, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x7}, {0x4, 0x6}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x3, 0x1}, {0x3, 0x7}, {0x1, 0x9}, {0x6, 0x9}, {0x7, 0x9}, {0x5}, {0x4, 0x6}, {0x3, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x0, 0x2, [{0x6, 0x5}, {0x1}, {0x0, 0xa}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0x8}, {0x6, 0x9}, {0x6, 0x6}, {0x5, 0x8}, {0x5, 0xa}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0x5}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x5}, {0x6, 0x6}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x5}, {0x1}, {0x5, 0x7}, {0x6, 0x1}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x6}, {0x0, 0x5}, {0x3, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x0, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x0, 0x4, 0x1}, @NL80211_TXRATE_LEGACY, @NL80211_TXRATE_GI, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0xcae64e15a5f959a4, 0x6c, 0x3, 0x18, 0x4, 0x1, 0x1]}]}, @NL80211_BAND_2GHZ={0x0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x0, 0x4, 0x1}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 18:10:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 18:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x40030000000000}, 0x0) 18:10:37 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, 0x0, 0x34) 18:10:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0x24}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) r4 = socket(0x18, 0x0, 0x0) close(r4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000480)={0x1d, r7}, 0x18) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000780)={0xfffffffffffffffc, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x224, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48091}, 0x1) 18:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 18:10:37 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x365f0900}, 0x0) [ 3075.212328][T19611] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3075.237519][T19614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3075.291414][T19611] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3075.307588][T19618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x7}, 0x0) 18:10:38 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x375f0900}, 0x0) 18:10:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b0887e0898"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c32df30e80"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 18:10:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 3075.490428][T19630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3075.500383][T19630] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x200000000000000}, 0x0) 18:10:38 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[], 0x34) 18:10:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc010}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}}, 0x4048000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "405194349efeab19e382ca71dcc46955e77897b9660ee7d3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bb51ea80b2ddc4e60eb3ab2e6da8ce454897b415605d6034"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "07ff1a5f6d95b66580ca59f7a01630a89636b3295e06b210"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008094}, 0x44800) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1b8, r5, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x76}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "46b5b1cf30736a341d49c511ca6e2e8e17b59a2cd489a7d7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x58}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a4d55b211f68df5b24632a85c268a5ff6e9635092fab2876"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cefd8b7af99ae6608e6933b5d04143709a7f5b33e745d941"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "648dd45390a1fbbd070968713f143e0b9cdd21d29a49adf9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x1b8}, 0x1, 0x0, 0x0, 0x11}, 0x4008090) 18:10:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 3075.920083][T19651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3075.967580][T19656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x400000000000000}, 0x0) 18:10:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x1, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r3, 0x0, r4, 0x0, 0x10003, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="0400cc0044002380060010000100000005000800c000f35e27076dcd97b05e95cb0e304c890000060045a3e81902000f00000006000400ad00000008002d00371090b7bacc4719ff"], 0x64}}, 0x0) 18:10:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000000)=""/102, 0x66}) 18:10:38 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x385f0900}, 0x0) [ 3076.347205][T19676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3076.464001][T19676] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x8}, 0x0) 18:10:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x500000000000000}, 0x0) 18:10:39 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[], 0x34) 18:10:39 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x395f0900}, 0x0) 18:10:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) [ 3076.609344][T19690] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3076.619568][T19690] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3076.721107][T19701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 3076.765216][T19705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xffffffff, 0x10}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 18:10:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x700000000000000}, 0x0) 18:10:39 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[], 0x34) 18:10:39 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000480)={0x1d, r5}, 0x18) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xa0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x4040) 18:10:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x800000000000000}, 0x0) 18:10:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001bae547e4db237aada4ad2bbff951f757776052e2a862a3e", @ANYRES16=r4, @ANYBLOB="20002abd7000ffdbdf255c00000008000300", @ANYRES32, @ANYBLOB="08006b0014000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008}, 0x0) [ 3077.359371][T19733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.416967][T19737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.464891][T19741] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3077.552847][T19741] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x6b}, 0x0) 18:10:40 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3a5f0900}, 0x0) 18:10:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x900000000000000}, 0x0) 18:10:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000001000)={0xbac, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x40, 0x8}}]}, @NL80211_ATTR_PROBE_RESP={0x689, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x19f, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_b, @device_b, @initial, {0x5, 0x4}}, @ver_80211n={0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x0, @default, 0x8008, @val={0x0, 0x10, @random="48f753557514a684712de194a2f8fd93"}, @val={0x1, 0x1, [{0x9}]}, @void, @void, @val={0x6, 0x2, 0x6}, @val={0x5, 0x74, {0x40, 0x6b, 0x1f, "7a3e242a6969033eede76104e8a6d416cb9a5d9642a738e978f23f685fc4e6569d0fb4ccbcfa262ac71363c0ced161e44ef448ad97b05b52dc85b65f1701d6cfd1ea672f991309e64b546fe8c79efc3c31fad6304fb99bc3751ace9fd54e7c2a3ad7ccc303e2d530a2169f279a6c8e9bee"}}, @val={0x25, 0x3, {0x0, 0x64, 0x1}}, @void, @val={0x3c, 0x4, {0x0, 0x1f, 0x40, 0x9}}, @val={0x2d, 0x1a, {0x2000, 0x1, 0x3, 0x0, {0x2, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x806, 0x1, 0x7c}}, @void, @void, @val={0x76, 0x6, {0x1f, 0x1f, 0x32, 0x6}}, [{0xdd, 0xb3, "bb8b7dc95e786454ce4cfcc6e3cbc4d57c6bf4ad55e281fde26e56a9bab5ad3819d2c8d7dfb1f542f08cbff55979593f4b4a4d0d9762493b0126c0d5574b35dfbdb81001feab6596acf88b2deeced4599621d4ea7042e6aa840c85b55d990e0006cef608f6f51b941950fd250d54cf64d2e2f8a7f6c3e64dbb76cefb7a1a5d3064a2b3b2213b8add89f5ea6bea10db88df3bf7b564a2e4dcf9737cf0c335082554d2f1bba2ef75cc5ce5c55834b982db665b3a"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x29, 0x80, [@ssid={0x0, 0x1c, @random="f821b1f9cb7d2d8919dfeb76510095f832861dc150d8345012b8e52d"}, @ibss={0x6, 0x2, 0x4f4d}, @challenge={0x10, 0x1, 0x35}]}, @NL80211_ATTR_BEACON_TAIL={0x131, 0xf, [@peer_mgmt={0x75, 0x16, {0x0, 0x3, @void, @val=0xb, @val="7a542f810863f88637b6dd2fc0267707"}}, @fast_bss_trans={0x37, 0x109, {0x40, 0x8, "6e104feb4bb2b34168ed5de2b4933573", "e70577785ae53ea9b3e99fd8d982212b28bb186c3d94e5d78bd03070763f18a2", "f631d4d546fe53d94524986c6d8a9d046e24cba02c8c4a9d2d040c0b8f6685d1", [{0x2, 0x1d, "14cfda8fca4c7b417e58ea6049d297dcb90eab4a83ebe7aa59caa2274e"}, {0x1, 0x2, '1E'}, {0x2, 0xc, "8236ac153e28fd91985b8d53"}, {0x1, 0x24, "8c3c77040ca3bcd35a65ab025a0569770fe87894f319e7c8c5699a6a52000728df7cbc3b"}, {0x3, 0x19, "9836587ded79973901ed438fb62bc510f6877894628011f9b9"}, {0x2, 0xc, "e5193382bb104f64d36011e5"}, {0x2, 0xb, "7aa51feac5329481816a0e"}, {0x1, 0x28, "ad7061e3bd6d5c5b95f8dd5d0c44d7b9bcedb928c911af350334853ec23bdf868fa7db739dc8839c"}]}}, @supported_rates={0x1, 0x8, [{0x48}, {0x2}, {0x6, 0x1}, {0x5}, {0x18, 0x1}, {0x30}, {0x9, 0x1}, {0x9}]}]}, @NL80211_ATTR_IE={0x1fb, 0x2a, [@preq={0x82, 0x6d, @ext={{0x0, 0x1, 0x1}, 0xa9, 0xaa, 0x1, @device_b, 0x3de2, @device_a, 0x8, 0x9a, 0x7, [{}, {{}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0x3de2}, {{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xee}, {{0x0, 0x0, 0x1}, @device_b, 0x8}]}}, @cf={0x4, 0x6, {0x0, 0x5, 0x6, 0xb52}}, @supported_rates={0x1, 0x6, [{0x24}, {0x82}, {0x3}, {0x36, 0x1}, {0xb}, {0x1b, 0x1}]}, @random_vendor={0xdd, 0xfb, "daa23b442bfcb019a62392f324e8ea25d14a0ea988fae6deb24cd0733305444ab316800fde9ba543f1c2305c31e405e3897bec3728983b70c971ead0e7e6f57b1bf0ddf86a4a3df8c1825ddcf8edbc1c6e77ccce649c317680d1d1360a16254e411e228903b84365dc68262b9a2a246c5792ff3953880642789b97f55c920ae955034ac6ac877d6d8ffd5b831244124ab0ff763d69ba35b50d297231a296460f3d848b0c4f707fe53a8b299743d8cfc305f763cd8b4f35cf94488a3a33cf7138fa70a18110f92efe156ee25b5d9bac5d6028dcba73363db8176076c23cf764217598d1aa5c93f2e41cba4e036f06d1ce071e609ebbe7e33afd98c7"}, @dsss={0x3, 0x1, 0xac}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @prep={0x83, 0x1f, @not_ext={{}, 0x18, 0xdf, @broadcast, 0xc452, "", 0xfffffff7, 0x0, @device_a, 0x3ff}}, @measure_req={0x26, 0x4f, {0x4, 0x2, 0x1f, "193216cd9df38bdbb97a8044e587faa23a2eefb2e568bfb4fa77c358226969f3fcb91f051f9c5f83aa51eeb065db8c51e0e2ef7026e0ebbfcb173e269c2f8cef6bc235528cf1e4d047364834"}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0xbac}, 0x1, 0x0, 0x0, 0x48800}, 0x400a084) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f00), 0x8102, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000480), 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140), 0x18) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x4) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={0x0, @can, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, @can={0x1d, r5}, 0x3e, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)='ip6gre0\x00', 0x1, 0x6, 0x5}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r3, 0x0, r4, 0x0, 0x10003, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="317200000000040009000a000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x200, r7, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfbfc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x47772b35}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x743}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61a8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fa052ea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xeed}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8e2b}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40014}, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xffffffffffffff4a}]}, 0x30}}, 0x0) [ 3077.690389][T19754] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3077.700511][T19754] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:40 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000000000f0000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xe00000000000000}, 0x0) [ 3077.924310][T19760] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 18:10:40 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3b5f0900}, 0x0) [ 3078.021383][T19772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3078.118323][T19772] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xe4, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6f}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xfff7, 0x9]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x0, 0x0, 0x2, 0xc000, 0xf83, 0xb69, 0x8]}, @NL80211_ATTR_FRAME={0x94, 0x33, @beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @device_b, @device_a, @initial, {0xd, 0x2}}, @ver_80211n={0x0, 0x8, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0x8001, 0x1, @void, @val={0x1, 0x6, [{0x24, 0x1}, {0x24}, {0x16}, {0x24, 0x1}, {0x6c, 0x1}, {0x24}]}, @val={0x3, 0x1, 0xb3}, @val={0x4, 0x6, {0x5, 0x6, 0x204, 0xa9b5}}, @void, @val={0x5, 0x25, {0xff, 0x1d, 0x7, "90fb2d7aec90eb60a3534e2b4ebbd90f2f72ac92e54e8d2398e029215abf72e3b937"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xce, 0xb4, 0xdf}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x21}}, @void, [{0xdd, 0x15, "40f89bf4cfc7d7ecafd9aeacc3ad394e8e8c4057e6"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x7]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x81, 0x40]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x45}, 0x24040015) 18:10:40 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3c5f0900}, 0x0) 18:10:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 3078.239316][T19783] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3078.249352][T19783] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x7e}, 0x0) 18:10:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 18:10:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x6000000000000000}, 0x0) 18:10:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r4, 0x4c82ea530285fe45, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20040005) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xff01) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @void, @val={0xc, 0x99, {0xb0db, 0x68}}}}, [@NL80211_ATTR_VENDOR_DATA={0x2d, 0xc5, "6fa5ac25525df8da72ab29c4c5734ee173067144ae45f17784f49d0c01ddc2e45c3604b3dea60e1563"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x4000004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08006b00000000000a0018000303030303030000"], 0x30}}, 0x0) 18:10:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 3079.024539][T19814] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 18:10:41 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3d5f0900}, 0x0) [ 3079.087710][T19820] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:10:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xe413000000000000}, 0x0) 18:10:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08006b00000000000a00180003030303030300005499b7634d532342721f21364d20e0311a002ea2404545e059529293c9624b343c51d6f737d0c3a0e0fcd9b754aa61c2a494f424c845770d3ad2499cb718ef0d40a4dccff48e9b57fef85cf24d562e8e872805c3d13ebc4adfdc2dc131c2da3ac112742ad31f0af67b5926b7563b708d0099cad884c53dcf46a4077f6f51f7"], 0x30}}, 0x0) 18:10:41 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000240)=@ctrl_frame=@pspoll, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000480)={0x1d, r4}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, 0x0, 0x401, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x5}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x3400c090) splice(r0, 0x0, r1, 0x0, 0x10003, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3079.199635][T19820] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:41 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3e5f0900}, 0x0) [ 3079.335756][T19835] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3079.345855][T19835] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x300}, 0x0) 18:10:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 3079.438602][T19840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3079.472190][T19844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:42 executing program 3: r0 = getpgid(0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x3, 0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0x30}, 0x0, 0x0, 0x4, 0x6, 0x7fffffff, 0x6, 0x1, 0x1000, 0x709, 0x8380, r0, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r5, 0x0, r6, 0x0, 0x10003, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r7, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6e}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x6a}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000988}, 0xc014) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) [ 3079.508926][T19846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3079.571015][T19840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3079.684066][T19846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 18:10:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85513, &(0x7f0000000840)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x2]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x3ed, 0x800, 0x70bd2d, 0x25dfdbfb, "33f54227ce3596c2b8958f27e47a210045d52643de1795c1745f7e03538d712236b46230916c70b730cd36fe96148525d783551da78dfcb4fcb5cd28e7a0f1cd156b39dbe238073b31f709c0462f96f17d7c2b77316e1fcef9c0069d53dad1ccaa332be22639bf026ca3896029e1be1b4d50cca1ed626d3f30a0b5", ["", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20) 18:10:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 18:10:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) 18:10:42 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3f000000}, 0x0) 18:10:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x40) [ 3080.191626][T19876] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3080.259137][T19876] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:43 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x4c00}}}}}, 0x30}}, 0x0) 18:10:43 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x48000000}, 0x0) 18:10:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) 18:10:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0xffffff1f}, 0x0) [ 3080.593858][T19894] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3080.604036][T19894] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x74, 0x0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7ff, 0x71}}}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7f}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffbf}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x18}]}]}, 0x74}}, 0x0) 18:10:43 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r4, 0x0, r5, 0x0, 0x10003, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd27, 0x0, {{}, {@void, @val={0xc, 0x99, {0x2184, 0x2e}}}}}, 0x20}}, 0x4001) 18:10:43 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x4c000000}, 0x0) [ 3080.775096][T19907] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3080.785019][T19907] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x3}, 0x0) 18:10:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x2}, 0x0) 18:10:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 18:10:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 3081.182254][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.188596][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 18:10:43 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {0x2, 0x14, 0x80, 0x3f, 0xfc, 0x2, 0xfd, 0x9, 0x2500}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 18:10:44 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x4c00}}}}}, 0x30}}, 0x0) 18:10:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 18:10:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40d42, 0x88) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r2}, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x8400, 0x80) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}, @ldst={0x0, 0x2, 0x6, 0x3, 0xd53d89dd02f4c5fe, 0x80, 0x1}, @exit]}, &(0x7f0000000540)='syzkaller\x00', 0x3, 0x8, &(0x7f0000000580)=""/8, 0x40f00, 0x1, '\x00', 0x0, 0x20, r2, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xe, 0x1, 0x401}, 0x10}, 0x78) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8001) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES64, @ANYBLOB="3f7023de2fdb85e5ab12bce669e674d94dd9271aa5a2077a84ba1ae877c70b4dabd5b623fc7198357993a47b0d4c61808571c91f7bce6c65c6f37e1c1e0214cd622bfd3e4bd4ad832df805b429c468c51705f7bd97813c45d446575432d4612945f19c4936465ddaed60b19ef7b40b087334fa7d84e2052a8bd49523b3a62adc7693a60a258fc7c15856ac4db6500000169b", @ANYRESHEX=r5], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 18:10:44 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x60000000}, 0x0) [ 3081.623512][T19950] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3081.660311][T19950] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:44 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x68000000}, 0x0) 18:10:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000440000000826b1d69467f2000300", @ANYRES32=0x0, @ANYBLOB="08000f0000000000"], 0x24}}, 0x0) [ 3081.856466][T19965] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3081.879297][T19965] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3081.902474][ T25] audit: type=1804 audit(1638209444.426:18274): pid=19962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir607593495/syzkaller.CS6sQT/2918/file0" dev="sda1" ino=15434 res=1 errno=0 18:10:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x3}, 0x0) 18:10:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) 18:10:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x108c0012}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x10) [ 3082.124084][T19976] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3082.147991][ T25] audit: type=1804 audit(1638209444.506:18275): pid=19962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir607593495/syzkaller.CS6sQT/2918/file0" dev="sda1" ino=15434 res=1 errno=0 [ 3082.218267][T19980] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 18:10:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x7}, 0x0) 18:10:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xff01) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd013d357f7d42e3cb00000800fdf6", @ANYRES32=r2, @ANYBLOB="0c009900ff0100001200000014005500dc9fef58daf5cd8ab8b42ae55496bd37140055003514f0f3f50f5390d7e223ce12c22b790a000600510726fe206f0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x124, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x4}, {0x7, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x2, 0x2}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0xa}, {0x7, 0x8}, {0x3}, {0x6, 0x6}, {0x3, 0x1}, {0x4, 0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {}, {0x7, 0x6}, {0x4, 0x8}, {0x7}, {0x4, 0x6}, {0x5, 0x8}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x6}, {}, {0x6, 0x4}, {0x6, 0x5}, {0x3, 0x9}, {0x7, 0xa}, {0x5, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x6, 0x7}, {0x4, 0x7}, {0x6, 0x5}, {0x2}, {0x0, 0x9}, {0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x4, 0xa}, {0x1, 0x9}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x3}, {}, {0x2, 0x2}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x7ff, 0x7, 0x6, 0x6, 0x4, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x5}, {0x0, 0x3}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x7, 0x5}, {0x7, 0x7}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0xa}, {}, {0x3, 0x7}, {0x1, 0x5}, {0x2}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x5, 0xa}, {0x7, 0x9}, {0x7, 0x5}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x1}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x4}, {0x7, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x12, 0x18, 0x36, 0x1, 0x1b, 0x36, 0x6, 0x36, 0xc, 0xc, 0x6, 0x5, 0x16, 0x16, 0x2, 0x60, 0x0, 0x1b, 0x9, 0x16, 0x60, 0x24, 0x48, 0x60, 0xc, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x514, 0x6, 0x2, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4f6, 0x81, 0x7, 0xfffc, 0x7, 0x9, 0x800]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x124}}, 0x0) 18:10:45 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff0802110000000000af422f456c"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000002c0)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @initial, {0x7, 0x27e}}, {0xc, 0x0, 0x3, 0x0, 0xc7}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x68fc}, @device_b, @broadcast, @from_mac=@broadcast, {0xc, 0x3}, @device_b}, {0xb, 0x1, 0x1, 0x1, 0x65}}}, @ver_80211n={0x0, 0x6, 0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0xb, "d7ae36f7955831fd23c36b"}, {@device_a, @device_b, 0x6a, "e27e26053948eb2dfe6c9148126b9364dae780ed1fa3ee197cfab35d3e45c842479d38bd430fc32275f81beae4ba0ffc85670ca3e37022b91b8ee17d4112aa2d29da59e158581efc0f1e782abb4c8346b75c4a141ece0ac7ce4ed26caf9596d84e8fcf7057ce406209ed"}, {@broadcast, @device_a, 0x25, "1941da94bda72b29f659e02b1bcd9dd10d411a1a5b0745c60961a215acde4c324763f8e6ab"}, {@device_a, @device_b, 0x2e, "bb39bb341507154a68c2cff6e715815daec36fb9654af4a3d25221061c78e7ef0465a1934106c09c8e15656669a0"}]}, 0x142) 18:10:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x0) 18:10:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="08000f7500830874"], 0x24}}, 0x0) 18:10:45 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x6c000000}, 0x0) [ 3082.703436][T20005] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:10:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000ffc160010400006a1c328b2bb1933fb272e82ae527f22a25a2e632208df9273544aaaae595d071f3838f68b70400b326b3e5ebbe108f340ffdd8e6bc810176cc7b05c1e78b3e218236034bfa6c364cbc6ec8d456f05e5cab6ef19b4d30d1b4caa945f27d41d962bf987a4ba629a5c55b96c962d3ac11e34d60532321e05095a9e0a6e00461f9f3e416", @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08006b00000000000a0018000303030303030000"], 0x30}}, 0x0) [ 3082.825994][T20005] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:45 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x74000000}, 0x0) [ 3082.960595][T20025] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3082.961137][T20022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3082.970858][T20025] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3083.019978][T20027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x4}, 0x0) 18:10:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 3083.073484][T20028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r4, 0x0, r5, 0x0, 0x10003, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="24030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x324}, 0x1, 0x0, 0x0, 0x91}, 0x40000) [ 3083.116570][T20030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3083.164483][T20031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3083.206076][T20027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x24}}, 0x0) r3 = socket(0x18, 0x0, 0x0) close(r3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)) bind$can_j1939(r4, &(0x7f0000000480)={0x1d, r6}, 0x18) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r6}, 0x18) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20004041) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x5d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c004c9f", @ANYRES16=0x0, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) connect$can_j1939(r4, &(0x7f0000000240)={0x1d, r6, 0x3, {0xe5a9f6e5794beeb3, 0xff}, 0x1}, 0x18) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x37ead2ce819afbad}, 0x4000091) 18:10:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xe}, 0x0) 18:10:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x0, 0x5, 0x0, {0x5, 0x0, 0x0, 0x264, 0x0, 0x0, 0x1}, 0x1, 0x1}}, @NL80211_ATTR_IE={0x56, 0x2a, [@tim={0x5, 0x50, {0x7f, 0x9b, 0x3, "fcc39504fd1cf586aee65fa70a45fb25ddf10ee48f5e47c8241605020547f310d5ba11451fdb111faae991fc60c47a674cfa7bb2aebe3309a8aa76bf4eecb4607319024501dfd32fb8adcdb89a"}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040081}, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x500, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) 18:10:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xf}, 0x0) 18:10:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffffffffffffff00}, {0xc, 0x90, 0xd24}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc4001}, 0x20008000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x0) 18:10:46 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x7a000000}, 0x0) 18:10:46 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="4b1f66240802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) [ 3083.823544][T20062] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3083.913090][T20062] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3084.011507][T20071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x5}, 0x0) 18:10:46 executing program 0: setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x200}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="08000fac64abf011"], 0x24}}, 0x0) [ 3084.068521][T20076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3084.126114][T20077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3084.157398][T20071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff01) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff01) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[], 0xff01) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x40080) 18:10:46 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x80170000}, 0x0) 18:10:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 3084.260975][T20087] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3084.270611][T20087] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r1, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x36}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_batadv\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe2c94531355ecd8fe2e7382dde34534ae5a5061f222f916"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x300}, 0x0) 18:10:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000002c0)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3800}, @broadcast, @device_b, @random="66572eee3b4d", {0x5, 0xff8}}, 0x3f, @random=0x4, 0x10404, @void, @void, @val={0x3, 0x1, 0xb9}, @val={0x4, 0x6, {0x3, 0x1, 0x8000, 0x4}}, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x0, 0x95, 0x9d}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x2, 0xb7, 0x2}}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x1, 0x0, {0x5, 0x9, 0x0, 0x8, 0x0, 0x1}, 0x400, 0xffffffc0, 0xb}}, @void, @void, @val={0x76, 0x6, {0xab, 0x4, 0x37, 0x7}}, [{0xdd, 0x72, "e75b7482a371b7931f6138f39e8453a46f7397842915eaa13ac341486e837c6a2cb4a1e584eb1870a357b5a4fc6c30c9fc03f0481e337c2339cd8922496bdf8b1eefa50da867362657014e68362a4d7c034ce04b22dd1e61e04427a7f94f6201116107576df4700ef66be5ba0e4bf0e91cb1"}]}, 0xd9) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) 18:10:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf250964000018dd068000000c000300fffbffffffffffff34000380080003004f9c0000080002000403000008000200fdff56a6ac6408000200fffffffaa6c35fee76a757001c000980080001000001000008000100e62285050800010000080000"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x4000001) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x84, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x757}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff134}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2d3d}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x80) 18:10:47 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8, 0x2001}, @val={0xc}}}}, 0x30}}, 0x0) [ 3084.665485][T20112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 3084.722360][T20114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3084.770460][T20117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3084.810055][T20112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) r2 = dup(r0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x4d8, r1, 0x400, 0x70bd25, 0x3, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x2dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x1, 0x173, 0xffff, 0x3, 0x4, 0xfffc, 0x3]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x7ae59e0deab3002c, 0x30, 0x16, 0xc, 0x1b, 0x30, 0x30, 0x18, 0x1, 0x16, 0x36, 0x30, 0x24, 0x1]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x5, 0x8}, {0x0, 0x2}, {0x1, 0x7}, {}, {0x6, 0x9}, {0x6, 0xa}, {0x6}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x6, 0x5}, {0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0xa}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0x9}, {0x4, 0x7}, {0x7}, {0x6, 0x4}, {0x0, 0x6}, {0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x3, 0x9}, {}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x2, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x1}, {0x2, 0x3}, {0x1}, {0x3, 0x8}, {0x1, 0x3}, {0x7}, {0x4, 0x9}, {0x4, 0x9}, {}, {0x1, 0x9}, {0x2, 0x5}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0x1}, {0x1}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x2}, {0x5, 0x1}, {0x7}, {0x0, 0x2}, {0x2}, {0x7, 0x3}, {0x2, 0x8}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x6, 0xc, 0x24, 0xc, 0x2, 0x24, 0x48, 0x4, 0x1b, 0x3, 0x2, 0x9, 0x16, 0x6, 0x3, 0x16, 0x60, 0x60, 0x18, 0x60, 0x16, 0x30, 0x6, 0x44, 0xc, 0x5, 0x0, 0x16, 0xb]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0xa}, {0x2, 0x1}, {0x6, 0xe}, {0x2, 0x3}, {0x7, 0xa}, {0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x2, 0x8}, {0x2, 0x6}, {0x5, 0x4}, {0x2, 0x2}, {0x2, 0x9}, {0x5, 0x5}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x1}, {0x6, 0x1}, {0x5, 0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x4}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x7, 0xa}, {0x6, 0x6}, {0x3, 0x4}, {0x6, 0x7}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x7}, {0x1, 0x2}, {0x2, 0x9}, {}, {0x4, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x7, 0x3}]}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x2, 0x48, 0x36, 0x48]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x9}, {0x6, 0xa}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x7}, {0x3, 0x9}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x6}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x5}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x5, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0x5}, {0x2}, {0x6, 0x2}, {0x2}, {0x5}, {0x7}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x4}, {0x5, 0xa}, {0x0, 0x8}, {0x3, 0xa}, {0x6, 0x1}, {0x5, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x4, 0x9}, {0x4, 0x4}, {0x4, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x8}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x1b, 0x1, 0x36, 0x6c, 0x24, 0x1b, 0x16, 0x60, 0x1b, 0x18, 0x2, 0x0, 0x12, 0x30, 0x24, 0x24]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0xc, 0x36, 0x24, 0x60, 0x48, 0x16, 0x9, 0x18, 0x6c, 0x1, 0x6e, 0x48, 0x6, 0x0, 0x16, 0x16, 0x6, 0x9, 0x48, 0x30, 0x48, 0xb, 0x3, 0x4, 0x24, 0x9, 0x24, 0x16, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x73, 0x3, 0x9, 0x7ff, 0x4, 0x8000, 0xd40b, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41, 0x2, 0x1f, 0x8000, 0x7, 0xf4e, 0xdda0]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x5}, {}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x2}, {0x5, 0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x3}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x8}, {0x4, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0x2}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x5, 0x3, 0x36, 0x5, 0x4, 0x5, 0x1, 0xc, 0x30, 0x1, 0x36, 0xc, 0x4, 0x1b, 0x1, 0x58]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x6}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0x3, 0x3}, {0x3, 0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x7}, {0x1, 0x4}, {0x0, 0x3}, {0x3, 0x7}, {0x3}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0x7}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x1}, {0x7}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x9}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x1b, 0x60, 0x24, 0xbce39ca7cb44d68c, 0x60, 0x16, 0x6c, 0x1, 0x19, 0x12, 0x4, 0x4, 0x1b, 0x6c]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x48, 0x6c, 0x5, 0x12, 0x18, 0x48, 0x9, 0x24, 0x45, 0x1b, 0x48, 0x6c, 0x36, 0x4, 0x1, 0x12, 0x6, 0x6c, 0x4, 0x7c, 0x12, 0x5, 0x1b, 0xc]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x9, 0x6c, 0x1, 0x5, 0x1b, 0x2, 0x12, 0xb, 0x24, 0x16, 0x1261a7183e42643d, 0x12, 0x6c, 0x6c, 0x4, 0x3d, 0x18, 0x30, 0x4, 0xc, 0x48, 0x0, 0x30, 0x6c, 0x4, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {}, {0x7, 0x8}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x6}, {0x2}, {0x7, 0x6}, {0x0, 0x3}, {0x7, 0x3}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x7}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x6}, {0x4, 0x7}, {0x5, 0x9}, {}, {0x4, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x3, 0x6}, {0x2, 0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x1}, {0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3, 0x9}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0x6}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x12, 0x18, 0x5, 0x5, 0xc]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x8}, {0x5}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x3}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x5, 0x8}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x2}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x7}, {0x5, 0x2}, {0x5}, {0x1, 0x1}, {0x6, 0x3}, {0x7, 0x8}, {0x5}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x7f, 0xffff, 0x3, 0x7, 0x2, 0x936]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x20, 0xaf19, 0x8, 0x1c3c, 0x384]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x4, 0x36, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x48, 0x6c, 0xb, 0x18, 0x6c, 0xc, 0x30, 0x4, 0x36, 0x12, 0xc, 0x3, 0xc, 0x24, 0x4, 0x6, 0x9, 0x5, 0x2, 0x2, 0xb, 0x1b, 0x1, 0x5, 0x6, 0x2, 0x9, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x6}, {0x3, 0x7}, {0x6, 0xa}, {0x6, 0xa}, {0x3}, {0x5, 0x7}, {0x5, 0xa}, {0x5, 0x1}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0x6}, {0x2, 0x3}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x6, 0x7}, {0x2, 0x3}, {0x7, 0x9}, {0x7}, {0x1, 0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x1, 0x4000, 0x4, 0x928, 0xb6ce, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x0, 0xff21, 0x4, 0x3f1d, 0x1, 0x3, 0x80]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x16, 0x24, 0x30, 0x16, 0x48, 0x48, 0x16, 0x0, 0x48, 0x24, 0x6c, 0x1, 0x5, 0x6, 0x48, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xce54, 0x100, 0x4, 0x5, 0x3f, 0x2, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x4, 0x400, 0xfff, 0xe53, 0xffff, 0x5]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f0, 0x100, 0x8001, 0x0, 0xab1, 0x1000, 0x900f, 0x6]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 3084.863985][T20112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3084.914985][T20114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.114573][T20129] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3085.165741][T20129] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x6}, 0x0) 18:10:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) 18:10:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=ANY=[@ANYBLOB="cb42432a0000", @ANYRES16, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="08000f0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x420, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="b0110000", @ANYRES16=r4, @ANYBLOB="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"], 0x11b0}, 0x1, 0x0, 0x0, 0x4811}, 0x10) 18:10:47 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x89a00000}, 0x0) 18:10:47 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000002c0)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1}, {0xa}, @device_b, @device_a, @device_a, {0xf, 0x8}}, {0x0, 0x0, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @broadcast, @from_mac=@broadcast, @random="e4c0f745e9fa", {0x7, 0x1}}, {0x2, 0x0, 0x1, 0x1, 0x6}}}, @random="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"}, 0x154) 18:10:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000002c0)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3800}, @broadcast, @device_b, @random="66572eee3b4d", {0x5, 0xff8}}, 0x3f, @random=0x4, 0x10404, @void, @void, @val={0x3, 0x1, 0xb9}, @val={0x4, 0x6, {0x3, 0x1, 0x8000, 0x4}}, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x0, 0x95, 0x9d}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x2, 0xb7, 0x2}}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x1, 0x0, {0x5, 0x9, 0x0, 0x8, 0x0, 0x1}, 0x400, 0xffffffc0, 0xb}}, @void, @void, @val={0x76, 0x6, {0xab, 0x4, 0x37, 0x7}}, [{0xdd, 0x72, "e75b7482a371b7931f6138f39e8453a46f7397842915eaa13ac341486e837c6a2cb4a1e584eb1870a357b5a4fc6c30c9fc03f0481e337c2339cd8922496bdf8b1eefa50da867362657014e68362a4d7c034ce04b22dd1e61e04427a7f94f6201116107576df4700ef66be5ba0e4bf0e91cb1"}]}, 0xd9) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) [ 3085.378563][T20139] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3085.396084][T20139] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3085.465906][T20142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.499016][T20145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.522633][T20147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.548546][T20148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.581845][T20151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.595520][T20153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 3085.622949][T20142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.653756][T20145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.680241][T20154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.705849][T20148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x900}, 0x0) 18:10:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 18:10:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000002c0)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3800}, @broadcast, @device_b, @random="66572eee3b4d", {0x5, 0xff8}}, 0x3f, @random=0x4, 0x10404, @void, @void, @val={0x3, 0x1, 0xb9}, @val={0x4, 0x6, {0x3, 0x1, 0x8000, 0x4}}, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x0, 0x95, 0x9d}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x2, 0xb7, 0x2}}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x1, 0x0, {0x5, 0x9, 0x0, 0x8, 0x0, 0x1}, 0x400, 0xffffffc0, 0xb}}, @void, @void, @val={0x76, 0x6, {0xab, 0x4, 0x37, 0x7}}, [{0xdd, 0x72, "e75b7482a371b7931f6138f39e8453a46f7397842915eaa13ac341486e837c6a2cb4a1e584eb1870a357b5a4fc6c30c9fc03f0481e337c2339cd8922496bdf8b1eefa50da867362657014e68362a4d7c034ce04b22dd1e61e04427a7f94f6201116107576df4700ef66be5ba0e4bf0e91cb1"}]}, 0xd9) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) 18:10:48 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000002c0)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1}, {0xa}, @device_b, @device_a, @device_a, {0xf, 0x8}}, {0x0, 0x0, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @broadcast, @from_mac=@broadcast, @random="e4c0f745e9fa", {0x7, 0x1}}, {0x2, 0x0, 0x1, 0x1, 0x6}}}, @random="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"}, 0x154) 18:10:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 3086.241138][T20171] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3086.261134][T20173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.288607][T20174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.306206][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.349568][T20178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.362042][T20179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.401843][T20181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.413212][T20182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.436462][T20171] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3086.468879][T20184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.480271][T20185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.502442][T20173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.517481][T20186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.544457][T20174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x7}, 0x0) 18:10:49 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x97ffffff}, 0x0) 18:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_dev$audion(&(0x7f0000000600), 0x0, 0x20040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x300, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xeae}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2d4, 0x33, @probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @device_b, @random="bc5efdbf6cdf", {0xe, 0x8}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x60}, @val={0x2d, 0x1a, {0x400, 0x0, 0x5, 0x0, {0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0xca, 0x7}}, @val={0x72, 0x6}, [{0xdd, 0xfa, "492414f1e4450bffca9bdb06d1721795c4a4d3758c143f8be3bfcfe5d1d658767a3d66bb430dadfee267fde09f7f56df7ee9a5753d2fb95c6562df53e57e77ed37dfb87a275eb33e6cc1e9edc7613b2fa479d9a6d8ea1ca935d674bb4889cf232c2235750ca2647f57ed5ea4308a326a0a28bc235e33e34f628827b94ec7f2f4c63051c23e36ca92e9475d5742c14772903ecb0c8e685032d45a24468255f9bd1d8b8d4ea414d92e8268bef8110fac1ed728618a8e4d763d41fe327f6401a0597f83646e34dcfdb7a0682e12a46deb6ada4ce2b21794a991991e4a249db45a86493f20853eac07c49b3085a12e6bc24110407be371d5f6fcf248"}, {0xdd, 0xb6, "63780b626e4d00c5832583aa1252de1ff0922a8b1bb12698df6c571a94783064ec5ebea7a8e9db3721f5e9ce777f08797efa4be513a209879739b843109ab6f167ef1bd479f6a7fe048372ab04c9cb859794a2f0213dfab628aa2bb9d5c10d53619bc7a6715f76f67054849cf70076c34018c6ad54e53e67b1eaee9f2e7b488d9b40dbc28acfa58528f57ac4f0c3ac1c7d5d74af567b9a41db055e8c9684b53962e50e64c8de30f88ca435f27ee4a8cb0ead4e9be1db"}, {0xdd, 0xd3, "1e5a776cc04bea01e3625b0cdf40bb6ec7bf9dea4f56a47c60c0a4920a28a8432b7c276b30c14781b65ebe20e4d65941bfa981a4aa5ddc4c0058e828aadcbc7f5bed82b51e1ab5b827203fd0ac5af6a61d6a467f64281614ff4809046fa95533f4097c0b69d6e47476bbf29445a90553e849e5dd496bdd2a293f1654fdb23629a346e4afd45b26c91f218d499ff7a971e44eefdb93cbe550d7b4e794001dcb9f5bf7ab796bfc46c63fddc70513213fc22775c694db93806bf6606b79e7ec8a36fb38436cdcd14d1cb792031310284c14afcc56"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x13e4}, 0x0) [ 3086.755014][T20192] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3086.764966][T20192] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 18:10:49 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @device_b, @initial, {0x6, 0x40}}, @ver_80211n={0x0, 0x81, 0x3, 0x2}}, @addba_req={0x3, 0x0, {0x2, {0x1, 0x1, 0x7, 0x81}, 0xfffc, {0x3, 0x4}}}}, 0x25) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) 18:10:49 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8f}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:10:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 3087.078147][T20207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.106315][T20209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.126924][T20210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.155820][T20212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.170127][T20207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.198354][T20209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.222296][T20210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xe413}, 0x0) [ 3087.251440][T20212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.275265][T20207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.310425][T20209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 18:10:50 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x9effffff}, 0x0) [ 3087.512607][T20222] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x30000}, 0x0) [ 3087.579681][T20222] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x8}, 0x0) 18:10:50 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xa377832e}, 0x0) 18:10:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x48}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0xfd07, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:50 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @device_b, @initial, {0x6, 0x40}}, @ver_80211n={0x0, 0x81, 0x3, 0x2}}, @addba_req={0x3, 0x0, {0x2, {0x1, 0x1, 0x7, 0x81}, 0xfffc, {0x3, 0x4}}}}, 0x25) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) 18:10:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8f}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3087.769414][T20235] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3087.779880][T20235] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3087.881199][T20242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.897318][T20243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 3087.922807][T20246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.933915][T20247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.975119][T20248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.986024][T20249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.029485][T20253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.043273][T20254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x13c0, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x3d}}}}, [@NL80211_ATTR_CSA_IES={0x1278, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xaf, 0x80, [@supported_rates={0x1, 0x8, [{0x2}, {0x30, 0x1}, {0x16}, {0x9}, {0x18, 0x1}, {0xc}, {0x60}, {0x0, 0x1}]}, @peer_mgmt={0x75, 0x8, {0x0, 0x7, @val=0x9, @val=0x1a, @void}}, @chsw_timing={0x68, 0x4, {0x98c, 0x8}}, @challenge={0x10, 0x1, 0x30}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mic={0x8c, 0x18, {0x4c8, "4e61a4ba25df", @long="4011faa0e8df7d5ee7b3bbde5622cf75"}}, @preq={0x82, 0x2b, @ext={{0x0, 0x1}, 0x5, 0x1, 0x401, @device_a, 0x0, @device_b, 0x8, 0x7633b513, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0xf66}]}}, @rann={0x7e, 0x15, {{0x1}, 0x9e, 0x62, @broadcast, 0x0, 0x80000000, 0x5}}, @ht={0x2d, 0x1a, {0x800, 0x1, 0x5, 0x0, {0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x3}}]}, @NL80211_ATTR_IE={0x131, 0x2a, [@measure_req={0x26, 0x1c, {0xf7, 0x24, 0x99, "fd36d1caee39c80ba34fa239f6875e2f6289586f856656f05c"}}, @mic={0x8c, 0x10, {0x4fc, "d842b421c01d", @short="f84e3231c5d0c0d3"}}, @fast_bss_trans={0x37, 0xb9, {0x6, 0x4, "609b0b7f202fdc04fad9cce5e75bd131", "d9a8a158012534a0db4008295d5c1771de591a993fbc12d9691b46d35c18693c", "47fbed58b468f3f4a227238a8ccf9494347752f37c49d99dc718e307ce84edef", [{0x3, 0x5, "c07c75d58c"}, {0x1, 0x12, "8c86192acc212c9ca5696e494811491d0f57"}, {0x1, 0x28, "336c7618efef329db72bf42e0a7f71fdf0dde3a7b212e850116a26e787917b14af807843f27b0262"}, {0x2, 0x20, "34835dd8d984ce099667bc654a993ac239a156ea5dd69f73417cf9166c340d69"}]}}, @mic={0x8c, 0x10, {0x3b6, "9b3933314675", @short="2e005008fdccdd9e"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x3f, 0x28}}, @preq={0x82, 0x25, @not_ext={{0x0, 0x1}, 0x0, 0x7, 0x8, @device_a, 0x8, "", 0x4, 0x2, 0x1, [{{0x1, 0x0, 0x1}, @device_b, 0x7f}]}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x5, 0x4, 0xfff, 0x7, 0x741, 0x9, 0x5, 0x8000]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x6c8, 0x91, "bbf74255b89b56a5ae5f9386d16d4b9128ea1b059eb8cd689b89f2ef133c730d9032b68344fa5dd10dc835f13cd83b9473a3264ef8fd110c8c71b200d33c3b96f024841386d4ed4298eddf662df90f5eb4a54bb20dd48d987124af650a591b7076385258e2ffb3ea60a179510b88548cf5ddd5ff0fde641c241144c07f095831eeea104e63801702e94139d23bf9adbb5bf62234adc3b1e3cf2b3ceadb0740c298e67d1c13f6e0cc07e1438639d9b0cd7d3f046fe6cf7c63f9967d449c4ba48c16ecf4f7f3b82d3ddab0c840497dde071759a9f435622dc512e4f8bfa4c95ddc7c7268fe55ee52fade7f3dab1aeb16dec7219494cb8d4abc19af1f2e002787c04edaa82d9d5c8b1a04897018f88d48b60a9c1467f513122ea36fdb085b5dbda7747f7e5dfb4f91ebf521a31cbc34680fb2faa000cb56447be065e7dcc51bff1c2ad058ccf52c6988257b61e49e8b672fc4fba3f61076b2d0e94affc7b73f6336463c36c6c7bc5506db639fb2c7be374b25098e02c9a6343647387afe20151ebb485b286e3ad21705720e6e1a5ff24ad42b0556455ccd120e75179ea7dbfd2798579429537a238cb57ec4593c3ae3050ca036b92f6d4bff7ecd961b43d19909bf330b5a536344d1d2e09f1750cb034c55d359ac256cbbabe8177d89389594526ed35baa28fa460d58203b366d808f1f8f37d86873d5c4343bef3287508a2796a6ca7e34cc8770aa809e52cc4ba2af387adc79e8790009059e5447f94454a7a37b2c5df7368c91c89a0ff1354b4c9e9a73fd996a516a23d1f8bf6457340553009c4b925d3b55e647d01082957acf51f388d1db25dcba481910f06fef013d8904222707505b92671c612f7dd0d03403d08c206241d57f9425f08fcd53b2ee3acbc87edb8cd2fd267842ff7c2ab7d65baa915e6ea9206b4bdfa477250f42569b893af9b018dd19490faafc547dcca1ea5cdb3da247362808bbfdda2e2a649655537b44f38f9c2f2135601f46e827cb2626ff9d080b6a31c861f6e32460965924353a3fe3a80fa684bd952a504fc4314250ad64f69057ecab2add835c251274c051b876b4f47c6ab6903c1d32b8c02a3bf513e5ceed1b9b03d3a3161c966997463b4e66d171db322e46e04e1c8842c132aebad5d5522d99ba57db7f07b0da15a97a16e66598bf40bd1eaf78fc0f721f1b32c7bee02628c8a0a2608030b096a1571141627a09c23946631e9a6087e78f863f0fbf3c6e456fa595bfd10b862b2ef1aa450b9fbf3d2510801a1133ea0fe7574a7ec21fdb582941a159a7e759efd3d678d462b73b9f4dd5d4041fd809adcdbeca4e369ca62953cc1af9f5fb1c340b0520a21774690ef37d0e96617ae0f222cda17885d3f5584263587c989a45083deae16e5ac576463d48cdd404523fbf89a4f96140962804dcb89233acc8f82ac159dba7428d4a0b7b7961a8a2dd9960f579cdf1ee2fe461c769345dd339768a5a33fa281f402151606dd6b3432e6c626de39c0fa813f6dd97dd165e5dd7541dd713a082167ffe4c73a6127717b67431693539b1ef4fd86e8475f90de1004d9a9ab6c2fc45f3acad98732041b34c7b5345dad1eebb4bf309cb3fe4b76593a5dc8e32026b6cb673fbd63840a4b10656d2cac965a7de76f12a60f6093f7e6967ef63e7f395101f5a313e7012b2dc3d612941c65f49b08794f6e866e5c4740ed94736d2e1f25586f838916f2e4977c5cc5037db914104594ae8a3186e9e64b42cce2cee95205411a5f37fbba557f9c2511c64e77b40dd04e5e2921ced44f91395965b13dff2115973424eec638e87299599151d34184989c4721436763bd6cc412fb648f512e47ecc1383fcc953a4bb6041b0813297312aab5219c263bad8a3c5c686a21edcf350239d61557241afad9b866027c10578a6d7eaf79d8495d43dc8e9f2bbedb066e3cb422414b1174099c177d590c9a7cb330f48b16c16375e49b5129a812938bf2c272538121f33d4edd5660f3cecd741bfe30cb52e13bfac62e06c7c44e04c0d773632e87ea5823c8ddc870b95afb276374823d1e1d192e28dd303815307c2c4b94acd3c4b847f25fcf569cd76e1a02fc3cb68de262fff55fdf1fb42e2209de0c4966ff9233280d14fc41426776d57402f69ce3521144d3f53b225f3dcbbdef719a332b766210c1c03c163542661158fb883c70f68e6588aa35ea09e36c04c8db398b7f022cdd8b5b7be64fd58c17ae5dad70e77db7862eee9c49d2b91f08c5ca771e89be796680c17634f6b7f035f721c550055f4881e09a7d85ddf3bcf0393c2b15263584626726e9dbd63c0acdbdf4a4592ac58728451b6241cabd0b9e8e7ec856fb688205a66cbab22f63691d14bb509bf034e707c0b290bad7ab0bf02563f0b57b3c8a62b7520934aa1b6f6cf9be6e6baa7e18b86838928773dcd92f4a523e5e0"}, @NL80211_ATTR_IE={0xa5, 0x2a, [@mic={0x8c, 0x10, {0x1b4, "160c2103ea13", @short="cfe14e57a2bfa2a0"}}, @random_vendor={0xdd, 0x52, "acd0bbc4a889ff14d2eff6650263b0ea393f28fc1a0d7d769a61a73f47d3f08ba17df3eb52266c668c108b999d2b951bf64af8353518b69b87f114363eb25e1d57f4957c3078c4a6d79b3bcf5ec1328ce286"}, @cf={0x4, 0x6, {0x0, 0x40, 0x80, 0x2}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @ht={0x2d, 0x1a, {0xc, 0x2, 0x5, 0x0, {0x0, 0x0, 0x0, 0x51, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x101, 0x3}}]}], @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x17c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x2d, 0x2, "a7af6bd43cb537a92d2a03f5375e7b683d0a86058e665db267280ace59f9cc204401fe0706755d27b4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x85, 0x3, "ce94707b9b078a00ef35ddfb282c54d7d8e931e8c188a7220d3baf75d0b4dd7742e7184c00a5f497774a04d7750b85a03ec7c04bbeabcc83b5bebe328911dab57d5ea4fe47f314ea25b15a4dd61e1d5092105f186e17d6487a66efcf3b663d085c0f5337789dcd59893c46945f02df938251f7ac62c0e9b845f65a0277de6a72c5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x29, 0x3, "9548923e0502e5c36000cd3bae6e0dd3110db4a63fdf243a60e1cc240f25e857b349d5b119"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "31bbd6a307d99a01044f23678d6bc491857bdb85c8824f10617afdb1c97486a0776ea85f9d9599c602048ea6a43f48fa5b808e5b3b5dd1e906fb6e46b26a46a7f7f9d56341de4a824560accec0ef5c4aac24221f6c078f4d7ab767b22cd9d5b6f9f4e14a99a85f01e496ab"}, @NL80211_FTM_RESP_ATTR_LCI={0x1d, 0x2, "92623d76df5398d631b902f774907d5d04acb90191082a673e"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x129, 0x80, [@peer_mgmt={0x75, 0x18, {0x1, 0x81, @val=0x1, @val=0x14, @val="ed064744b42cca18df019de22b7933ac"}}, @random={0x6, 0xa7, "c6703e6053a79e9a4a4acff61343cb504b2cadec56f7bf0ede95bbb03edd363a38fe79fb88bf4fe4acc0322f65a93cbc0f9cff07b86760df84aa89402c5b9d6c2d25dd6044398885f3d77afeda072dd4cb395bfc061b887f64b158fff1be1fdc4823df2c6cff1c5b62e2addd3807ef7ea2fabdcca02f210969f0595086885a01c71844c4f206c0884c10581ffc7a1afe8a36aa03ef894b563c626504badfad7d7cc5b1fb430964"}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x7, 0x1f, @broadcast, 0x3, 0x4, 0x80000001}}, @supported_rates={0x1, 0x1, [{0x6}]}, @random_vendor={0xdd, 0x20, "4d2e654e83d9138ada89a55780e4f093c3b2e1194b5356838f72736899aed945"}, @link_id={0x65, 0x12, {@from_mac, @device_b}}, @mic={0x8c, 0x10, {0x5f5, "63f1918c0c37", @short="1f11d927ac24ff4d"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x126, 0x80, [@perr={0x84, 0x120, {0x7, 0x10, [@ext={{}, @device_a, 0x6, @device_b, 0x36}, @ext={{}, @device_b, 0x3, @broadcast, 0x28}, @not_ext={{}, @device_b, 0x0, "", 0x17}, @not_ext={{}, @device_a, 0x10001, "", 0x1a}, @ext={{}, @device_a, 0x8, @device_a, 0x8000}, @ext={{}, @device_a, 0x7fff, @device_a, 0x32}, @ext={{}, @broadcast, 0x5, @broadcast, 0x16}, @ext={{}, @device_a, 0x800, @device_b, 0x29}, @ext={{}, @device_a, 0x1000, @device_a, 0x1b}, @ext={{}, @device_a, 0x10000, @device_a, 0x2e}, @ext={{}, @device_a, 0x9, @device_b}, @ext={{}, @device_b, 0x2, @device_b, 0xd}, @ext={{}, @device_a, 0x69a, @device_b, 0xf}, @ext={{}, @device_b, 0x9, @device_a, 0x6}, @not_ext={{}, @broadcast, 0x9, "", 0x18}, @ext={{}, @device_b, 0x2000200, @device_a, 0x41}]}}]}, @NL80211_ATTR_PROBE_RESP={0x53b, 0x91, "de12abcd3b919bfa82babc6517b370352c00b8569adff3b73c302d6b087b91922e7cba09d0c0b6f6bf200277ab9483942d09cd0b17ce706b7831caf539864a33545d83a2904c60c33e583aef8a3c8861a938c87331f9021aa3ac6cb7ff1ae961a2550bc034f6b0b90a93f0528ed9b4ea5c6689a00c512ca6fc15e97e32d03a0a23856152216abae6f2015811eac98376bea33485122581261db8518f0d14a754caac87c489e1f0ccf437e2b1b684681d48f363a88dd9bb2d77a103de79c8db6d03faca12ac636ab0f7da82c09f70b4bf0e985a8d836652f160f4490355b909420e2964151bdf3a8e43b961a9839688416caebabd94cee517595cbdda04e1bd77fc73b8be148fb3370529abc1ac684b01a82c9585e1c66c24a0d93ba055aa762316454c0cac1e6e652ba5cadc444d460f1c594933d48d944f0bec50532063b1e686bf96d943b561645f9843a31ce5aa4a80a916c4b5d4ac7896dc097f86b6386daf6bd7bf178308490e0624fa424a05b1efe10eec748dd3a5424e93ed12703cf1f6ee8a91a139680bca53b3257e962f844afac4628536bcbd29227db50490c27c61fc99f58ab2cda5d386d3bfb93c8898b74e246ed843e5cc55e5e736bb17a0a24b4b9286af56758cde6d4edf420aed86c727466993375965ed8045e891be30653574cd37ecca579d43d4a6fbc8fca67dc1e334a30b2a07d241d3657c22478ef51dbb3bcb607e819413784d39a519c6bbc7f42190f21a839e307a73e0130572297c88328012212b1d643f269dcfdee699d6dcf543f8832dfc3ab8a1c6c9947264267db6d0b097bff9667d1d2c5dcaadd773df8e20fecbf365fdee57a9a1f027895c2b76525650cf2e3252412032f7ec646e68c1729e0b3b44793b712c76d4dc332eaaeadeac2a8492c644c63f8195046afac3f9a16012a4e13c9448ecacc8c984e1ce9c55aee6f9fa16631207f18cf26cb52a6fcbef8dcc71513f3dd2daa29e2aeec20f586489fcef60463776106f02fd09d5ec9ed8dcfd72a1c7ec81b07d15110b297967d34e1e4b66459130b11535ee0969fadf5c6df175559564b4106f51712948a7be84fbf6fb0a23851c008b64d6e88063c8a51bacf9361656c7018187cab69106cef45dcb7b78b33a1351c7c581c1d716b6e664138b11ad427c56d921f5c23bf11023331171b59c62245d51d6df13e13a4a9f95ae18552357210e1b41aa4b2b9da3afb203f98fa9af0412edf1d0b5f2b15718c3756f086df396cba81a03aaba746e900d7166ea4418b57abde4f98d77debf6c417a907e1798e7a3337b8a29919d3d56c1760379803865d256124a2df89351295b5e90d71fe298be29faa1d78dea874ef7d6da77753a801ddf548d0cfcaf83e6372f3f3ef33349e64c61f8eb93678dd741e7c8c655ed6a17e001600bd08bff9e900c476de4fb95c1739297eaa35f85922913c4fb29541df1980808c04eb680026ac74ce1f1594033a12db0227b07131f1ba78a6685f699d1ef074ff2fcfb9a054dc2b9fbbe9bccd1812dfaf58f0f02813e01575fb8a90a78fd56e2d8f7defc3a2b0552451b18846beb47f39a4eac9ac82029c290a35dfd3bd5d7099e6dbc90be335033730289c30a85176e58e872c37943e0daae2f0ac375b141f1df9ffe6cf1bd09ab1e8b0ae149ed210b7644478e572c3be00d9c43f6b2500aee69b8b19b094a2773f2d12ada55fadf6f75a44ae9a2f88a91e2183f148faa8e680999ff8892893c5016e8a2b054fa138238f6da5cae6bcaf5840532b4deeab75cbce535c79f7b22245c0f429933e164e32ea7253ae6988b22ab7febed21b3e047c25a6e4e135e9a650439fb2fc08fc3f6cbcfa71b09fe5a2892186769b0359e37860e19dff01d8d"}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x120, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xe2, 0x80, [@random={0x4, 0xc, "6f6b7073b457ecc36cb97aca"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @tim={0x5, 0xcb, {0x1, 0x24, 0x0, "ed89aec9e6ad15da8bcf06d8466f9f59278dcff288f1ab619c96a7042cd0b022a0022fbf4880af67331fcd35ecb08fe6230545900465be5212f4fa561a075b614d0c43b71da1d53dc847ca956227fc63ad186893fed5ae0bbdaaad38227d078f9504f026942e9e1d6d39f3a1fa16b6479d29fb490d1cedd5e75a75e1ed59228c89157f9ca5957414f0462b92dcc1f94f96442862428e18aa161b55b7d4ace2bd46e93912da3eba180e151dcff27a528d52383e981bc5624db6112e8acaed9cf120d7e5539e3fbd1e"}}]}, @NL80211_ATTR_BEACON_TAIL={0x1a, 0xf, [@cf={0x4, 0x6, {0x23, 0x5, 0x200, 0x4}}, @chsw_timing={0x68, 0x4, {0x400, 0x4b}}, @gcr_ga={0xbd, 0x6, @device_b}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0xd93, 0x8, 0x401, 0x9, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x4, 0x101, 0x1ff]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x13c0}, 0x1, 0x0, 0x0, 0x4040010}, 0x40084) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="26060001a5a51d98c085cdf3ddf1540082b6ff4e38ba0ffe1158b1315fa66fc940be365bb6916287cba420d36a1881190b7146e29bd7adb23c38fb9ad2d10cddfc6d4960df", @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="08000f0000000000"], 0x24}}, 0x0) [ 3088.070457][T20242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.093940][T20243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x200080}, 0x0) 18:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 18:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 18:10:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @device_b, @initial, {0x6, 0x40}}, @ver_80211n={0x0, 0x81, 0x3, 0x2}}, @addba_req={0x3, 0x0, {0x2, {0x1, 0x1, 0x7, 0x81}, 0xfffc, {0x3, 0x4}}}}, 0x25) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) 18:10:51 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8f}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3088.620526][T20277] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3088.642775][T20278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.657913][T20280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.694796][T20281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.707538][T20282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.718309][T20277] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3088.751905][T20283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.764826][T20284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.788032][T20278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.802898][T20280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.842298][T20281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x9}, 0x0) 18:10:51 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xe4ffffff}, 0x0) 18:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 3088.857527][T20282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3088.910298][T20290] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3088.920153][T20290] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 18:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xa07, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x20}}, 0x4000) 18:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 18:10:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="48e18c00503f50505050ffffffffffff0802110000000085"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000580)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1}, {0x7b}, @device_b, @initial, @broadcast, {0x5, 0x20}}, {0x2, 0x1, 0x3, 0x0, 0x5}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @random="c5cd3115ecdc", {0x5, 0x2}, @device_b}, {0x3, 0x1, 0x1, 0x1, 0x1}}}, @random="5809e11dac5cd14b17990d1e883c53118f24efd65a1245c642557aa6680c6917a9f4d90c54e8c094968dd8f3ac1ae4e5bbc473ca3cb8fdab626406eb49f1bae04c80aec0799e0f39432d484f969a746cb14cff8d11efb01cbcabd04b786a7b5367bf6894c3c1b8509eebe22c7c7172b430b915546a3d7cdba279d6b4e0c701c12af1d74ca3771d39cc1f62e8dd092d5a08b6607d059293b834d32b85b9ece9b302a8d0bdafae9bef3c2c26e271944139190b8098bafbcb2087f5b1f13e1e9e4f4db7800d3ad25a5edf7e43e770937c9c4af049e721a6a0331739c90669f6bd564ec0d02c791d3de07681ca1b5aa08043bbd95f7926d6e9ca7e4e9c182f4755a01ce4f4fec9ede294137f2517dd87b64f3baef4b593585c46309c414e10adc8e1409e1a6000a94170f2e586726b3279af2f06eec0d49af0b18ea0d1408cb6674aecca49a65e9be1608197b14199b1c00919c67b8f32ee535d9ad06090655a9855aeca3450ad1711a3e3365a8ac9a371d98d0c994155e3c0e2bd4396ad4e30af6f1c8de762308fee071c8eed439480726943b323a5934dbfc6afd9d268ea5ade2d753dded5df2f88f8af892abcda3b9c4bf64943cbd79b11453aa5ef276aea0883ff73f504cd700a733c8ed1465f9daf5b6f77a51b5bad2d6357b814749d5a44cc682dbc6f5cfabb68c297a1ef1e9e8a992f039a08c1ce088f3a75cc87aed5be838bf6ce89a5bdb1ffc11e2d5ce4868bf14e1d661c6910cc996e0374b173c5f9a7760ece5134df6be407cccdc3bb16a23ab8ad3b898bee09ae8ed5aa53a4801f56cd34e98758f01c5d5b29017782843ed0acbfe40a7e081dc8318dc109f84c821812fbe327ec043a6bf7a7eee9ccb96c28799da08f62f3dd53f85eddc39633bb1bce6719ed2a16785770953642c733156b349058241a2e3a506b237a36354f61bee9f2739c44a38603f4f82968035ec78f7a74caefc5904b45a37fd4a326558f030a5ede078d90ebb0301cd26c99dc9e393c14c75f41494cadec1242b10e615eda4c46c4499278e6f983b9a0f27ecbb54c83c9abc202f0b2f03ced1d5bdb08528d42ffc04ab75cbe45bb60583e1bef0fd88f0b8f888470de39f5730f6c7a82d5d8a9cf2ba0efc46eac17b1eae444f0614497c0f6eff8d513831ed1d237ba786df1fa89dab4a6c8cf7f3058f005f325c3db2f2dae105e42ba9bacf74130bfd8245bb5a1bdaef7619d304756a59e91af9bbdc707b17680494b6b0738f5fe96959aacc693fda138a463d0387ed048f610e2ea22bd28ed881ac707f742d5c3f92e7d02357d36b6bffb8ebbe81d6413e8f5587a846482a68b970021d354898ec39bb3755aafc57706d7332f7bfe0a9e46972f1d10a4a034eb4e73a8f3c6c9209c494cbbc72476f8ef2f50683bda55d73280caa18d70eb5796523f96d255228a4d5df82a89619f8bf18be9617966a9f797775448d786cb98e5c9a1f8ebab88c22823730e4b840f5cf98fe41ac7c6b96f092add44504fea864e1c27c6642c26883e89bdca71543053e9b43ed51abfc0f1d645129df495929b83af5809f5fcdf9edab2a94fd1feb654ce0f427cb9d95325b64aca73791bbe27bec3fb0b34bb0718648b5612cc9559e556eb2d5238d5fcb11438cf535a011c88904153f1a5e3d275c91566b01f0b4581dea5782230f9b9584838ff2ac21a87b5bfdcc3c049a9275d5f6a0d6b76678c6eabc602f8c8c23e56482fc42d13fa3f286be42b2b8d59c1a1d102b2fe842992cb4a64a5e33e2a099153b2b4804b204890262980bc8cb6108a26933eb394010c30fa1d56338efbbd26e914ed739f5450651b3dd08de14d09d04d267b5ea7b58d5928d179d215be17219ec65db02212e450a5453cd12d0a78c8d067052a8b14987cff3416aa7f051ea553f4d540941d1632439ca47bc3371b9cfa28d2549db5df49f841f5136a4d3afa8ee98a385a61873bc4ac4837efc946cea78c237342a4bcaeeb2d7013bd1e9f4c08c5cfeed2c28551bb6a6f4b230a0cb62a822ac9dd34b6c3515fc1834a96e8c69a8df196ddcd1ba3c398402419722a79316c93b4cc7fc87e165c0d0b16ee48b80cfb28d47327de0cb7f6310931bec0d4ebe3dc8ac1109c78ccceb563aa5ea1b8b1b4ecd4bbac171ae6116b9d2513ee03bfd1b5eafe81d6088cb5e568d9f1c9f97f7f0ec31816a897c7fb3e2a88188a81c29d8a472365cc573c4e6d4c8cebeb50687c448b0348ea79a79b7a6d99dfdfb46aea8224d4990bd380f6ae78ab82e1aa489a09929a776b2ecf3fcae900a2906b034c1f5fa133a808be2dfd1de26d2fb2144e71aada694dc5129939e1bef20f631e02f8d6bc6abd80caa8c70ffda9384ff985d173c22c2b0bcb13f3d43fe4a7ded5c590414202156f06fa3f8a0be4fce3fb3c1f1e5f6fd03973a969b7802a35c37943dcc2949421eab20514f9fd6d97e1c3fbdf0dd08ba78642126741c61d07ac44630df56acc0d35f8e54969df2d70d50dbb3737"}, 0x72a) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000cc0)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @random="d3b186ca9d42", @broadcast, {0xa, 0xfe8}}, @a_msdu=[{@broadcast, @device_a, 0x1000, "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"}, {@device_a, @device_b, 0x27, "b7dfafa77146c7fad0601a85770e957c10f480ebbb916cc27396d4f74a24970b77c4e5b639b503"}, {@broadcast, @device_a, 0x1000, "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"}, {@broadcast, @device_b, 0x24, "6a5f6e626b9d85a84792d9d7de34d2cab6028d1bfac91d9d9588c0b5504f19d67642d1b6"}, {@broadcast, @broadcast, 0x6a, "a258e7975d6d9655b2f46fe1e5da4b8a836306294f76770832e5997ea66e4af9250dd4e80fe9703d0b4c2615e02f387553919fbe4862e0b37f82f0d4a8a2ea66c14668e4961f07b1c7b01d8833aa1af6d8120271aa19529dd2c5e6cc1d4a2dd3848a2848bd7a3844f78d"}, {@device_b, @broadcast, 0x96, "65747810fd336db52edef4d545dedf15a2bc27ffe6fbea4c0b3842df47b1a3fe5a0999355aa5135a1b2955da551446b30e96ae36f8c91a25e147373e06dc1f0575594a55f231dcfc036ae1907f82f46459ea83c37e912b598df2952fe5c6f9a374c36624fefea5c526ec06b14076eda7a8f805ef69aa42e2322067c28ae8d28e914da5a2d21caf910dd730dc7e366d85e2197e362f7a"}, {@broadcast, @device_a, 0x55, "3fa669f98714be8288df5bab8a09944177b8cce46e122c6833e8799cc4a85cc7e32f3902f37acf3b26af27d3796490b337882a56a337f3ed0809fbcf27d9a836fc5e1401029f4b9ca522c82fb2a29e216b670c275b"}, {@device_a, @broadcast, 0xf1, "fb6ffd3fb0587fbde8f84650d8e0517bdd89beffe7242f57a4085322ad195da5522d3d95b7ca84f9c0168a6f7bbf55fef71fc215fed52fb1f72cc5753930d580837e7c8f04aeeb110afd190e72f3723957fc1e9a51ed7edbc2a61e47b12bcdd074bc0ad0491100bf1f7acb9ebe0c3ce37d2782b228499a02aed4e859038ec15f0d20386648da6aafb041ff5fe3a1cd3a7b725ac5ab9a04a8777539f3490072c2b3c84176d319c69c1b1bb140148623efc5415615981fac61b625c00d81aedd2c8c4288a3e63a2af8387092b85ad35b3d0de4fb330bc76469d78095cc52ae70f97aded5077f8a7d5525c0de64ed433d22e0"}]}, 0x2324) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000380)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @from_mac=@device_b, @device_a, {0x8, 0x7f}}, {0x1, 0x0, 0x3, 0x0, 0xbf}}, {@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1fa2}, @broadcast, @random="21f2c77aafb9", @initial, {0x9, 0x7}}, {0x3, 0x1, 0x0, 0x1, 0x62}}}, @ver_80211n={0x0, 0x1200, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x94, "72efdc4ce358e97a4df2c645d9f621da27d1b75d254e28c59f643c4097c3b970ea3bbc764ffa80b9472593d1bbad053293629833b722b5ddcfc67215690f47d8766f5865939a3a6c1edf1f0b9d0551c6d17e6ecbf709d576069a51d9cce326d7aebefb08385dc5d19f8aade0b9525f5dd2f90a1bd20cb8aaee1700c769f87b0720b4d9002215014921e703b2086a38744f50594e"}]}, 0xdc) 18:10:51 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8f}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 18:10:51 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4, 0x98082) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042cbd7000ffdbdf251400000008001c001968a713430c3811d86518c9338958b3b0b3d5e0298d605203dea6dd5863ca7937a9ce7e989b5d4806c3926c7c14742bf5673bde8b23629bae505b44928c3e52ecdfa1d8d7f4c8", @ANYRES32=0x0, @ANYBLOB="08001d00", @ANYRES32=r1, @ANYBLOB="0c0006000200000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x40004014) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 3089.400565][T20311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3089.434344][T20312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3089.456627][T20313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3089.478138][T20315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3089.496878][T20318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3089.527995][T20320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3089.544101][T20311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) [ 3089.573257][T20312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3089.596115][T20313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 3089.764074][T20330] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3089.822779][T20330] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xe}, 0x0) 18:10:52 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xf0ffffff}, 0x0) 18:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xff01) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 18:10:52 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="48e18c00503f50505050ffffffffffff0802110000000085"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000580)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1}, {0x7b}, @device_b, @initial, @broadcast, {0x5, 0x20}}, {0x2, 0x1, 0x3, 0x0, 0x5}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @random="c5cd3115ecdc", {0x5, 0x2}, @device_b}, {0x3, 0x1, 0x1, 0x1, 0x1}}}, @random="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"}, 0x72a) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000cc0)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @random="d3b186ca9d42", @broadcast, {0xa, 0xfe8}}, @a_msdu=[{@broadcast, @device_a, 0x1000, "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"}, {@device_a, @device_b, 0x27, "b7dfafa77146c7fad0601a85770e957c10f480ebbb916cc27396d4f74a24970b77c4e5b639b503"}, {@broadcast, @device_a, 0x1000, "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"}, {@broadcast, @device_b, 0x24, "6a5f6e626b9d85a84792d9d7de34d2cab6028d1bfac91d9d9588c0b5504f19d67642d1b6"}, {@broadcast, @broadcast, 0x6a, "a258e7975d6d9655b2f46fe1e5da4b8a836306294f76770832e5997ea66e4af9250dd4e80fe9703d0b4c2615e02f387553919fbe4862e0b37f82f0d4a8a2ea66c14668e4961f07b1c7b01d8833aa1af6d8120271aa19529dd2c5e6cc1d4a2dd3848a2848bd7a3844f78d"}, {@device_b, @broadcast, 0x96, "65747810fd336db52edef4d545dedf15a2bc27ffe6fbea4c0b3842df47b1a3fe5a0999355aa5135a1b2955da551446b30e96ae36f8c91a25e147373e06dc1f0575594a55f231dcfc036ae1907f82f46459ea83c37e912b598df2952fe5c6f9a374c36624fefea5c526ec06b14076eda7a8f805ef69aa42e2322067c28ae8d28e914da5a2d21caf910dd730dc7e366d85e2197e362f7a"}, {@broadcast, @device_a, 0x55, "3fa669f98714be8288df5bab8a09944177b8cce46e122c6833e8799cc4a85cc7e32f3902f37acf3b26af27d3796490b337882a56a337f3ed0809fbcf27d9a836fc5e1401029f4b9ca522c82fb2a29e216b670c275b"}, {@device_a, @broadcast, 0xf1, "fb6ffd3fb0587fbde8f84650d8e0517bdd89beffe7242f57a4085322ad195da5522d3d95b7ca84f9c0168a6f7bbf55fef71fc215fed52fb1f72cc5753930d580837e7c8f04aeeb110afd190e72f3723957fc1e9a51ed7edbc2a61e47b12bcdd074bc0ad0491100bf1f7acb9ebe0c3ce37d2782b228499a02aed4e859038ec15f0d20386648da6aafb041ff5fe3a1cd3a7b725ac5ab9a04a8777539f3490072c2b3c84176d319c69c1b1bb140148623efc5415615981fac61b625c00d81aedd2c8c4288a3e63a2af8387092b85ad35b3d0de4fb330bc76469d78095cc52ae70f97aded5077f8a7d5525c0de64ed433d22e0"}]}, 0x2324) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000380)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @from_mac=@device_b, @device_a, {0x8, 0x7f}}, {0x1, 0x0, 0x3, 0x0, 0xbf}}, {@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1fa2}, @broadcast, @random="21f2c77aafb9", @initial, {0x9, 0x7}}, {0x3, 0x1, 0x0, 0x1, 0x62}}}, @ver_80211n={0x0, 0x1200, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x94, "72efdc4ce358e97a4df2c645d9f621da27d1b75d254e28c59f643c4097c3b970ea3bbc764ffa80b9472593d1bbad053293629833b722b5ddcfc67215690f47d8766f5865939a3a6c1edf1f0b9d0551c6d17e6ecbf709d576069a51d9cce326d7aebefb08385dc5d19f8aade0b9525f5dd2f90a1bd20cb8aaee1700c769f87b0720b4d9002215014921e703b2086a38744f50594e"}]}, 0xdc) [ 3089.951813][T20339] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3089.961519][T20339] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:52 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8f}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 18:10:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 18:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x3c8, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x41}}}}, [@NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x1, 0x12, 0xc, 0x48, 0x48, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x4, 0x0, 0x1, 0x2, 0x3f, 0x7]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x2}, {0x3, 0x9}, {0x3}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x18, 0x12, 0x60, 0x1]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x8}, {0x1, 0x5}, {0x3, 0x7}, {0x7, 0x9}, {0x5, 0x1}, {0x1, 0x6}, {0x1}, {0x5, 0x2}, {0x2, 0x3}, {0x1, 0xa}, {0x6}, {0x5, 0x1}, {0x2, 0x6}, {0x7, 0x5}, {}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x5, 0x8}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x6}, {0x3, 0x2}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x7, 0x5}, {0x2, 0x1}, {0x6, 0xa}, {0x6, 0x8}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x6, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x3f, 0x4, 0x9]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x60, 0xaa2fe2bf669d1008, 0x3]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x2, 0x3}, {0x3, 0x9}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {0x7, 0xa}, {0x6}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x2}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x3}, {0x5, 0x7}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x3, 0x1, 0x2399, 0x1, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x6}, {0x0, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x15, 0x5, 0x1e, 0x6, 0x6, 0x60, 0x2, 0x0, 0x24, 0x4, 0x16, 0x0, 0x18, 0x2, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x775f, 0x3f, 0x401, 0x6, 0x5, 0x1615]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xe, 0x890, 0x1000, 0x8001, 0x3f, 0x2, 0xd9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x8, 0x3f, 0x588, 0x8, 0x3859, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x73c, 0x9, 0x8000, 0xc48, 0xac, 0x80]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x1}, {0x1}, {0x3, 0xa}, {0x6, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x6, 0x7}, {0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x3}, {0x2, 0x8}, {0x6, 0x8}, {0x0, 0x5}, {0x3}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x5, 0x6}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x8}, {0x2}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x7}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0xa}, {0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x6}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x1, 0x8}, {0x2}, {0x6, 0x9}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x2}, {0x0, 0x6}, {}, {0x0, 0x2}, {0x2, 0x4}, {0x2, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x9}, {}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x4, 0x1}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {}, {0x0, 0x5}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x3f, 0xfc5, 0x2, 0x0, 0x66, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9a0, 0x1, 0x1f, 0x8000, 0x8000, 0x401, 0xdc, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x3f, 0x5, 0x981b, 0x81, 0x5, 0x769c, 0x2]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x0, 0x100, 0xfff9, 0x8000, 0x2, 0x704]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x1b, 0x12, 0x5, 0x4, 0x0, 0x16, 0x18, 0x6c, 0x16]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x6, 0xb, 0x2, 0x48, 0x18, 0x24, 0x1b, 0x4, 0x6, 0x9, 0xc, 0x36, 0x9, 0xc, 0x2b, 0x36, 0xc, 0x16]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x2}, {0x7}, {0x1}, {0x4, 0x4}, {0x5, 0x4}, {0x1, 0x3}, {0x5, 0x4}, {0x2, 0x9}, {0x6, 0x6}, {0x2, 0x1}, {0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x3, 0x2}, {0x5, 0x7}, {0x7, 0x4}, {0x7}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0xa}, {0x4, 0x1}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x4}, {0x5, 0x2}, {0x7, 0x4}, {0x2, 0x4}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x2}, {0x3, 0x9}, {0x2, 0x1}, {0x5, 0x5}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0x2}, {0x7, 0x2}, {0x4}, {0x2}, {0x0, 0x9}, {0x2, 0x8}, {0x2}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0x6}, {0x5, 0x1}, {0x7, 0x7}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x4}, {0x2, 0x1}, {0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x5, 0x8}, {0x7, 0x7}, {0x7, 0x4}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x7, 0x2}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x5}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xb89, 0x97, 0xfc01, 0x6, 0x9, 0x8b, 0x6]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x4, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x7, 0x3}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x1}, {0x2, 0x9}, {0x4, 0x5}, {0x4, 0x9}, {0x7, 0x8}, {0x0, 0x2}, {0x4, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x3}, {0x4}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x4}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x5, 0x8}, {0x6, 0x4}, {0x4, 0x3}, {0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x8}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x2, 0x9}, {0x7, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x4, 0xc, 0x30, 0xc, 0x2, 0x4, 0x6c]}]}]}]}, 0x3c8}}, 0x240000c1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) [ 3090.159384][T20351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.173096][T20352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.205227][T20353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.216964][T20354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.254454][T20356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.265679][T20357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.298316][T20351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.309218][T20352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.350044][T20353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 18:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r4, 0x0, r5, 0x0, 0x10003, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000040)={0x20000008}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) 18:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 18:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 3090.773965][T20379] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3090.833797][T20379] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xf}, 0x0) 18:10:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="48e18c00503f50505050ffffffffffff0802110000000085"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000580)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1}, {0x7b}, @device_b, @initial, @broadcast, {0x5, 0x20}}, {0x2, 0x1, 0x3, 0x0, 0x5}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @random="c5cd3115ecdc", {0x5, 0x2}, @device_b}, {0x3, 0x1, 0x1, 0x1, 0x1}}}, @random="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"}, 0x72a) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000cc0)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @random="d3b186ca9d42", @broadcast, {0xa, 0xfe8}}, @a_msdu=[{@broadcast, @device_a, 0x1000, "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"}, {@device_a, @device_b, 0x27, "b7dfafa77146c7fad0601a85770e957c10f480ebbb916cc27396d4f74a24970b77c4e5b639b503"}, {@broadcast, @device_a, 0x1000, "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"}, {@broadcast, @device_b, 0x24, "6a5f6e626b9d85a84792d9d7de34d2cab6028d1bfac91d9d9588c0b5504f19d67642d1b6"}, {@broadcast, @broadcast, 0x6a, "a258e7975d6d9655b2f46fe1e5da4b8a836306294f76770832e5997ea66e4af9250dd4e80fe9703d0b4c2615e02f387553919fbe4862e0b37f82f0d4a8a2ea66c14668e4961f07b1c7b01d8833aa1af6d8120271aa19529dd2c5e6cc1d4a2dd3848a2848bd7a3844f78d"}, {@device_b, @broadcast, 0x96, "65747810fd336db52edef4d545dedf15a2bc27ffe6fbea4c0b3842df47b1a3fe5a0999355aa5135a1b2955da551446b30e96ae36f8c91a25e147373e06dc1f0575594a55f231dcfc036ae1907f82f46459ea83c37e912b598df2952fe5c6f9a374c36624fefea5c526ec06b14076eda7a8f805ef69aa42e2322067c28ae8d28e914da5a2d21caf910dd730dc7e366d85e2197e362f7a"}, {@broadcast, @device_a, 0x55, "3fa669f98714be8288df5bab8a09944177b8cce46e122c6833e8799cc4a85cc7e32f3902f37acf3b26af27d3796490b337882a56a337f3ed0809fbcf27d9a836fc5e1401029f4b9ca522c82fb2a29e216b670c275b"}, {@device_a, @broadcast, 0xf1, "fb6ffd3fb0587fbde8f84650d8e0517bdd89beffe7242f57a4085322ad195da5522d3d95b7ca84f9c0168a6f7bbf55fef71fc215fed52fb1f72cc5753930d580837e7c8f04aeeb110afd190e72f3723957fc1e9a51ed7edbc2a61e47b12bcdd074bc0ad0491100bf1f7acb9ebe0c3ce37d2782b228499a02aed4e859038ec15f0d20386648da6aafb041ff5fe3a1cd3a7b725ac5ab9a04a8777539f3490072c2b3c84176d319c69c1b1bb140148623efc5415615981fac61b625c00d81aedd2c8c4288a3e63a2af8387092b85ad35b3d0de4fb330bc76469d78095cc52ae70f97aded5077f8a7d5525c0de64ed433d22e0"}]}, 0x2324) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000380)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @from_mac=@device_b, @device_a, {0x8, 0x7f}}, {0x1, 0x0, 0x3, 0x0, 0xbf}}, {@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1fa2}, @broadcast, @random="21f2c77aafb9", @initial, {0x9, 0x7}}, {0x3, 0x1, 0x0, 0x1, 0x62}}}, @ver_80211n={0x0, 0x1200, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x94, "72efdc4ce358e97a4df2c645d9f621da27d1b75d254e28c59f643c4097c3b970ea3bbc764ffa80b9472593d1bbad053293629833b722b5ddcfc67215690f47d8766f5865939a3a6c1edf1f0b9d0551c6d17e6ecbf709d576069a51d9cce326d7aebefb08385dc5d19f8aade0b9525f5dd2f90a1bd20cb8aaee1700c769f87b0720b4d9002215014921e703b2086a38744f50594e"}]}, 0xdc) 18:10:53 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8f}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 18:10:53 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xf6ffffff}, 0x0) 18:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 3090.958794][T20390] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3090.968748][T20390] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3091.046119][T20394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.063458][T20395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.083308][T20398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.107915][T20400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.136176][T20401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) [ 3091.164537][T20403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.186270][T20394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.200127][T20395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.253162][T20400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.292121][T20395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 18:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="6dc85ea1b044437652f1", @ANYRES16=r1, @ANYBLOB="01000000000080000000440000000c0099000800000042000000"], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 18:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x80002000}, 0x0) 18:10:54 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8f}, 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:10:54 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/19, 0x13}], 0x4}, 0x12020) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000021c0)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @initial, @broadcast, {0xc, 0x9}}, {0x8, 0x1, 0x3}}, {@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1}, {0x7f81}, @initial, @broadcast, @from_mac, {0x1, 0x8}}, {0x7, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_b, @device_b, 0x61, "b698edb8902e8994a35a38e2168101e511c5f19c64cd0e2e68e20ec86bc1bd3ec3facd5ba3616ac6e9b8f87170b0331fe749cba77db3fa151e982d6c5b9a1fbcc848d010be316108b37ca2fa9d60644b490847ee727d7d270eca488700fc4dffd3"}, {@broadcast}, {@device_b, @device_a, 0x93, "907c1d030000000000000031f07071d1d09b2e75e3df1e521af579b2e6aa59f256cb86cb712ea17cc49bacdb3b3730c63fa08c26b85f4f05000000836e37f17a6fc050a73cef2d93689f09f9610bd6516fa62a827ae62a86194f7c47db05f6f426dbd51eb0645a68a4bfc2afa2da2249a5e7e7dc9d2122b0205ae85cd5951bcfe95ea068ed6014973f4a38a57fd48d6fcae114"}, {@device_a, @broadcast, 0xe1, "96ea54128fbe88cfbe84310f0f7e73a886868ec3bc73629feca8cc6fcf699d52493b10a203ace4b237cfbf9e260d4148890d9229aced3199222f483fc12a3c3a1f5200d9638c22b208544c14badc3ed609455b7330d10b394a18f29f89acf85c6ecf0eac418eaf99db18e32041a4cfca31a275ad79f6b930217a8d7b7597a8abcdd55feaf7f49897feddd59d3f6c63644338c24cfe8dbad42c7bfc11550ed41190088854b63ece391e7f1ed332439ae5354d45ea7eb00e3dcd42d15fbc51be28b6d5c649244a33841cb003237fe5936ac2fcbecff73e0db3b36be6cb13664484c4"}, {@broadcast, @broadcast, 0x2a, "bf1354fcc71c173913a3ca25003d3ddacde868a0cac4c6a91e89aa36b3e47903bd969128b372075ce81d"}, {@broadcast, @device_a, 0xdf, "53a6bc1f191193cd0d648971a5b27885ba06a050eedaf95e9448b140ffaab0058d24b84be38f9cde6b7b46b85692b00f89e7603d561ae1e60f4409958752577f4d4b57e641c676aca81dc1d2787fe25f41130ada28970c143373124dc3e25800fe68741d9858eaf12fb6e62d689831b335a9ace45701a42f5275510fe1faa3c4ce31c9614f3f0b14090e46c54adf12b4af2d5d9ed738029d3a42518143b9663d648784798035b7c1ebd3c96ecaf09f2361c7903eb354965059b58b36e53ea957ecb6f5425b73fdf0db88f5d589e676c769afbee6d3532f97bbe3f77edaf316"}]}, 0x370) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f00000002c0)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000200)=@ctrl_frame=@ba={{}, {0xc6}, @device_b, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x4}, {0x5, 0x1}, "ac8969e334b8471a"}}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f00000006c0)=ANY=[@ANYBLOB="e011000001ff93ffff8dcb8342cabb8c0a756512c71af055134a080269000001fd525cb45715", @ANYRES16=r1], 0x33) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="c0000000080211000001080211000001b66cc5699116000000008c18000078fb3b5714f6474d50359314bd63f2be0100010000000000"], 0x34) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000002540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40}, @from_mac=@broadcast, @device_b, @device_b, {0x2, 0x1}}, @random="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"}, 0x764) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000800)={0x7, 0x1, 0x4, 0xe142c, 0x9, {0x77359400}, {0x2, 0x0, 0x6, 0x28, 0xff, 0x0, 'U@J\"'}, 0x0, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000001d00)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x5, 0x2, 0xc}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000007c0)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000900)={@flat=@weak_binder={0x77622a85, 0x2004, 0x3}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/98, 0x62, 0x0, 0x30}}, &(0x7f0000001cc0)={0x0, 0x18, 0x30}}, 0x1000}], 0xc6, 0x0, &(0x7f0000001dc0)="14b8b56e06a0badd31d63665535729af7aaf9e28be5ba1950b45d43a6be20907ebede364f32163b5f7b68006da5604a2c21f6713bc3cd2e7922e07bda823d8755708083291348f5b1f61849ba8d011bdb6e694d676807b2ce835d261d62d9bcc87b7708f9e0111b691dfe8bfefa85786c756d7e9d18739e746cf6706e8f2a76b85849c17ded38afaff7fd94ff2cbfb06ae1383580d053dc260a773ce7e6812b2229fe9d925180b5cca495ef63c99afcaf96f452e196103573cbcac8a7a88c0f52bf91fab71d0"}) 18:10:54 executing program 0: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000000)={0x1, @raw_data="b92909e7493f098a61c0518d9658db1dc5397d5a667ff7b0a175811b86d3914b7a83f2d7409a6e7d455e738c44e46bacbad9ca8418a5aeec7b6003a107d38bff97c8e59bb02d8ca80d871f57cc01a88d2748386f8f6c574a3741d3ef2aa1b59c1b23dce548ebd1521f8031c425905dadf70cb02f5300840ad85e4c20acfc66e662d8136340f3d8aa12fa0f0f8ca530dceac09fcca4d8c7b7827523260dcaf462d5a5cc755518d9520d3f6beb972225fa11c512a0eaaa1a37400095a9960ad135925890e173ef6fc3"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0xf}]}, 0x24}}, 0x0) [ 3091.743777][T20420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.801975][T20424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.815047][T20428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3091.837726][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.889810][T20420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.912692][T20428] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3091.933162][T20434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.944981][T20424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.994463][T20435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x60}, 0x0) 18:10:54 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f00000002c0)=@ctrl_frame=@bar={{}, {0x7}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x5}, [{0x0, 0x2, {0x4}, "74768af097f3583d"}, {0x0, 0x8, {0x1, 0x5}, "b397bc0d855e241f"}, {0x0, 0x6, {0x3, 0x1}, "7629c635379ac132"}, {0x0, 0x0, {0x7}, "5071a0a716d336c7"}, {0x0, 0x4, {0xb, 0xed}, "30ea2d59fc34d899"}]}}, 0x4e) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x40}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0xe}, {0xc, 0xc30}}}, 0x14) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) 18:10:54 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xfdffffff}, 0x0) 18:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 3092.035942][T20434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.077554][T20441] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3092.087349][T20441] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3092.088291][T20435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.139969][T20434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.157416][T20444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.197726][T20447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.209006][T20449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xe4130000}, 0x0) [ 3092.243110][T20434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.254054][T20451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:54 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3092.296815][T20444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.307948][T20435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.356883][T20447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.373031][T20453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.461951][T20457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 3092.511391][T20459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.551624][T20457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.593983][T20457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 18:10:55 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f00000002c0)=@ctrl_frame=@bar={{}, {0x7}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x5}, [{0x0, 0x2, {0x4}, "74768af097f3583d"}, {0x0, 0x8, {0x1, 0x5}, "b397bc0d855e241f"}, {0x0, 0x6, {0x3, 0x1}, "7629c635379ac132"}, {0x0, 0x0, {0x7}, "5071a0a716d336c7"}, {0x0, 0x4, {0xb, 0xed}, "30ea2d59fc34d899"}]}}, 0x4e) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x40}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0xe}, {0xc, 0xc30}}}, 0x14) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) 18:10:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 3092.864315][T20469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.920415][T20472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3092.943290][T20476] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3092.965171][T20469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:55 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/19, 0x13}], 0x4}, 0x12020) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000021c0)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @initial, @broadcast, {0xc, 0x9}}, {0x8, 0x1, 0x3}}, {@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1}, {0x7f81}, @initial, @broadcast, @from_mac, {0x1, 0x8}}, {0x7, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_b, @device_b, 0x61, "b698edb8902e8994a35a38e2168101e511c5f19c64cd0e2e68e20ec86bc1bd3ec3facd5ba3616ac6e9b8f87170b0331fe749cba77db3fa151e982d6c5b9a1fbcc848d010be316108b37ca2fa9d60644b490847ee727d7d270eca488700fc4dffd3"}, {@broadcast}, {@device_b, @device_a, 0x93, "907c1d030000000000000031f07071d1d09b2e75e3df1e521af579b2e6aa59f256cb86cb712ea17cc49bacdb3b3730c63fa08c26b85f4f05000000836e37f17a6fc050a73cef2d93689f09f9610bd6516fa62a827ae62a86194f7c47db05f6f426dbd51eb0645a68a4bfc2afa2da2249a5e7e7dc9d2122b0205ae85cd5951bcfe95ea068ed6014973f4a38a57fd48d6fcae114"}, {@device_a, @broadcast, 0xe1, "96ea54128fbe88cfbe84310f0f7e73a886868ec3bc73629feca8cc6fcf699d52493b10a203ace4b237cfbf9e260d4148890d9229aced3199222f483fc12a3c3a1f5200d9638c22b208544c14badc3ed609455b7330d10b394a18f29f89acf85c6ecf0eac418eaf99db18e32041a4cfca31a275ad79f6b930217a8d7b7597a8abcdd55feaf7f49897feddd59d3f6c63644338c24cfe8dbad42c7bfc11550ed41190088854b63ece391e7f1ed332439ae5354d45ea7eb00e3dcd42d15fbc51be28b6d5c649244a33841cb003237fe5936ac2fcbecff73e0db3b36be6cb13664484c4"}, {@broadcast, @broadcast, 0x2a, "bf1354fcc71c173913a3ca25003d3ddacde868a0cac4c6a91e89aa36b3e47903bd969128b372075ce81d"}, {@broadcast, @device_a, 0xdf, "53a6bc1f191193cd0d648971a5b27885ba06a050eedaf95e9448b140ffaab0058d24b84be38f9cde6b7b46b85692b00f89e7603d561ae1e60f4409958752577f4d4b57e641c676aca81dc1d2787fe25f41130ada28970c143373124dc3e25800fe68741d9858eaf12fb6e62d689831b335a9ace45701a42f5275510fe1faa3c4ce31c9614f3f0b14090e46c54adf12b4af2d5d9ed738029d3a42518143b9663d648784798035b7c1ebd3c96ecaf09f2361c7903eb354965059b58b36e53ea957ecb6f5425b73fdf0db88f5d589e676c769afbee6d3532f97bbe3f77edaf316"}]}, 0x370) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f00000002c0)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000200)=@ctrl_frame=@ba={{}, {0xc6}, @device_b, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x4}, {0x5, 0x1}, "ac8969e334b8471a"}}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f00000006c0)=ANY=[@ANYBLOB="e011000001ff93ffff8dcb8342cabb8c0a756512c71af055134a080269000001fd525cb45715", @ANYRES16=r1], 0x33) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="c0000000080211000001080211000001b66cc5699116000000008c18000078fb3b5714f6474d50359314bd63f2be0100010000000000"], 0x34) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000002540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40}, @from_mac=@broadcast, @device_b, @device_b, {0x2, 0x1}}, @random="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"}, 0x764) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000800)={0x7, 0x1, 0x4, 0xe142c, 0x9, {0x77359400}, {0x2, 0x0, 0x6, 0x28, 0xff, 0x0, 'U@J\"'}, 0x0, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000001d00)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x5, 0x2, 0xc}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000007c0)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000900)={@flat=@weak_binder={0x77622a85, 0x2004, 0x3}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/98, 0x62, 0x0, 0x30}}, &(0x7f0000001cc0)={0x0, 0x18, 0x30}}, 0x1000}], 0xc6, 0x0, &(0x7f0000001dc0)="14b8b56e06a0badd31d63665535729af7aaf9e28be5ba1950b45d43a6be20907ebede364f32163b5f7b68006da5604a2c21f6713bc3cd2e7922e07bda823d8755708083291348f5b1f61849ba8d011bdb6e694d676807b2ce835d261d62d9bcc87b7708f9e0111b691dfe8bfefa85786c756d7e9d18739e746cf6706e8f2a76b85849c17ded38afaff7fd94ff2cbfb06ae1383580d053dc260a773ce7e6812b2229fe9d925180b5cca495ef63c99afcaf96f452e196103573cbcac8a7a88c0f52bf91fab71d0"}) 18:10:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xfeffffff}, 0x0) [ 3093.040612][T20479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.074005][T20476] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3093.095512][T20472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xce}, 0x0) 18:10:55 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:10:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 18:10:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xfffff000}, 0x0) [ 3093.215436][T20491] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3093.222635][T20488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.225116][T20491] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3093.282961][T20496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.314566][T20501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.330592][T20502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.358240][T20504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 3093.378860][T20488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.409988][T20506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.434794][T20496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:56 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f00000002c0)=@ctrl_frame=@bar={{}, {0x7}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x5}, [{0x0, 0x2, {0x4}, "74768af097f3583d"}, {0x0, 0x8, {0x1, 0x5}, "b397bc0d855e241f"}, {0x0, 0x6, {0x3, 0x1}, "7629c635379ac132"}, {0x0, 0x0, {0x7}, "5071a0a716d336c7"}, {0x0, 0x4, {0xb, 0xed}, "30ea2d59fc34d899"}]}}, 0x4e) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x40}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0xe}, {0xc, 0xc30}}}, 0x14) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) [ 3093.485487][T20488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.536991][T20496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.579184][T20488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 3093.634853][T20512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.678218][T20513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.720501][T20512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x2) [ 3093.765221][T20512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.813059][T20513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:56 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3093.853370][T20512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x3) [ 3093.991272][T20522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.041395][T20523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.062371][T20527] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3094.089229][T20522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.127237][T20527] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:56 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/19, 0x13}], 0x4}, 0x12020) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000021c0)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @initial, @broadcast, {0xc, 0x9}}, {0x8, 0x1, 0x3}}, {@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1}, {0x7f81}, @initial, @broadcast, @from_mac, {0x1, 0x8}}, {0x7, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_b, @device_b, 0x61, "b698edb8902e8994a35a38e2168101e511c5f19c64cd0e2e68e20ec86bc1bd3ec3facd5ba3616ac6e9b8f87170b0331fe749cba77db3fa151e982d6c5b9a1fbcc848d010be316108b37ca2fa9d60644b490847ee727d7d270eca488700fc4dffd3"}, {@broadcast}, {@device_b, @device_a, 0x93, "907c1d030000000000000031f07071d1d09b2e75e3df1e521af579b2e6aa59f256cb86cb712ea17cc49bacdb3b3730c63fa08c26b85f4f05000000836e37f17a6fc050a73cef2d93689f09f9610bd6516fa62a827ae62a86194f7c47db05f6f426dbd51eb0645a68a4bfc2afa2da2249a5e7e7dc9d2122b0205ae85cd5951bcfe95ea068ed6014973f4a38a57fd48d6fcae114"}, {@device_a, @broadcast, 0xe1, "96ea54128fbe88cfbe84310f0f7e73a886868ec3bc73629feca8cc6fcf699d52493b10a203ace4b237cfbf9e260d4148890d9229aced3199222f483fc12a3c3a1f5200d9638c22b208544c14badc3ed609455b7330d10b394a18f29f89acf85c6ecf0eac418eaf99db18e32041a4cfca31a275ad79f6b930217a8d7b7597a8abcdd55feaf7f49897feddd59d3f6c63644338c24cfe8dbad42c7bfc11550ed41190088854b63ece391e7f1ed332439ae5354d45ea7eb00e3dcd42d15fbc51be28b6d5c649244a33841cb003237fe5936ac2fcbecff73e0db3b36be6cb13664484c4"}, {@broadcast, @broadcast, 0x2a, "bf1354fcc71c173913a3ca25003d3ddacde868a0cac4c6a91e89aa36b3e47903bd969128b372075ce81d"}, {@broadcast, @device_a, 0xdf, "53a6bc1f191193cd0d648971a5b27885ba06a050eedaf95e9448b140ffaab0058d24b84be38f9cde6b7b46b85692b00f89e7603d561ae1e60f4409958752577f4d4b57e641c676aca81dc1d2787fe25f41130ada28970c143373124dc3e25800fe68741d9858eaf12fb6e62d689831b335a9ace45701a42f5275510fe1faa3c4ce31c9614f3f0b14090e46c54adf12b4af2d5d9ed738029d3a42518143b9663d648784798035b7c1ebd3c96ecaf09f2361c7903eb354965059b58b36e53ea957ecb6f5425b73fdf0db88f5d589e676c769afbee6d3532f97bbe3f77edaf316"}]}, 0x370) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f00000002c0)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000200)=@ctrl_frame=@ba={{}, {0xc6}, @device_b, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x4}, {0x5, 0x1}, "ac8969e334b8471a"}}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f00000006c0)=ANY=[@ANYBLOB="e011000001ff93ffff8dcb8342cabb8c0a756512c71af055134a080269000001fd525cb45715", @ANYRES16=r1], 0x33) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="c0000000080211000001080211000001b66cc5699116000000008c18000078fb3b5714f6474d50359314bd63f2be0100010000000000"], 0x34) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000002540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40}, @from_mac=@broadcast, @device_b, @device_b, {0x2, 0x1}}, @random="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"}, 0x764) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000800)={0x7, 0x1, 0x4, 0xe142c, 0x9, {0x77359400}, {0x2, 0x0, 0x6, 0x28, 0xff, 0x0, 'U@J\"'}, 0x0, 0x2, @userptr=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000001d00)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x5, 0x2, 0xc}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000007c0)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000900)={@flat=@weak_binder={0x77622a85, 0x2004, 0x3}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/98, 0x62, 0x0, 0x30}}, &(0x7f0000001cc0)={0x0, 0x18, 0x30}}, 0x1000}], 0xc6, 0x0, &(0x7f0000001dc0)="14b8b56e06a0badd31d63665535729af7aaf9e28be5ba1950b45d43a6be20907ebede364f32163b5f7b68006da5604a2c21f6713bc3cd2e7922e07bda823d8755708083291348f5b1f61849ba8d011bdb6e694d676807b2ce835d261d62d9bcc87b7708f9e0111b691dfe8bfefa85786c756d7e9d18739e746cf6706e8f2a76b85849c17ded38afaff7fd94ff2cbfb06ae1383580d053dc260a773ce7e6812b2229fe9d925180b5cca495ef63c99afcaf96f452e196103573cbcac8a7a88c0f52bf91fab71d0"}) 18:10:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xffffff7f}, 0x0) 18:10:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xf0}, 0x0) 18:10:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x4) 18:10:56 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="b40081000802"], 0x10) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@deauth={@wo_ht={{}, {}, @device_b, @device_b, @random="b66cc5699116"}, 0x0, @val={0x8c, 0x18, {0x0, "78fb3b5714f6", @long="47359314bd63f2beab5ebbdaa916c8b4"}}}, 0x34) [ 3094.336985][T20535] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3094.346849][T20535] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3094.419951][T20540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:57 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3094.474252][T20545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.526626][T20546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.558017][T20540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x5) [ 3094.569929][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.637431][T20551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.673283][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.685957][T20553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.718230][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.737641][T20555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.766583][T20551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x6) [ 3094.800900][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.848447][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.895444][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000400000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) 18:10:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x7) 18:10:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xffffff97}, 0x0) [ 3095.182598][T20570] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3095.200301][T20570] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:57 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3095.420459][T20575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:58 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[], 0x34) 18:10:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x300}, 0x0) 18:10:58 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000000)=ANY=[@ANYBLOB="48050600505050505050ffffffffffff0802110000000000bc488927d1558386a3ae317a55e9dc8eed581cdc2b0e56dbddcdade81a6f3b1165dc5b625eaa714b1edfb950a4c19c119234c4773d1049c0c1d65339edcbac7b497a0b0c89f74f367caad035b51d45d1621529ebb65dcff5010a1f70936ee48f7c709432730ea0285752df208ec0844f5d4e34dc7fabc402fc9f4a4c7576ba2ad446c83b5491af9d649a2e6fd014dca76cf5a554a59a02c54ad2d122e307b89ede4b"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000200)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x20}, @initial, @device_b, @device_b, {0x1, 0x1}}, {0x8, 0x1, 0x2, 0x0, 0x7f}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x77ba}, @initial, @device_b, @random="1cf6bf655b22", {0x6}}, {0x6, 0x0, 0x0, 0x1, 0x6}}}, @random="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"}, 0x6b5) 18:10:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x8) [ 3095.726837][T20585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:58 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3095.807066][T20587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.837782][T20589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.849207][T20590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xffffff9e}, 0x0) [ 3095.896125][T20591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.925018][T20593] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3095.943331][T20596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x9) [ 3096.020026][T20599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3096.040236][T20593] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3096.064932][T20600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xffffffe4}, 0x0) 18:10:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x500}, 0x0) [ 3096.153935][T20607] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3096.164704][T20607] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:10:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xe) [ 3096.333178][T20585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3096.365545][T20589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf) 18:10:59 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:10:59 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) shutdown(r2, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3096.475724][T20585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3096.923498][T20623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3096.943913][T20622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:10:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x60) [ 3096.965671][T20628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3096.979374][T20630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3097.066134][T20622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3097.211504][T20634] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3097.269325][T20634] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3097.407850][T32525] bond1: (slave ip6gretap1): Releasing active interface [ 3097.959927][T20622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3098.010482][T20630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3098.105590][T20630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3098.531416][T32525] device hsr_slave_0 left promiscuous mode [ 3098.631969][T32525] device hsr_slave_1 left promiscuous mode [ 3098.642218][T32525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3098.649728][T32525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3098.797561][T32525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3098.860996][T32525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3098.942802][T32525] device bridge_slave_1 left promiscuous mode [ 3098.949060][T32525] bridge0: port 2(bridge_slave_1) entered disabled state [ 3099.082104][T32525] device bridge_slave_0 left promiscuous mode [ 3099.088326][T32525] bridge0: port 1(bridge_slave_0) entered disabled state [ 3099.171610][T32525] device bond1 left promiscuous mode [ 3099.228433][T32525] device veth1_macvtap left promiscuous mode [ 3099.250565][T32525] device veth0_macvtap left promiscuous mode [ 3099.282045][T32525] device veth1_vlan left promiscuous mode [ 3099.288132][T32525] device veth0_vlan left promiscuous mode [ 3099.622179][T32525] bond1 (unregistering): Released all slaves [ 3099.920378][T32525] team0 (unregistering): Port device team_slave_1 removed [ 3099.996741][T32525] team0 (unregistering): Port device team_slave_0 removed [ 3100.039676][T32525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3100.110010][T32525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3100.200134][T32525] bond0 (unregistering): Released all slaves [ 3101.833920][T20657] chnl_net:caif_netlink_parms(): no params data found [ 3101.908926][T20657] bridge0: port 1(bridge_slave_0) entered blocking state [ 3101.917927][T20657] bridge0: port 1(bridge_slave_0) entered disabled state [ 3101.927242][T20657] device bridge_slave_0 entered promiscuous mode [ 3101.938300][T20657] bridge0: port 2(bridge_slave_1) entered blocking state [ 3101.946969][T20657] bridge0: port 2(bridge_slave_1) entered disabled state [ 3101.956006][T20657] device bridge_slave_1 entered promiscuous mode [ 3102.005804][T20657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3102.028420][T20657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3102.075789][T20657] team0: Port device team_slave_0 added [ 3102.089587][T20657] team0: Port device team_slave_1 added [ 3102.134250][T20657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3102.143094][T20657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3102.171839][T20657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3102.185197][T20657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3102.192999][T20657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3102.222426][T20657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3102.274565][T20657] device hsr_slave_0 entered promiscuous mode [ 3102.288926][T20657] device hsr_slave_1 entered promiscuous mode [ 3102.296841][T20657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3102.307930][T20657] Cannot create hsr debugfs directory [ 3102.433741][T20657] bridge0: port 2(bridge_slave_1) entered blocking state [ 3102.440906][T20657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3102.448349][T20657] bridge0: port 1(bridge_slave_0) entered blocking state [ 3102.455538][T20657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3102.519895][T20657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3102.537211][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3102.547215][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3102.556390][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3102.566504][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3102.582660][T20657] 8021q: adding VLAN 0 to HW filter on device team0 [ 3102.595194][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3102.604493][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 3102.611986][T13979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3102.649956][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3102.659234][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 3102.666408][ T5653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3102.682789][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3102.719607][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3102.727697][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3102.743353][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3102.757203][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3102.768897][T20657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3102.799550][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3102.809448][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3102.828008][T20657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3102.916788][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3102.928725][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3102.955458][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3102.964490][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3102.976283][T20657] device veth0_vlan entered promiscuous mode [ 3102.984576][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3102.994173][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3103.008620][T20657] device veth1_vlan entered promiscuous mode [ 3103.038147][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3103.047062][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3103.057182][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3103.066475][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3103.078321][T20657] device veth0_macvtap entered promiscuous mode [ 3103.093665][T20657] device veth1_macvtap entered promiscuous mode [ 3103.113256][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3103.127224][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.138623][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3103.149715][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.166670][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3103.179667][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.191276][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3103.202730][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.213827][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3103.227224][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.238321][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3103.249692][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.261328][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3103.272423][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.283990][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3103.295686][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.306739][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3103.317828][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.332249][T20657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3103.341279][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3103.349273][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3103.360021][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3103.369771][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3103.381859][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3103.393634][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.405003][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3103.416583][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.429701][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3103.448246][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.459205][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3103.477118][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.488087][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3103.510558][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.528177][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3103.540384][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.552178][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3103.563177][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.575394][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3103.586791][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.597276][T20657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3103.608193][T20657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.619573][T20657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3103.629591][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3103.640513][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3103.731179][ T8373] Bluetooth: hci4: command 0x0409 tx timeout [ 3103.769001][T32519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3103.792989][T32519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3103.865053][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3103.883641][T32525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3103.900166][T32525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3103.921349][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3103.969016][T21001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3103.993027][T21001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.009432][T21001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:06 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000780)=ANY=[@ANYBLOB="48050600505050505050ffffffffffff08df100000000000d0fecd4c3dda8479d3387705c64e01158914e311b52735c2d636ee048b1ded4d517d6c2f87c2000000fc75e42ce3bf09354aee8318e117113a12c0f0f90798b61817548e46745227458317bcca7db877789c88af614a924e8fb32eff8877bd84f99d2eb73158219309972c6d9320a0a8f2205001112045b90000000000000000000000004b38000000000000"], 0xa2) syz_80211_inject_frame(&(0x7f0000000700)=@device_b, &(0x7f0000000740)=@ctrl_frame=@rts={{}, {0x7}, @broadcast, @device_b}, 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000380)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6fb}, @broadcast, @device_a, @initial, {0xb, 0x1f}}, @ver_80211n={0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @void, @val={0x1, 0x8, [{0x1, 0x1}, {0x18}, {0x18}, {0x36, 0x1}, {0x30, 0x1}, {0x1}, {0x6c, 0x1}, {0x12, 0x1}]}, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x4c, "5b01ed9dfb8506079441cd1d429e9f8caef846350ccfd4269dfa801ca94b7b662e645b02afe34fee8b9a97ba1c71eb38480bb8fa85aa88cddf8b17654607294c8c7d31418fbf77deb8df11a6"}, {0xdd, 0x2b, "b6b4c87f84267a5fd3d09204d99c1355d861921142a7617804e16af6007e74fa7ba797a12f61d13e2200b1"}, {0xdd, 0xdd, "bd1373e3aaafcae8f881a06dfd33c8eb58ce1b15fdae850c632df1d908a6f691ae240f78d24b80569eea92d4dd2d0c61149698cdbc43225ed8457bf753ad0bd36adf71bebf598fbb7e053ae86e558473615d232c26a1e9c5dbb86a8a73121dfff6aa1ec70f982a2b5369dd072ae603941c6cc52713cdf1f3c90aff26665395bfdcc5315c2a0f60af8a1d3dbc803c12a74c9572f4000ce7be5389a71b49a4287c914f1f7f91622d5e584718db16e149d67357c7dddbad01767e9ca43fc4738fa400d09c1138341b21c05362e644c76d990db2405fe457270e3b7a3acf04"}, {0xdd, 0x45, "8221f62e3d3eeff7df102ec6ed4e6271e61e5fba91129767a4872f9b098aea1746f5bad76e289e307636a6a98310fb0fd0e2243b0ee2ff98637378f9786cc6395a5d1b8b4d"}, {0xdd, 0xf1, "a4b03ba6358a12f9629e88fd30d08bbe3597167140ea94e0485835eb144ed74cd13693f19abbbb8eb62a63cd0d1d3809782a4ef6804116965a91e83327680546dbdebb77b5abd6a470b894b21f6b509e05f0fc7a7693ba85f791e3c79d6c7671ba318c8d3137cec7f51423235754c6818cbb03c0b22650fcccb98d6f71aaec34d1cadd4b411e4d3c2d478517f0ad95bc1668a5b20ba9d4d1e8b4c5194e9184466c92ceab5a7f6f17786c6921bc9caef2844ae8acc8614086a9100d424d8153ad14420e7b9c222575240ed0ef74724abfcb06ae284709f7adec4c4dc31594c27bb79312c933c3a75c037e3ec69069ae48b8"}, {0xdd, 0xa0, "c1e95602381d6fa16d5072be10422b570b1f5a5e361111e30ad1a0976d7780cdab0f26254f3aff1b0f7377ec363a788168406908dbc4ffcc8d43b0a88bf43645487b8d78a1290e0e7dd706318b19984c29482d6f6575a6e6e2ad746873ccb8c41eab3d85c87f3166fe9fc2ef8997c4daa883f4cf1b905f9f0ac0cb4eb73629e03b3c0b38a666d3e37de60f4487c7a37216379ab259efe5b3115a6fc8ec3c5551"}]}, 0x364) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000200)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa}, {0x6}, @device_b, @device_b, @device_b, {0x1, 0x3}}, {0xd, 0x0, 0x1, 0x0, 0x81}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40}, @device_b, @device_a, @random="248aa8203a26", {0x8, 0xc0}}, {0x8, 0x0, 0x0, 0x1, 0x2}}}, @a_msdu=[{@device_a, @broadcast, 0xe5, "719e89caffd0dad70498cb59ea9d9fb6e8b629fae776b8364a909cf83f1335594541ac052ec5b48ed11fff01efae3b8561689491c7e45cb788d28ecd4d73fec02ea36c1cfb6a56121f6ff7294d966d11d8a0b80e1fda25f7cc4bd30129e4b3e6a57a803ef1c40912344c7a04e03d5ef0918ab44a1046da33eaf2308bd37c62f2a50af9205703a114b5635a5f4fb07ff2e369e7294c7744b578e7c8baca0b4c76ad49a574ceb8545138d8f7eae35eb0d8f02862263ba9d918653b5534c7aa161357daf6ccabbac2f04c03c5de9489f97789757072b896cef21cbc5d98490b09e2307f8525fd"}, {@device_a, @device_b, 0x28, "1ff417c781c05bc791fd0014646787835ea42efe2411c72b374fce7a7bf6590b6e93706e044c6f38"}]}, 0x166) 18:11:06 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) 18:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf0) 18:11:06 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:11:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x600}, 0x0) 18:11:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3104.328182][T21001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.339360][T21001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.353821][T21002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.437026][T21008] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3104.458840][T21008] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3104.512193][T21012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.524107][T21013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.560176][T21016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.587138][T21018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3104.605495][T21020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.622641][T21021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:07 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xfffffff6}, 0x0) [ 3104.654510][T21023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3104.689337][T21018] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x300) [ 3104.719777][T21025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:07 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xfffffffd}, 0x0) 18:11:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x700}, 0x0) [ 3104.875146][T21031] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3104.893931][T21031] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x500) [ 3105.039461][T21012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3105.089480][T21016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:07 executing program 5: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3105.203747][T21042] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3105.252704][T21042] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3105.340786][T21052] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3105.380065][T21053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3105.418530][T21052] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3105.438080][T21054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3106.010013][T32533] device hsr_slave_0 left promiscuous mode [ 3106.017490][T32533] device hsr_slave_1 left promiscuous mode [ 3106.024573][T32533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3106.032236][T32533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3106.041401][T32533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3106.049090][T32533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3106.058619][T32533] device bridge_slave_1 left promiscuous mode [ 3106.077803][T32533] bridge0: port 2(bridge_slave_1) entered disabled state [ 3106.092194][T32533] device bridge_slave_0 left promiscuous mode [ 3106.099692][T32533] bridge0: port 1(bridge_slave_0) entered disabled state [ 3106.125691][T32533] device veth1_macvtap left promiscuous mode [ 3106.143923][T32533] device veth0_macvtap left promiscuous mode [ 3106.150033][T32533] device veth1_vlan left promiscuous mode [ 3106.165008][T32533] device veth0_vlan left promiscuous mode [ 3106.623158][T32533] team0 (unregistering): Port device team_slave_1 removed [ 3106.658215][T32533] team0 (unregistering): Port device team_slave_0 removed [ 3106.697790][T32533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3106.782376][T32533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3107.120059][T32533] bond0 (unregistering): Released all slaves [ 3136.680405][T21098] chnl_net:caif_netlink_parms(): no params data found [ 3136.807359][T21098] bridge0: port 1(bridge_slave_0) entered blocking state [ 3136.820007][T21098] bridge0: port 1(bridge_slave_0) entered disabled state [ 3136.836400][T21098] device bridge_slave_0 entered promiscuous mode [ 3136.848036][T21098] bridge0: port 2(bridge_slave_1) entered blocking state [ 3136.866834][T21098] bridge0: port 2(bridge_slave_1) entered disabled state [ 3136.877903][T21098] device bridge_slave_1 entered promiscuous mode [ 3136.928414][T21098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3136.952603][T21098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3137.009480][T21098] team0: Port device team_slave_0 added [ 3137.027232][T21098] team0: Port device team_slave_1 added [ 3137.059034][T21098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3137.074876][T21098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3137.109253][T21098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3137.130066][T21098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3137.137906][T21098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3137.170435][T21098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3137.217720][T21098] device hsr_slave_0 entered promiscuous mode [ 3137.235089][T21098] device hsr_slave_1 entered promiscuous mode [ 3137.249032][T21098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3137.267124][T21098] Cannot create hsr debugfs directory [ 3137.392566][T21098] bridge0: port 2(bridge_slave_1) entered blocking state [ 3137.400017][T21098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3137.407309][T21098] bridge0: port 1(bridge_slave_0) entered blocking state [ 3137.414378][T21098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3137.477349][T21098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3137.499572][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3137.515304][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 3137.528617][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 3137.540738][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3137.560677][T21098] 8021q: adding VLAN 0 to HW filter on device team0 [ 3137.578459][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3137.589582][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 3137.596810][ T5653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3137.628054][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3137.639504][T13979] bridge0: port 2(bridge_slave_1) entered blocking state [ 3137.646613][T13979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3137.665549][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3137.688423][T21098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3137.706414][T21098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3137.720549][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3137.742453][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3137.757636][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3137.766046][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3137.798794][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3137.807424][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3137.825747][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3137.839407][T21098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3137.919479][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3137.937727][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3137.959978][T21098] device veth0_vlan entered promiscuous mode [ 3137.977747][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3137.990412][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3138.012099][T21098] device veth1_vlan entered promiscuous mode [ 3138.020040][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3138.035414][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3138.047847][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3138.084517][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3138.096687][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3138.108950][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3138.126682][T21098] device veth0_macvtap entered promiscuous mode [ 3138.147465][T21098] device veth1_macvtap entered promiscuous mode [ 3138.169701][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3138.186643][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.197499][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3138.216890][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.229426][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3138.248491][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.259270][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3138.276504][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.287040][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3138.307813][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.318871][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3138.336239][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.348957][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3138.366308][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.378989][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3138.395896][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.406975][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3138.424355][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.437970][T21098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3138.455488][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3138.468539][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3138.479587][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3138.494907][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3138.507949][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3138.526487][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.539001][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3138.540952][ T7739] Bluetooth: hci4: command 0x0409 tx timeout [ 3138.559610][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.570421][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3138.587404][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.597695][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3138.616419][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.628224][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3138.645411][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.658602][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3138.675505][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.687567][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3138.707630][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.718671][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3138.736450][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.748734][T21098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3138.767473][T21098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.791698][T21098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3138.801377][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3138.817018][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3138.962094][T13361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3138.970555][T13361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3139.045106][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3139.064013][ T9077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3139.073104][ T9077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3139.086062][T19272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3139.131536][T21440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.149443][T21440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.170168][T21440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.193221][T21440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.210425][T21440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.523861][T21440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.539469][T21440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.557571][T21441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:42 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:11:42 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000040)=0x9, r0, &(0x7f0000000080)=0x463f, 0xffffffffffffffff, 0x1) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x4801, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x84}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1d99}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000005) 18:11:42 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xfffffffe}, 0x0) 18:11:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x600) 18:11:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x900}, 0x0) 18:11:42 executing program 5: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3139.569867][T21440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.590018][T21441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.634202][T21445] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3139.644141][T21445] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3139.720114][T21454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.732305][T21447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.744567][T21456] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3139.768916][T21458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.792662][T21459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:42 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xa089ffffffff}, 0x0) [ 3139.817335][T21461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.839340][T21462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x700) [ 3139.866074][T21456] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:42 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x2000000000000}, 0x0) 18:11:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xe00}, 0x0) [ 3139.976253][T21469] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3139.987415][T21469] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x900) 18:11:42 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3000000000000}, 0x0) [ 3140.164812][T21469] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3140.175084][T21469] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3140.229676][T21454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.231526][T21486] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3140.249435][T21486] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3140.250531][T21459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.279541][T21458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.309959][T21488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:42 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000580)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3748}, @device_a, @broadcast, @device_a, {0x3, 0xffa}, @broadcast}, {0x4, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@broadcast, {0x7, 0x6}}, {0x2, 0x1, 0x1, 0x1, 0x8}}}, @random="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"}, 0x393) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:11:42 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {0x4}, @broadcast, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x2, {0x0, 0x7f}, "ace9c8b2711794af"}, {0x0, 0x7, {0x0, 0x3f}, "ecc0c1abe0a216e8"}, {0x0, 0x7, {}, "cf2916e67d4e9995"}, {0x0, 0x1, {0x8}, "f36109abecb1a762"}, {0x0, 0x6, {0x5, 0x2}, "f56ea3ed89fa6865"}, {0x0, 0x5, {0x6, 0x3}, "0c86f31fd7fdcce3"}, {0x0, 0x4, {0xe, 0x773}, "19d4cc1cc48e1d95"}], {0x0, 0x7, {0x8}, "6fbd6207d14a9b7d"}}}, 0x72) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) 18:11:42 executing program 5: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:11:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xf00}, 0x0) 18:11:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xe00) [ 3140.552592][T21491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.584718][T21500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.606456][T21501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.620869][T19272] Bluetooth: hci4: command 0x041b tx timeout [ 3140.636865][T21502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf00) [ 3140.652069][T21503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.685387][T21504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.706549][T21505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.734432][T21501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x13e4) 18:11:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x3f00) 18:11:43 executing program 5: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3141.062947][T21500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.075299][T21501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.097673][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:43 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x40030000000000}, 0x0) [ 3141.113898][T21502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.124594][T21504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.137632][T21503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.147888][T21505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x6000) [ 3141.163330][T21523] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3141.173462][T21523] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:43 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xf0ffffffffffff}, 0x0) [ 3141.230755][T21527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.255508][T21523] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3141.265389][T21523] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:43 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @random="5e49b0898098", @broadcast, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3db) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) [ 3141.335772][T21534] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3141.345570][T21534] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:43 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000200)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x0, 0x1}, {0x3}, @random="2b111b4b2387", @broadcast, @device_a, {0x6, 0x7}}, {0xe, 0x1, 0x1, 0x0, 0x1f}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @initial, {0x5, 0x36}, @device_b}, {0xc, 0x1, 0x1, 0x1, 0xff}}}, @ver_80211n={0x0, 0x623, 0x0, 0x2, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xec, "a0a5b799588ee138b28d8ee8ea53007f0f130cf90cd71c12bb09c2b657039a482bb7ad8184f62585fcf2e421e03e9d3495c4761e758789d21639e4e4c796dd30be8e858c092313dd5881df566cda34d1dbfb1399283b2742f19acc8ece829a664e4971bf7d36adf8343416cc04c4299d03b1ca05691fa5ef9e52a601d4b9478ff0522ae285223f660649c1d59fe2a4e7c5bf0c81c0a0c045aadac5ccb5fba795a1f73814fceb59fcaa68ab9bd0dd053b45dfe3b2d9731ec82870d71ac76250fcfa6b2950f5ae38152d54a3384ab42c66b00b6f3e780a9f39da90ed1f6afb4f2b7a612281dbadea401c930282"}, {@device_b, @broadcast, 0x8c, "87f1db8d3eb187321a2508923c1b50184506ef9a56a45a7d47bee7ea971b3047200d28f377f472b0625eda55bb8df4e118bef8abb33924e3ac041bf0179cb6ba7329b740daeb9429ea7cde89451a06900c1ca854b06186baa7aa10946166e9b7b1ad5d8ad607d0912b85b0151ed33aba30956b04f84a3c7bbc9eeca7a34fb62adc67076d8a5752daf7deaf07"}, {@device_b, @device_a, 0xfc, "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"}, {@device_a, @device_b, 0x6d, "d85eecfd93105445be19beeea515ae6f7268b43931b5a69c378aeb887a81326d072ff6bef3cf237ecdb6d93e05c3d5edd309fdec4ad8a73c2d2ca3ea2f6fe46063313accc09fd6b7c8e45893dcab0cc822966d8b992d7ea38128c519d132d59753fcdb4a0c468dcc7f8000d8d8"}, {@device_b, @device_b, 0xbe, "f5917f73df3fa44fe7f408ddad3c26e4ab08e31f403810e052df36697b2862c37e6897be81729313cacffa3a3b58fcc302363a929627895b39ed105a3c4b494612a109d3b71b684ad964cff9af2f5a188053b4f08012ea8a447c66e44486ccf759a67ad08449fb19e402b93a8419b1cb30a90521e0960a863ae3458e7c95289c973e7ee0debf1cbbf9692b910a7efa0cbfd6547c45eeb24b5a630d8cf8a5ee978f9ec6e927393ec19da20308aba6ba8b1bbd659bb86f4d47471f4cef6339"}]}, 0x42a) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) 18:11:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x3f00}, 0x0) 18:11:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xe413) [ 3141.464805][T21540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.512693][T21543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.538150][T21545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.561731][T21540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.589801][T21548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:44 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3141.639284][T21549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.684477][T21545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf000) [ 3141.775406][T21553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.816977][T21555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.857108][T21553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3141.897805][T21560] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:11:44 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x100000000000000}, 0x0) 18:11:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x30000) [ 3141.952903][T21560] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3141.968762][T21540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:44 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x200000000000000}, 0x0) [ 3142.005849][T21543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.020443][T21540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.043447][T21545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.073978][T21567] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3142.081275][T21548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.084088][T21567] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3142.101548][T21545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x6000}, 0x0) [ 3142.147955][T21570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:44 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x5, 0x40}}, 0x3d, @val={0x8c, 0x18, {0xcf5, "43abe84f1817", @long="428d7c5d37d37ccdb09f42ff9a5938f0"}}}, 0x34) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000200)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @random="f2f12422cedd", {0x8, 0x3b7}}, {0x4, 0x1, 0x1}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_a, @from_mac=@device_b, {0x8, 0x1}}, {0x8, 0x0, 0x3, 0x1, 0x9}}}, @a_msdu=[{@device_a, @device_b, 0x8f, "1d5705975afc9c3ba9df1d22ec9b544aaeb0a8fa47912152ac9e86c368b0f0fac8dd2171c81606733061cf3bf974aa0e1b3f653bfc467bd1207624701df86a97fd5110a39f82b5b872b75256968d76a45ab8ac797cd520a38e877bad58287d2621dcdf99f92db9b3b03c6b877f62cdd0b017eaf5634e71d3828a7ec9d22f7dda4354ec8f78c1ada4ef07610a56e2a2"}, {@device_b, @device_b, 0xb3, "a35849071bafaac48d95b9d61347548e33d60eda87e411530096237ea3c3da7b3f46640bbef2cbc40c0621c6110641a6184a2c232dc891d22cd16d7514d3d348ecd89019207f0a93f25b9b9ff911610c8adb8c7d742247004a002957a670cd46c8bfa7bc3bb44a9f9a1a8228702b96cf235a8cff9b8529ed7547cfaf02cf9e2b8c43c05b64350159736885fd782f6eecbd056f68376eb668d80d8a195db06f9321d360b924551fcfcf2baed47e6681e2fccab4"}, {@broadcast, @broadcast, 0x4d, "1bd329648075f7a1d253c2ee4e4927a00ac922dc2e6ec9d23b7cc40d2c2ea5a7a9cc3661b48ea689dbf8e76a6e64331a2c275b522b8d276864bf7abaa8eb2fd474c3525bf937e227926f872dd0"}]}, 0x1f4) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:11:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x34000) 18:11:44 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:11:44 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x1b) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x1f}, @device_b}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x1000, 0x7, 0x200, 0x8, 0xfff, 0x20, 0x1, 0x4, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x20, 0x800c, 0xffffff80, 0x200, r3}, 0x10) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r6 = syz_io_uring_complete(r4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x72, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000002c0)={r7, 0x15, "90a4ede18b007e7213c5164ad4cdaf840a7a1d07d0"}, &(0x7f0000000300)=0x1d) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000280)=ANY=[], 0x34) [ 3142.328096][T21576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.385260][T21579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.412017][T21581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.433101][T21583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.465562][T21585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x200080) [ 3142.477541][T21576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.525734][T21587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.545832][T21584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x400300) [ 3142.612274][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 3142.618603][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 3142.690923][ T7739] Bluetooth: hci4: command 0x040f tx timeout 18:11:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf0ffff) 18:11:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x1000000) [ 3142.862422][T21576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.905913][T21584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.916396][T21579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.926683][T21583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3142.938727][T21586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:45 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x300000000000000}, 0x0) 18:11:45 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3142.978945][T21604] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:11:45 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000580)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5d24}, @device_b, @device_a, @from_mac=@device_b, {0x8, 0x5}}, @a_msdu=[{@broadcast, @device_b, 0xbb, "860c529d6f8f6ccd6c6c133c5e14d08cd66910645dce70acb2f10d579ac6fe3fd6006ea0e16b18cb3ea02c8ed736779291c823afe0909a31cc5c4dcdde5b4fac0ada82aa4728f9e5236ab50f531bcb4ac67ba2a71d0c8270e3661df1700b4fb38a5cc41168519ffca71a2a012db184200e51fc0c10f9bce16a9c4fa63a01c953f6cdd6e05322ceb0d20acaffea82e0504fdabf5b4bc698fadca5b4e4a60f8ae20a910de2575494b19600307db794494ab4ed50b645cf5bc9bea0e2"}, {@device_a, @device_a, 0x18, "3c18ca888d250435f23e7a61aea111c6868af825289109c3"}, {@broadcast, @device_b, 0x16, "7d91727a31b6c81eeb34498e3ed04f1f20524b863c5e"}, {@broadcast, @device_a, 0x46, "9e29b2a570c9e5db748644a2452b72add1b5e53470adef32e5e6124f13f8d3c46d27dfd49839d7433e79946f80cc953c27148bfe9770f8776ed2f7d3cf5906c0379b0dcbdb63"}, {@device_a, @device_a, 0x74, "8d92d8b80fc53a6b1a7721f643dcc5a4abadd66c3576430cc4757f312f49391398b71e6b2b38b0158a0fe928d1c0de591438bcf9d2c00330c147525d7fdd124877b6bb86cba2a8113f1012f996fb01351d60456880f2e3cf55e741707c9ce27621d7274f342d50bea69899127cba4dacee3fabd0"}, {@broadcast, @device_b, 0x35, "5f1151bfb8a5e3728c77f19cbb2e45355d0a87f3f8569a3770056cce7534665bc3c6986caefdec9c3bd011e122da7f65be7a580b0e"}, {@broadcast, @device_a, 0x95, "ce8a77492897083fa5918bf8908f985e2cb08fd97909e18281c4588eb1e74679b28bdefb61f511316360303e317e8a39564e7ac090a1bd6cf851fc702a0b022fa713d3c2760a55ab7229ee0dfdeeed2d60ad90d9c188ae408b400dbd402db9690060d634270d1864843dfe62d1f7481c65d803e3af1f00d49302bc1fa324fc14ecdcd7eaa123e2aaaf271096dfc7b41a28119efea3"}, {@broadcast, @device_b, 0xd5, "116eda6b26964b21fd6f045e0def6e494305dcb8c7a76d6266164e84643a5c3bc6635d19c8f433d1a410b6db9808a5622f45aa7000a8fd6f14394286378cc2d6e0c7f6df7e9c71ad7e26cb94dc980b5046ef237018c3273a7e473e305aad4878bdfed8abf78796a9dbff7f34496489e3ed1861bfe68ae9633c0e4a5914bfd3eedb40e6e046de2d88794d795c0ad6709a01705939746b7de77d1d76c2a3b3432ae7ba3656a71c4319afb4af0fb83bfe6acc2d26f22aed64f1a11192c52a75febeaf2a6b4bb29fc3a64bba8b66f9772567b59401e372"}, {@device_a, @device_b, 0x1000, "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"}, {@broadcast, @device_a, 0xe3, "523d00c7f5b32281af0e059e934b0c092769b9418351dd253ec70f32167ba828f87ab9c6390f7aef62262e8dcfcc4b7388054bd517db226c0e168f4d1b3ce8ce0827665a682f6c6d491d09ac090ae85ffe375438660391d0b6939a83bc23bc5b15bbde91e7ecd168fb87ba8599f40ed24b50e8c04fc0ccd20c13d8734d90794ecd49f71f494b8a9302de3f13b62ccd9af255cfb6a17f5f42ae30ea19167901cca9690c53d53af3931ef80616fe8d852ff192e84e0eb07877d11bd8ad72ee88133a6a9dc58af28b3b4a5754c5823b0463ef758523d96190f6dda9dba6acad52c9e1d602"}]}, 0x14d8) [ 3143.065244][T21604] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3143.161977][T21612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.185005][T21607] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3143.195288][T21607] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3143.222354][T21617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.234298][T21619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.256782][T21621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xce00}, 0x0) 18:11:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x181) pipe(&(0x7f0000000180)) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @broadcast, @device_b, @from_mac, {0xa}}, @tdls_disc_req={0xc, 0xa, {0x6b, {0x65, 0x12, {@random="086ee24febe0", @device_a, @broadcast}}}}}, 0x2f) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000003c0)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_b, @initial, {0x0, 0x80}}, {0xa, 0x1, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x2}, @device_b, @random="2d4755d28d40", @random="997dbb6efdc3", {0xd, 0xfc1}}, {0xe, 0x1, 0x1, 0x1, 0x4}}}, @ver_80211n={0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x98, "5263aa888989cf329b40b9c38cc59f4141ed4d92b27bc39e2bffc83916697a91bbfcdea83c8c390107c4243fff2c226462325bd947983c97fbdcefaacb672bad380276d8d4ac47d2a028b92f1204199ccba4030e68eab6a8386c62e9e7fab218b634fe1cedd290bdc3e49e4d6d8b263bf5e021e9e288ba303bd2f639ce8d287d9155da0d6882219b1007c0d18bf29919dd514cc2459bcbe1"}, {@broadcast, @device_a, 0x31, "675377b605fe9c3056c0a0b8bff61fc3be8c72d02b087f826fea8d2f136c47a86d042748c1ec9e00809e947d0dd33e5f75"}, {@device_a, @device_b, 0x54, "2596287a8c771a24e60225ff024574e1a82fdccbcfd9bbcd1fc0ed95ea938b42b48f5b6ffb2e2539f6e422902102196f6ffcd479cb061c4641a65fdd0c7ff1bba4f683b6f40d2071ac8937324c3b18532ab2c961"}, {@broadcast, @device_b, 0x55, "5dbe43714d5af6960ce652b3f0aff2e308d03342734ec8194a7c3448cbaaf5f62e4cdf59041249856d0235ba26e8de3713451582eeee712e355ae81325f47f7fe14cdfd35dfd88fb6c161389a664d8669a53a40bb0"}, {@device_b, @device_b, 0xcd, "082e64f7f722d96b84cd87a758b11d468e52b68a4b91c52c2c14ef3af55e45e497d57dc1546921174a51f902a2dc3779dc2213b56210056a1d1c560a29c30def791a966b82aeaaa40b3b1bc65ec55fa3511f34390388dc3297ec1f5363a7ed36360bedcf2be50e2e4b9926e05c58b8f9baaaf3541dcb895ceb81c658f4b8890962e8b00d5af1ca8f61ddfe1ec6bafadacb973770f660bd604e92d06d0e04dd5803f6f59faf49465bc9bbeaeca10fe5cccaebfa1a116b17e26b88d3799d8bd19a83f0d6db51eda8af7602493ce2"}]}, 0x2c4) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f00000006c0)=@ctrl_frame=@ack={{}, {0x20}, @device_b}, 0xa) 18:11:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x2000000) 18:11:45 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x400000000000000}, 0x0) [ 3143.276117][T21622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.306663][T21625] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3143.316497][T21625] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3143.356879][T21629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x3000000) [ 3143.412706][T21634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.454205][T21629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.495584][T21629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.543628][T21634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.578890][T21629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x4000000) 18:11:46 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, 0x0, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3143.701915][T21619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:46 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000000)=ANY=[@ANYBLOB="48bca1644be30fdfe41e513c68b16cae68050600505050505050ffffffffff327be76d2d2da66e14587f17"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:11:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x5000000) [ 3143.847132][T21646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.892794][T21648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.933165][T21629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.945710][T21646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.958139][T21650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.981553][T21651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.992703][T21634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.012603][T21653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.046712][T21634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x6000000) [ 3144.094820][T21629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.117016][T21657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:46 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x500000000000000}, 0x0) [ 3144.208121][T21661] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:11:46 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x40}, @broadcast, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x9}}}, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) socket$inet_udplite(0x2, 0x2, 0x88) [ 3144.268766][T21661] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3144.373958][T21664] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3144.383981][T21664] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xf000}, 0x0) 18:11:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x7000000) 18:11:47 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x600000000000000}, 0x0) [ 3144.419772][T21650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.435131][T21672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.455867][T21675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:47 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, 0x0, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3144.507499][T21678] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3144.514470][T21676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.517477][T21678] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3144.560013][T21679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:47 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000040)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}, @a_msdu=[{@device_a, @device_b, 0x4e, "537b10bd1f4839869d3e5c93fa2f932b899035374f261d27487a7baafa72d4b404e2afbce30c0156e9d8609f3e29b6b08dc323b285519c097ae1154ce13883e3f018564cc587e598b4670d0388b6"}]}, 0x74) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[], 0x34) 18:11:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x8000000) [ 3144.677476][T21687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.727471][T21689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.753832][T21690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.771233][ T7739] Bluetooth: hci4: command 0x0419 tx timeout [ 3144.787855][T21693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.809069][T21694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x9000000) [ 3144.964987][T21672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.990264][T21675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.006615][T21672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.034287][T21676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xe000000) 18:11:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7fc0}, @broadcast, @device_a, @random="7040fcc1339a", {0xa, 0x8}}, 0x3f, @void}, 0x1a) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000200)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @random="132bd9f52520", @broadcast, @device_a, {0x4, 0x3}}, {0x9, 0x0, 0x2, 0x0, 0x8}}, {@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @device_b, @random="e2737236ad98", {0x6, 0xff}}, {0xd, 0x0, 0x1, 0x1, 0x20}}}, @a_msdu=[{@device_b, @broadcast, 0xdc, "fd06d706f0867c146bfb5be993010950c4402dc555bf918fa1b3b91dd4d10b632faebc1a7e086871811d5a91edb22610b8f88ecc6b44af182d630c4056aa1b90a32f3d5afc3608f5c3a3a4af69d111c06099f5d1c4970581ac5db68742f96c8ceee381718d17863eae1017445b7d16ba8c79edded733a93fb6cc1da62c18a3e90c08c5b923d832224fca6d4564b74bba8b8ed20e6ef595e012c17ffdd2b9b93dc79b180d5d8500ac35b156568b6c08608792b12cfe08eae345cba86f336a745d649153953eeb54fbd81c4ada3d335d900362b0d5adf0eb44770fdc30"}, {@broadcast, @broadcast, 0x99, "2eee43e3665874b344696a065f4d677fcfc66661272170d69a49657ffbe53cff2ac1bbb61bc17a84e0e82b71364033b10b98de21cc2ecf4af3c997624f8706f2f880ce67bcfc3fd854b343203fec39c9af1a8e754cc0bc6d68078265e672e2f67175459d7869c5499bdf087d1dd5d5e4f297c222670ef367530ee23cd4fd8503d66a115a37175e92b8ab709274b83803f76dbea88e7ad5320e"}]}, 0x1c8) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) 18:11:47 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, 0x0, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3145.175954][T21690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.264417][T21705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf000000) 18:11:47 executing program 0: listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/210, 0xd2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r0, 0x0, r1, 0x0, 0x10003, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES16], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) [ 3145.306633][T21708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.367107][T21709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.389210][T21710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.418859][T21705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.433721][T21715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3145.449153][T21717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.469203][T21713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.496446][T21719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.532651][T21715] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x30000}, 0x0) 18:11:48 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x700000000000000}, 0x0) 18:11:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x3f000000) [ 3145.644086][T21729] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3145.654239][T21729] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3145.681612][T21731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.731325][T21734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x60000000) [ 3145.851602][T21705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.865019][T21739] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:11:48 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3145.902092][T21708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.912499][T21709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:48 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x800000000000000}, 0x0) [ 3145.953001][T21713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3145.983536][T21739] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:48 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x900000000000000}, 0x0) 18:11:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) [ 3146.082625][T21749] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3146.092365][T21749] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3146.112872][T21750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x80002000) 18:11:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x34000}, 0x0) [ 3146.138679][T21752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3146.199177][T21753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3146.257363][T21756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3146.308031][T21761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x9effffff) [ 3146.347429][T21756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3146.706265][T21756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3146.729713][T21761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3146.745529][T21756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3146.768797][T21722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3146.779484][T21734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:49 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000580)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1f}, @device_a, @device_a, @initial, {0x3, 0x3}}, @a_msdu=[{@broadcast, @device_a, 0x1000, "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"}, {@broadcast, @device_b, 0x97, "55b806958b66f76e10cd2213de5a153274c8df9de816be73cb57dc6a888ab86253b1691c22df17d9c01d4bdd6488f3c9719516ce4cfbef4ae223f2ac5f3782595c7560928ac15ec46cd552a4290dc715803db5b7326da9a0f22548c33cec8d5aa55025f69fb658c9fe84b572f6bb9c1a296dc765b67672f4107a2e9bf5b74b32acb404d75dcff5fde5f4f0d1ca9144f4af0a62349fb247"}, {@device_a, @device_b, 0x8, "2865d2438a4b4516"}, {@broadcast, @device_b, 0xd2, "d5e4847edbbdee9f3a5a4379f4d7c7b7a3c795779f55b4fcae21e5b57e903e081fe2f01ac500274b12999298a57556aa8bea42e85695828c679d413cd176730ed656e1d5ee3fde0e2f381cd2673b3cc632c4b843a9979b0b5045aef35d7ff455ff5fb36e6740c6f577237a904906338f247e68cff78ef9d4d0ac5b228e2b5af7ffdb3e98a1a97432c6f44dccfd7eca41b57b73d31c19dcc9aaeb3346eecb1662d8b11e3bcb9920c333de126293b11502c604d4acd591f1afc16e4c93122f6ceb7371cf7721c8bfda7c343974eac5a5be02a2"}, {@device_b, @device_b, 0x1000, "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"}, {@device_b, @device_b, 0xe8, "3ed3ce98f5f6624cc41509832ae7cbeb796afbf5204b26f02e7a51d1af6347473cae132341c7b6e3305ec882bdfcb43756062c774a50c6e581d1303392cb76de7dda941e61a858010a363fcaa5c5f3f148ba60b6e4e451d57524981cb531330afd4a088317c8bdd7d5d102133eb3f7967e889b7a580c2714c51187e22e4332ef177a89531ad00f049609d293b3f7ff5ad90328f5a13dadecaf636bb9658fd21b5050f5207b39f52c3de8fcb16293ad1f36319cdf4adb420a2ad9e900d440b5ee10699eb6c5fc836fc53438bbb2f8cd541069bbb78ad634dd25bea7316dfca84dfeb59b6b9e291814"}, {@device_b, @device_b, 0xd7, "14e6b580ee5b5fcce2d0ed134f82a2fc8e388005d1b97b6e2a9f4911a149e6397d575bb90bfab8783c832129815bf7a0bb971034c136844c6a7b684a01f420e668b5a4bc6aae2f3881f2a870e0fb18d0c78dbf808bf94cabfb01b8fe31ef57b2c67fe15823d18fe37544a34c929480a976a0fdfac5e8b289eb99aa694af48ec3afdbb815f8fb1c30a97dea83b220c0f5f2f78c30df936ea1a231dd43093b0f0e267308f703dea00103f6e2211974071ae00fd46ddcd551af9de72ed001da9fb23874f98e1446282353f736798077eaf205d66011d74d23"}]}, 0x23b8) 18:11:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xe4130000) 18:11:49 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:11:49 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) getsockname$unix(r0, &(0x7f0000000200), &(0x7f0000000280)=0x6e) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="58a10508021100000199000802110000000802110000005400de358fcc11644028fd2f021f3c19ca75dcafa3160bb48f15cbfe308c6fc8181448661c9f7a23f9a42e81f4b2a011ebce61aeff691179a7d235b17a2d0b5592ca41d93fe3cf4e8bb31b74531e324e679c239ecbd50000ffffffffffff0802110000012100902d45c3f93ca0911fb64c1564770a61c27bf55331e8ca4acca6773f0b1af282bd00"], 0xac) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x34) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000002c0), 0x4) 18:11:49 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xa00000000000000}, 0x0) [ 3146.944027][T21775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3146.971968][T21780] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3146.999062][T21781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.052116][T21785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.063848][T21786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.074079][T21784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf0ffffff) [ 3147.101713][T21780] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3147.115769][T21788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.130214][T21787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.166327][T21790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.202616][T21784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:49 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xe00000000000000}, 0x0) [ 3147.224605][T21783] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3147.234399][T21783] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x400300}, 0x0) [ 3147.295372][T21801] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3147.305609][T21801] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xfffff000) 18:11:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xffffff7f) 18:11:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3147.523873][T21786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.571696][T21788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:50 executing program 0: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x1, 0x3, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x7, 0x1, 0x1, 0x80}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) r2 = socket(0x18, 0x0, 0x0) close(r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000480)={0x1d, r5}, 0x18) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r5}, 0x18) r6 = socket(0x18, 0x0, 0x0) close(r6) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000480)={0x1d, r9}, 0x18) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r9}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x2, 0x921d, {{0x42, 0x4, 0x3, 0x3, 0x108, 0x66, 0x0, 0x6, 0x29, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4}, @end, @cipso={0x86, 0x57, 0x1, [{0x5, 0x4, "a4a8"}, {0x0, 0x8, "a105b1c91b15"}, {0x0, 0x9, "5274a4fd4c7768"}, {0x0, 0x4, '+='}, {0x5, 0x6, "b5a58683"}, {0x0, 0xe, "7c97d8586a4fdb17fbea6d15"}, {0x0, 0x4, "5c9f"}, {0x7, 0xb, "c1169a44c64ddea02a"}, {0x5, 0x7, "9faf27f9c0"}, {0x5, 0xe, "a09d54c3f7bcd38503fb5a45"}]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x5, 0xf, "8d6719f304c04656a5d2de3e74"}]}, @lsrr={0x83, 0x17, 0x2c, [@empty, @empty, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0x4, [{@private=0xa010100, 0x7ff}, {@loopback, 0x7}]}, @cipso={0x86, 0x12, 0x1, [{0x6, 0xc, "20d3759ff6f24c28d846"}]}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x8, [{@multicast1, 0xfffffff7}]}, @timestamp_prespec={0x44, 0x24, 0x91, 0x3, 0x5, [{@empty, 0x702}, {@loopback}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @timestamp={0x44, 0x14, 0x80, 0x0, 0x4, [0x8, 0x1, 0xff, 0x100]}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x358, 0x0, 0x624, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) [ 3147.620018][T21776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xffffff9e) [ 3147.691691][T21813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:50 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x37d) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="2030010008021100000008021100000050505050505009006600240408021100000000060202020202022d1a008013fffffeffffffffff00007f00010000000008033e1139b7135be91d736c271e8934d5a788cf2688dfec2387b59989b391dc937d41c8252d128e1c97d1d29393cb27a508f74749d889a5758067b33733c6fbe14d301e007e83b315a77f552908914b4391a8e26736012a77436ccd5eb6ebb6dcab60f0a9"], 0x46) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3147.738854][T21815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.796634][T21819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.811577][T21818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.860489][T21823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xfffffff0) [ 3147.933554][T21824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.975248][T21826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.017400][T21824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.053795][T21824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x3000000000000) [ 3148.112582][T21826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:50 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xf00000000000000}, 0x0) [ 3148.175738][T21835] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:11:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3148.231234][T21823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.258423][T21835] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x20008000000000) [ 3148.365048][T21837] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3148.375151][T21837] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xf0ffff}, 0x0) 18:11:51 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000240)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x3f80}, @broadcast, @device_a, @from_mac=@broadcast, {0x5, 0x7f}}, 0x101, @random=0x1, 0x80, @val={0x0, 0x1b, @random="4e692947f74b3fb5e35d2741074ea89e12e9caa4dc908eb9b7cceb"}, @val={0x1, 0x7, [{0x36}, {0x12, 0x1}, {0x4}, {0xc, 0x1}, {0x48}, {0x6, 0x1}, {0x7717075ebe03527b, 0x1}]}, @val={0x3, 0x1, 0x30}, @val={0x4, 0x6, {0xc, 0x8, 0x401, 0xbb}}, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xb3, "f4c550e49503bf3cbb44b2764cfc8a0da8e6e70d62e20058876042b7a83487019962034a2d4464f8d83d1427c33d903085cfa5d3072b842f2d3a9fbf0da103f6d1ce8ca7359a7e276042dd4552667c57b53af350b5cdd9cac3bc52bfd271d1527cc82702ee4aecac7cc04fb7fa63de3bb8b825c16efca51dd41cf7357f6d702579f631c8f5c871ca1913a17afafef9f6a7af44ecc9045b6298cdbdfe4f8384a52ffc0826090fe539405ab9541ee1304e78927a"}, {0xdd, 0x72, "abed195b2efe4cf85f34aa569789c38124fb9818bc87e6c97df5f73e36f3d07b4e0a2ca70e9d4ae58f4fbd7d00c0e2ab6cfe2c24b968e19ad8cc79eb9af0ecee319e0d2c80dc86612946ae963ca2953fbe0f4957546ed0f9137dd2aec4745d1946b89ee0d46580c510490a5e474199323f07"}, {0xdd, 0x61, "73e51a7ff7b7b21b7bf510cbc5629dc6fab6afb4fe8affff11927fea0b70ff546c01eea2601b6a4901420e3cfc608e72e25d0415414d1412023622c784a542085bea50047dda67020b7a5403b085f2393cbf4c49d498db64bac2954b5d57b37ae8"}]}, 0x1e9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r0, 0x0, r1, 0x0, 0x10003, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:11:51 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x1f00000000000000}, 0x0) [ 3148.423041][T21846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.442303][T21824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.476068][T21848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.491242][T21851] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3148.493598][T21826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.501144][T21851] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3148.537693][T21852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.549665][T21853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.566334][T21856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x40030000000000) [ 3148.646287][T21861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @broadcast, @device_a, @initial, {0xb}}, @ver_80211n={0x0, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x404, 0x36, @default, @void, @void, [{0xdd, 0x21, "a9a74571d66a58e346a55cb7427fc3e2f5a9fcfae3fc0a8d309cca5aba28a2c967"}, {0xdd, 0x22, "13111ff64586e6d21519b14d67c8c5ec0c0f43500c4c038729af8929fae246d42d75"}]}, 0x69) [ 3148.714706][T21864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.817981][T21864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.846389][T21869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf0ffffffffffff) 18:11:51 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:11:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x100000000000000) [ 3149.154468][T21879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3149.196417][T21882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3149.249017][T21883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:51 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x2000000000000000}, 0x0) 18:11:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x200000000000000) [ 3149.417808][T21892] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3149.480988][T21892] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3149.594984][T21895] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3149.604913][T21895] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:11:52 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x2e8377a300000000}, 0x0) 18:11:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x1000000}, 0x0) 18:11:52 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3149.751089][T21906] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3149.760621][T21906] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3149.782676][T21861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3149.856023][T21909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3149.892835][T21864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3149.931090][T21912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3149.969758][T21914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:52 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2fc) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:11:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x300000000000000) [ 3150.013730][T21912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:11:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x400000000000000) [ 3150.220520][T21920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3150.302625][T21921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3150.321017][T21923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3150.402554][T32519] device hsr_slave_0 left promiscuous mode [ 3150.434450][T32519] device hsr_slave_1 left promiscuous mode [ 3150.477390][T32519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3150.528677][T32519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3150.577962][T32519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3150.614101][T32519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3150.654533][T32519] device bridge_slave_1 left promiscuous mode [ 3150.681084][T32519] bridge0: port 2(bridge_slave_1) entered disabled state [ 3150.709832][T21920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3150.729719][T32519] device bridge_slave_0 left promiscuous mode [ 3150.748586][T21921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3150.763132][T21920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3150.789208][T32519] bridge0: port 1(bridge_slave_0) entered disabled state [ 3150.849700][T32519] device veth1_macvtap left promiscuous mode [ 3150.886244][T32519] device veth0_macvtap left promiscuous mode [ 3150.923450][T32519] device veth1_vlan left promiscuous mode [ 3150.948534][T32519] device veth0_vlan left promiscuous mode [ 3151.695033][T32519] team0 (unregistering): Port device team_slave_1 removed [ 3151.749609][T32519] team0 (unregistering): Port device team_slave_0 removed [ 3151.781124][T32519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3151.816509][T32519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3152.091233][T32519] bond0 (unregistering): Released all slaves [ 3152.207128][T21932] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3152.221685][T21932] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3167.712834][T21963] chnl_net:caif_netlink_parms(): no params data found [ 3167.809566][T21963] bridge0: port 1(bridge_slave_0) entered blocking state [ 3167.827227][T21963] bridge0: port 1(bridge_slave_0) entered disabled state [ 3167.839385][T21963] device bridge_slave_0 entered promiscuous mode [ 3167.850302][T21963] bridge0: port 2(bridge_slave_1) entered blocking state [ 3167.858280][T21963] bridge0: port 2(bridge_slave_1) entered disabled state [ 3167.867691][T21963] device bridge_slave_1 entered promiscuous mode [ 3167.914142][T21963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3167.934571][T21963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3167.993187][T21963] team0: Port device team_slave_0 added [ 3168.003665][T21963] team0: Port device team_slave_1 added [ 3168.040817][T21963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3168.055809][T21963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3168.084131][T21963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3168.098868][T21963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3168.106853][T21963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3168.134370][T21963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3168.178073][T21963] device hsr_slave_0 entered promiscuous mode [ 3168.191612][T21963] device hsr_slave_1 entered promiscuous mode [ 3168.198296][T21963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3168.214659][T21963] Cannot create hsr debugfs directory [ 3168.324393][T21963] bridge0: port 2(bridge_slave_1) entered blocking state [ 3168.331769][T21963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3168.339367][T21963] bridge0: port 1(bridge_slave_0) entered blocking state [ 3168.346539][T21963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3168.409771][T21963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3168.430540][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3168.440593][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3168.459645][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3168.470301][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3168.490319][T21963] 8021q: adding VLAN 0 to HW filter on device team0 [ 3168.509329][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3168.525207][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 3168.532360][T13979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3168.569034][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3168.577884][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 3168.584998][T21825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3168.620677][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3168.629939][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3168.646337][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3168.658330][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3168.674073][T21963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3168.689113][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3168.719200][T21963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3168.735950][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3168.746814][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3168.819938][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3168.838362][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3168.869279][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3168.902953][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3168.919787][T21963] device veth0_vlan entered promiscuous mode [ 3168.927231][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3168.942093][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3168.964566][T21963] device veth1_vlan entered promiscuous mode [ 3168.992107][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3169.000552][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3169.011281][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3169.023805][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3169.036210][T21963] device veth0_macvtap entered promiscuous mode [ 3169.054492][T21963] device veth1_macvtap entered promiscuous mode [ 3169.079427][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3169.090343][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.103579][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3169.114713][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.125497][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3169.137024][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.147581][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3169.158961][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.170392][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3169.183020][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.193689][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3169.204585][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.215011][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3169.226223][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.236658][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3169.247705][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.258249][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3169.269968][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.288937][T21963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3169.298672][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3169.314708][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3169.326964][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3169.339234][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3169.356486][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3169.376438][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.389844][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3169.406693][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.417686][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3169.438635][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.449396][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3169.466484][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.479554][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3169.492719][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.503674][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3169.514705][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.525387][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3169.537008][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.547788][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3169.559365][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.570420][T21963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3169.581147][T28715] Bluetooth: hci5: command 0x0409 tx timeout [ 3169.590555][T21963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3169.603419][T21963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3169.614240][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3169.624007][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3169.728518][T32533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3169.749401][T32533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3169.768100][T28715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3169.824347][T32533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3169.833501][T32533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3169.845554][T28715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3169.945531][T22305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3169.984859][T22304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:12 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@newchain={0x44, 0x64, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xfff1, 0x5}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x44}}, 0x20000010) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cts={{}, {0x7}, @device_b}, 0xa) [ 3170.303011][T22305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.315546][T22304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x2000000}, 0x0) 18:12:12 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffff"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:12:12 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="73797a310e9cc899596554f870b061c504f429700c12a0695ce0694d4fec2b388bcbfbe1c71e3f133933e290e171802c89d24e74c2738d0a5ce1e581ec5709ca5a4a109f6e7db239a48c27eef8c76e0722a012c462"], 0x55) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000400)=0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r0, 0x0, r1, 0x0, 0x10003, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x7) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000200)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x1}, {0x40}, @device_a, @broadcast, @broadcast, {0x6, 0x3}, @broadcast}, {0x8}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_b, @from_mac=@broadcast, {0x8, 0x9}}, {0xf, 0x0, 0x0, 0x1, 0xff}}}, @ver_80211n={0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x1f1) 18:12:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x500000000000000) 18:12:12 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x315f090000000000}, 0x0) [ 3170.403914][T22314] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3170.421032][T22314] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3170.494353][T22320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.539918][T22323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.552782][T22322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.573041][T22324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x600000000000000) [ 3170.585158][T22320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.617487][T22325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.635658][T22326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.653145][T22327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.681086][T22324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.760543][T22325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x3000000}, 0x0) 18:12:13 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x325f090000000000}, 0x0) [ 3170.805855][T22314] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3170.823565][T22314] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x700000000000000) [ 3170.938137][T22340] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3170.957447][T22340] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:13 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffff"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:12:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x800000000000000) [ 3171.184709][T22349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.232094][T22351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.270503][T22349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.476897][T22358] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3171.526007][T22358] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3171.614372][T22326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.626469][T22324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.651012][ T8373] Bluetooth: hci5: command 0x041b tx timeout [ 3171.666259][T22322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.709272][T22325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.723449][T22322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:14 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff01) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT], 0x34) 18:12:14 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0xc, 0xec}}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000580)=@mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @random="61cf66baa04f", {0x1, 0x1f}}, 0x7810, 0x100, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x9, 0x2, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x8, 0xa3, 0x1}}, [{0xdd, 0x96, "66d4765cf2c2895a2dc9ecee6faa1b8b4c0b3962198d6325939957290540074a7e5607209acd50f2dfc06b1851a512740fad290fa319a8cea351d554271017d73ab40da72c062628d95fa75498abbbdcdee4c6d086c4d30a7c5b4e1814b47e23e133cabd4952d55f7f622cef63a2a1805c5008eafe2a8c168818d27695ca1a35c7a5bc1420151cd5cd2f043bcc6b8ff51fb54d8ea10d"}, {0xdd, 0xa2, "be5d684e6f5866c4d9246c8743c0960f55260360e065a80602b852d5d1f58d8f4732a20408bfa0f7b4f6269e648575e9157d937a89c0de71982e7a1100d1baa739a874585e4959eb0d5c6217f1885d1f2d93d3a8fa46cb5ec2be28dc87a199fa1d1fd50b04443bb9924725091c58a51dfd6cf9992fbefc245300aee7bebe6a224c09ff28a28d8e5f68f02753c445d7e706276185e7258937db5fd17be5def0605d72"}, {0xdd, 0x4b, "cd016cd71b3032432c6d314cfb496430d9c299dd1d85754a25a72d2f232703e8c6e72d4d0af0e88e31eefb33e68c0902847878e6dd5a7f481426bda5447053601294061a24d3e64e9c752f"}, {0xdd, 0xb, "a9bd9420c01781d1633692"}, {0xdd, 0xfe, "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"}, {0xdd, 0x79, "fc4ec094cfd4cdbfaed7895f6beb9d0d08bc84e268762de9af41dd4c55a2e38b90953e9f26a68a0086217a16ad7acfe1f623aac68c49fdd4fd2fab1e1ea7a4f3162d86319fe0f2762c67802d9eb5ac02fdb092ca61dbc36109a27c2fbffea20f998df9c014cb5b8ad185befc42829a2e2c46c3a9eda1e6112c"}]}, 0x351) 18:12:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x900000000000000) 18:12:14 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x335f090000000000}, 0x0) 18:12:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x4000000}, 0x0) 18:12:14 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffff"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3171.849982][T22369] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3171.859709][T22369] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3171.976442][T22374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.990902][T22375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3172.023192][T22378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3172.039823][T22379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3172.055898][T22380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xe00000000000000) [ 3172.072535][T22381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3172.090320][T22382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3172.101417][T22383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3172.180628][T22380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf00000000000000) 18:12:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x3f00000000000000) [ 3172.472409][T22375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3172.504178][T22379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:15 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff0902"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3172.520587][T22375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:15 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x345f090000000000}, 0x0) [ 3172.623557][T22369] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3172.633343][T22369] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x6000000000000000) [ 3172.705741][T22405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3172.716434][T22405] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3172.725085][T22406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3172.784564][T22408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3172.817799][T22409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.154881][T22380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.205537][T22383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.243086][T22405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3173.253146][T22405] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3173.270301][T22419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000200)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x80}, @device_a, @device_a, @initial, {0xf, 0x20}}, @ver_80211n={0x0, 0xff, 0x1, 0x1, 0x0, 0x1}}, 0x8000, 0x0, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x4, 0x1}]}, @val={0x2d, 0x1a, {0x10, 0x0, 0x2, 0x0, {0x100000000, 0x3, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x5b7, 0x4}}, [{0xdd, 0xc7, "1212d24b36c48cc9d78297e3754bceefb33877834476b6f771773aa57bc51d25d0fd5c28dd7a6feb9ce7e300bb95d956782345e08976f174090f1df8dc8eb9871ce00a539f7dec0ab400f34bad4af17949a1eedcd6618888f6b3be4dcdb3f1eeac3b798935ab429522bb00356bb3b09226c91900851b59e5f8338d891cf2207bab53862918eee25bad1791db416311254e2394c6587e162b8f66f77bd597d509e0eabd1e81ca5983e158f959f2475049a520161dfb5207757eb116e70a9916dd0569b99f25e4e7"}, {0xdd, 0x34, "48800d108c24ac8d1f65838479673424f9ad52fd0c6e860ec1cb3d82e0f7bd33278526d9d7b78c7d1e61952073729a01dbd0781e"}, {0xdd, 0x71, "70f54a668bf8d55a22a3dde50144f3b5647b207db69bbad4f320954120863fa43d78362a590b79abded0d54996105b3dadf5754df8bddfa3fd787c6c9df62c5a08b4b2cbc0ef9f598612b9b4c26591d935d41434e2b7291b391b428a6fe51023264c453860c566cfdbdd7d5bdc383cecaf"}, {0xdd, 0xb0, "b3faf6552ac5eae01b556b32ab1d596125cd72021db64391bd3af0c66c5c4659e8e19d9e4504738e65aa257390577dd11d4d1b3754047361c068d3a9fc37b560092fce929c072cca3b0190dae927b030dc98a4ba7a21db51064b430c99caed683da15d3fa66713432dfc359756c2d33d9de00f38593f2d0c5b475e8c3a149d2a94e4ac1679243293d199c1ed2eaf53fa4970d733d5c3a760510d966370588cb874319e47d42cd545d3312efa5c69fac3"}, {0xdd, 0xbf, "fff1e3ed3d1118dc4171e4f66bb1ec090e212771631e6c557e2a6a6249f21f005da796cde3718ec2cfebda2ebaafe25dcb340c5a865b4478a4ac800ad8c0ab8facb21c918e585f98499ba991bcef5837dd0a8159437801093a49d71888609f97dd392b817fba72cd8e788ca6d0539ad7821f1593d24a4456d0d1c0fcc446f3959d9290b2be80def4c6616d2ddf5aa543cef6a1d12752af150e22866c60a39e518a92d172df7ace275af3e9adcb8ac291d747033dce7181f79793c2e2dc4b98"}, {0xdd, 0x99, "81a87755534a592b1d1b5154c970762fd415c4e26527484a5996678418c60510d21779e31b3fe2034baba602bfee8849bdcd40772e12ff1d107d709fd612628f553ae6d2f7ddbb19c1ec7f3cbaf05df99f36eb49809eeb023d21784ba9aa3d35a74d4b3ad5f9d29c8b0082bd64b90139780fec00db4532c53540bab2853d806e11f15bca4ffadc1fccfec0737a8082cd485eb1159803d5c1d1"}]}, 0x3c7) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000640)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @from_mac=@device_b, {0x6, 0x4}}, {0x4, 0x1, 0x0, 0x0, 0x6}}, {@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x1}, {0x7f}, @device_b, @initial, @random="9d27ab9233a8", {0x5, 0x2}}, {0x6, 0x0, 0x3, 0x1, 0x4}}}, @random="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"}, 0x485) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@ctrl_frame=@bar={{}, {}, @broadcast, @broadcast, @compressed={{0x0, 0x0, 0x1, 0x0, 0x4}, {0x5, 0x1f}}}, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@cf_end={{}, {0x1fc0}, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) 18:12:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x5000000}, 0x0) 18:12:15 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000200)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6dc}, @broadcast, @device_b, @initial, {0x3, 0xc3}}, @ver_80211n={0x0, 0x62ab, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x8020, 0x8, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x13, "f29a84dd2e52825e06c09b5159ce7b73e36742"}, {0xdd, 0xf0, "5d0a19fc4f8bc14e962c27832eacf15234f9fd308d9b0ec511f0836c10b5801ed23e72cc4889887095931ab6180d84e580ce35a0d453be3f3457353ecca66dd0ba4bcb204dfc7ce29cd4c2a7f1b761c4d963fa0c225725becb033a23327b04406b4c7bc3c4317983cf15d36b805808292f87b4d69f34151b377276bb9ed7a0eb3034bd367733cb299b4c79102d068aa7ead23c4249e273ef1fa2a93fc2f40dd12511f8e8ff114dd126a5bbf11a05175074837dcdff0147cebe82c5a7230d69348cd8dcbdf059caff8971c2a39b401f35291192e63af9688214912a691eafe23f962090cf74d89286d0d131205ee6823c"}, {0xdd, 0xc2, "10f829a494770dc342ba37c05b6a4630650838606a637d9a924f0fd4a1c0c55f303510140cecaa41671b3fe50199339e50a2a7b9a1973064965f7765a49c1ef236559be6743da6e01c849915fc0d50092a87fd1254559a2c5780fbd135bd49690ae6532d78305d69927bbe76109c62c265f7c0652e7a50e5a29a5f64b4814998d165a8bd0a190db5fa110b588f4aa99e62516f150c3fe13802059bab9d1bdb52dcdd1c27e157217e18f0207db60e6affdaf8f6e470a0b16c0b1b86551773a240b7e6"}, {0xdd, 0x17, "5f2065cfbd758fe8d6337fc0509a2f7315812cb3490a1e"}, {0xdd, 0x2d, "7d9307b5871aa05f686821f0c69aa0e5b3ae29e51636e92fde4b0f5aa042e73fdbfad1275eddf1d0b518ee6b5c"}, {0xdd, 0xa2, "bd748c608a2573800311549811801025a2fde36faa7a7f3eba7bd47e02bb0278d3d046dacb38864abb7bfab3fd06cf9f9d65ef1dc101d7f7dd37124206688c5f428e020550c9472f4165fab3eb975b1311a47ce0cb8ec739026f4fdd5c2e40d645b896a8a1c4a457e1973e6d11ab099a9350010685761ffebdf5581a7e36f2f315e15aed18529d34c3ce0795f0d95d804a72b510af4a63752005a9726c65e9e6fca0"}]}, 0x2df) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:12:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x9effffff00000000) 18:12:15 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff0902"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:12:15 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x355f090000000000}, 0x0) [ 3173.389700][T22426] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3173.399549][T22426] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3173.463494][T22433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.476333][T22434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.508669][T22437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.519717][T22438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.562329][T22439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.572862][T22426] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3173.572894][T22426] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:16 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x365f090000000000}, 0x0) [ 3173.611923][T22442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.622577][T22443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.633782][T22444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.647405][T22450] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:12:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xe413000000000000) [ 3173.656139][T22448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.657725][T22450] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3173.687671][T22451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x6000000}, 0x0) [ 3173.731073][T28715] Bluetooth: hci5: command 0x040f tx timeout [ 3173.736958][T22453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xf0ffffff00000000) [ 3174.074833][T22434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xffffff7f00000000) 18:12:16 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff0902"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3174.124625][T22438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3174.135807][T22443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3174.285286][T22473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3174.320421][T22475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3174.379820][T22476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3174.524369][T22481] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3174.575601][T22481] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3175.056951][T32511] device hsr_slave_0 left promiscuous mode [ 3175.065395][T32511] device hsr_slave_1 left promiscuous mode [ 3175.072086][T32511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3175.079675][T32511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3175.089170][T32511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3175.097096][T32511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3175.123005][T32511] device bridge_slave_1 left promiscuous mode [ 3175.129324][T32511] bridge0: port 2(bridge_slave_1) entered disabled state [ 3175.138593][T32511] device bridge_slave_0 left promiscuous mode [ 3175.145523][T32511] bridge0: port 1(bridge_slave_0) entered disabled state [ 3175.166522][T32511] device veth1_macvtap left promiscuous mode [ 3175.179601][T32511] device veth0_macvtap left promiscuous mode [ 3175.186064][T32511] device veth1_vlan left promiscuous mode [ 3175.192175][T32511] device veth0_vlan left promiscuous mode [ 3175.766599][T32511] team0 (unregistering): Port device team_slave_1 removed [ 3175.834366][T32511] team0 (unregistering): Port device team_slave_0 removed [ 3175.894092][T32511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3175.959900][T32511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3176.113479][T32511] bond0 (unregistering): Released all slaves [ 3178.543741][T22500] chnl_net:caif_netlink_parms(): no params data found [ 3178.628702][T22500] bridge0: port 1(bridge_slave_0) entered blocking state [ 3178.638643][T22500] bridge0: port 1(bridge_slave_0) entered disabled state [ 3178.649068][T22500] device bridge_slave_0 entered promiscuous mode [ 3178.658111][T22500] bridge0: port 2(bridge_slave_1) entered blocking state [ 3178.666414][T22500] bridge0: port 2(bridge_slave_1) entered disabled state [ 3178.675143][T22500] device bridge_slave_1 entered promiscuous mode [ 3178.719656][T22500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3178.736882][T22500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3178.776536][T22500] team0: Port device team_slave_0 added [ 3178.786118][T22500] team0: Port device team_slave_1 added [ 3178.817236][T22500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3178.829157][T22500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3178.859149][T22500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3178.873759][T22500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3178.880807][T22500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3178.909446][T22500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3178.948154][T22500] device hsr_slave_0 entered promiscuous mode [ 3178.955724][T22500] device hsr_slave_1 entered promiscuous mode [ 3178.963398][T22500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3178.972354][T22500] Cannot create hsr debugfs directory [ 3179.066173][T22500] bridge0: port 2(bridge_slave_1) entered blocking state [ 3179.073274][T22500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3179.080531][T22500] bridge0: port 1(bridge_slave_0) entered blocking state [ 3179.087685][T22500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3179.148644][T22500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3179.165085][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3179.175149][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 3179.184344][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 3179.194834][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3179.211967][T22500] 8021q: adding VLAN 0 to HW filter on device team0 [ 3179.224354][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3179.233601][T21825] bridge0: port 1(bridge_slave_0) entered blocking state [ 3179.240634][T21825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3179.262069][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3179.270521][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 3179.277691][T21825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3179.307880][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3179.324796][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3179.341973][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3179.350335][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3179.367986][T22500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3179.379250][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3179.407727][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3179.419320][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3179.439774][T22500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3179.526800][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3179.536811][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3179.563651][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3179.573974][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3179.585690][T22500] device veth0_vlan entered promiscuous mode [ 3179.594018][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3179.603296][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3179.620485][T22500] device veth1_vlan entered promiscuous mode [ 3179.647311][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3179.657580][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3179.666806][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3179.676045][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3179.687700][T22500] device veth0_macvtap entered promiscuous mode [ 3179.700779][T22500] device veth1_macvtap entered promiscuous mode [ 3179.723068][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3179.734070][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.745719][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3179.756796][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.767882][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3179.779253][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.790139][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3179.801618][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.812396][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3179.824006][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.834540][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3179.845955][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.856581][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3179.867724][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.878230][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3179.889272][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.901675][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3179.913042][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.926458][T22500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3179.937107][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3179.947072][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3179.955785][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3179.965278][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3179.977123][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3179.988982][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3179.999935][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3180.012409][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3180.024758][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3180.036012][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3180.054106][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3180.069905][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3180.087441][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3180.098815][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3180.115787][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3180.129868][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3180.151582][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3180.171293][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3180.182762][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3180.194729][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3180.205027][T22500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3180.217393][T22500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3180.230285][T22500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3180.240447][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3180.250386][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3180.360080][ T9077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3180.368977][ T9077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3180.388161][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3180.451162][ T7739] Bluetooth: hci5: command 0x0409 tx timeout [ 3180.458182][T32511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3180.467175][T32511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3180.479445][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3180.547112][T22853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3180.575899][T22853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3180.606198][T22853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3180.657557][T22852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3180.982153][T22853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3180.992913][T22856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.004437][T22853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:23 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @default, @random="54bb14c03ec0", @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) 18:12:23 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x7}, @device_b, @from_mac=@broadcast}, 0x10) 18:12:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0xfffffffffffff000) 18:12:23 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x375f090000000000}, 0x0) 18:12:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x7000000}, 0x0) 18:12:23 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e39"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3181.023375][T22852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.034327][T22856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.112181][T22861] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3181.132304][T22861] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3181.159560][T22867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.174017][T22866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.197906][T22872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.208748][T22871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.249121][T22873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c0000000000000000550000000800010000200080080003004320a1e427bcb9c61c7983406eb680f77e901a17880f024008e5383fea8b8880b100c7879243c88192622e3eed5922ff592226ae3537854fdd900ce3f48c1d6b08bdc7012b3d8fb626404e2fa500000000523efd", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40085) socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fbdbdf250200000006000b00100000001400050020010000000000000000000000000000080002000500000008000c0000000000050001000000f91c0a007b00776c616e310000001200010025242f5b2b4e3a25112429232f000000"], 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x20011) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff01) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000005c0)={0x0, 0xffff62f5}, 0x8) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000077200000125bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="08000100010000000800010001000000080001000000000008000100000000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x10048080) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r3, 0x0, r5, 0x0, 0x10003, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 3181.266978][T22874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.278246][T22875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.303691][T22876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.348163][T22875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.385483][T22875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.403182][T22880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3181.439321][T22882] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:12:24 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x385f090000000000}, 0x0) [ 3181.493439][T22882] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x8000000}, 0x0) [ 3181.547947][T22887] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3181.571743][T22887] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3181.650198][T22867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.682889][T22872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:24 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e39"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3181.696309][T22867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.768968][T22875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.805969][T22876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:24 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000006ffff0400ff55bbf4ffffe8ff0ecaae5ce0e8ff0800"], 0x1e) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/17], 0xa) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4c}, @device_a, @device_a, @initial, {0x1, 0x1}}, @void, @val={0x1, 0x1, [{0x12, 0x1}]}, @val={0x3, 0x1, 0x6c}, @void, @void, [{0xdd, 0xc0, "f5481f8d42663688112b1df64711eeb53644e63261b6ec61a61b6db721f3750d76e7459d8a2795349f6894980e7c2c0758a5e77c7f45acee9204a2c46757a44744cad5ec71313d5328d1d67fea48dec8109354aa0246828e5312804388f3e0e5450fa7fcc334ca1edad3025a40399c5e9562892106a77a3405f7579efc9b42cc0e48da1cc694ae3b1f7b818a5c898757ca6dc5dda0cf82df8195c76f4d5494e33ad82961b8b0d42a3e4a7c0cda52b9bc7f1483baa75f74274a7a97732d71ce0a"}]}, 0xe0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@ctrl_frame=@pspoll={{}, @default, @from_mac=@broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000340), &(0x7f0000000380)=@ctrl_frame=@pspoll={{}, @default, @from_mac, @broadcast}, 0x10) [ 3181.822215][T22875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.840037][T22894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.855807][T22895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.898701][T22896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.939931][T22895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:24 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x7ee) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3181.984160][T22898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:24 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x395f090000000000}, 0x0) [ 3182.057109][T22902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.069159][T22887] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3182.077841][T22898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.087870][T22887] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3182.134772][T22906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.156295][T22907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.182817][T22909] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3182.186426][T22910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.194361][T22909] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3182.213047][T22911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.224143][T22885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 18:12:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x9000000}, 0x0) [ 3182.235818][T22898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.257869][T22913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:24 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e39"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3182.313728][T22906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="4b0de5b41c58ce7938238f509dd23499fd270b20de5aa0de7cd73cddf75241a73eaae36ea016790d823c44d333d328df0d95089f81227a6f49ec2dcda807da6f7bab5fc5b4d73c5c6c31aec34236d08c8a0555a6da7b980647313d489111bdd2149ee73753f3d9fd4587fb80630546fba61175e5ee5e5b983ca5a2bff30f29685d193a87be5c4fac4185f82c19df954a909bed921b8cc5cc4cbf3696701af6097d8f1e3bfdb884ec4858c3fe4700"/187], 0x30}}, 0x0) [ 3182.451987][T22919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.475344][T22921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3182.493176][T22919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.516544][T22922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3182.531121][ T7739] Bluetooth: hci5: command 0x041b tx timeout [ 3182.533155][T22919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300008007dffc5bab5a003883777c7f09661f315c7c89fa63c79ab570e6b5732b213cdce1072a1a978b488ec2ffcfcfe5097ee3041c2d8aed575910528e363bc626d5c5988c1c8ab9372de656562c7f4ce791f076d76f3a2209412621eb1a2310bedfe4ad1d321ebd2b7a87b19adae091bbbd71f10e721b952f479c6a65da574a47a425bb7cc9a72fb9fe96b868c6869dbd058a38a092eae674abace96b4c3bff531736553ce554ba6140ff44f3cdaa533e9a98f5c33bcef45590cc006a0852c3eb85dc02147cff0d714e6bbae3979a7bbf68e8d0a9d04780fbf5f2af1b277ee36b21aa82ee5f202e6ee3197569adfbacfff8540ace1c35a9b68f0d00c8226f1c7cc25ab3d4b52ce9e13ffddba85c11fe3488148bc8a84", @ANYRES16=r3, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r4, 0x0, r5, 0x0, 0x10003, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r3, 0x204, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xff, 0x3b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x40005) [ 3182.651303][T22898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.677832][T22902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.690682][T22906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.706460][T22898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.727876][T22907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.738597][T22911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.749215][T22910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.760573][T22913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.786608][T22927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:25 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f00000004c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x6}, @device_b, @random="4c0958f6568c", @broadcast, {0x7, 0x6}}, {0x5, 0x1, 0x1, 0x0, 0x4}}, {@type01={{0x0, 0x2, 0x9}, {0xff}, @device_a, @initial, @from_mac, {0x6, 0x3}}, {0xd, 0x1, 0x2, 0x1, 0x5}}}, @ver_80211n={0x0, 0xfb, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="d30b96e1b4f73680060aa9937a8b54e803fd6a628e0a387e41fd799d87086fd4333f23395d44ff8d0e21ebd0130783252b1d84b4f0c2dabd95489777e0831a1483f16ad5733fd389fc528549161dfc591e0172818dd727dbcf35e20e7e3662954f984729d8e11ab8b8cebe249bced36e09bfd10a4f97b650611a23d6c02d5a7dc91ae1f68354e74f3856b37d3b53f8fac8e7bb8cae19a933675270e41b1814e66f6ca019debcd1beca2f412a2514045ac7d8276baa0700217f0e65f656c468167afb63befdaf623860354d20e1d6dfe79c9938ab6a3a31bc93110f00"/233}, 0x121) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@private0, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x71}, [@algo_crypt={0x48, 0x2, {{'chacha20-arm\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_b, @initial, {0x3, 0xcd3}}, 0x2b, @val={0x8c, 0x18, {0x596, "f0979060e9c8", @long="43df5fe8fe4fdbca25d0c55586845129"}}}, 0x34) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800c80104e9ffffffff6a510d23e054dc3aec01a07d4e3885f0acd68e19166fbd719400d94a5532e0f80722ede8ddae536d5f193c488b33e2f9d29c18703dfad92198b35e29ae8fc6a1d577faaf6c17f79662e983565a135fba884379c444e05eebac3c5b06f6cb5935d301345382cffe3e4d1f07fbaa2fa292319fce029d243099e7263836305e5afb089ccfd372e840cb9dc7ee292d28b63af716614ebd0c432b7bd5358428e5f1d82c9dd42643043f89afce95033b305275dcc36688674a9152ca8afeefdb6b3ecd2c7725c6f883a618547d09fce24a6708c1487a9964ea1610e7982f7d130f3f3398238b8b58e49785fbf8cc05aea4"], 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=@newspdinfo={0x44, 0x24, 0x300, 0x70bd29, 0x25dfdbff, 0x3f, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) 18:12:25 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @random="8b3cb0f6af0c", {0x4, 0x3f}}, @ver_80211n={0x0, 0xff, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x300, 0x30, @default, @val={0x1, 0x5, [{0x36, 0x1}, {0x36, 0x1}, {0x60}, {0x16}, {0x4, 0x1}]}, @void, [{0xdd, 0x1c, "006bca350cca1dd08e18fc8d8eeeca142ee48b8651b15eb2b292d73c"}]}, 0x47) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000200)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @device_a, @from_mac, {0xe, 0x6}}, @ver_80211n={0x0, 0x40, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x100, @default, 0x8ae4, @void, @void, @void, @val={0x4, 0x6, {0xff, 0xa7, 0x4, 0x100}}, @void, @val={0x5, 0x56, {0x8, 0x25, 0xbb, "85241de557f33cedbf18599a949c4bcf927ccee6d352e9b521d3a7d70589f23305a20e664203c81e0f94339b46d1cd0cabf6891ef6df636a37d8adb6ae8700503f245763d383543f3a3ac957d6c6cb1aa7e451"}}, @val={0x25, 0x3, {0x1, 0xb0, 0x9d}}, @void, @val={0x3c, 0x4, {0x1, 0x4c, 0x95, 0x6}}, @void, @void, @void, @val={0x76, 0x6, {0x4, 0xff, 0x3a, 0x3f}}, [{0xdd, 0xb2, "bb5d86e5686869fc29d5fd3e86497fd69fe367cebb382f5aaa478a7c2b4aef99766fe6183245aa5c2e43c442706fca644da4a024d4d7a4f5fcd6a0a8449ecbca40c1b1c59340dd1a1e827a0fee438ffc99f549f1898bf02fb8aab5a8918447175e85c184f7af5fa3dfa1f9c02caf3565ae2ac4698fb4438a0c9714702101f0f469f088dfe103bde931fb2def1bb42ad6bbc4eefc381ae98622027b864a2b9515bdc2aa1532edc196667f7775d21ee64a2d8f"}, {0xdd, 0x3c, "c85e05199111af37a374de4624fb22d58c65ec60458c162151c5c3db4553fa70651bde044b37a86d7731c284d29f18bcd5b0830da934d3b7df889a6b"}, {0xdd, 0xf9, "6ca62f9f466dab3612a051678b13489136dd63f289fc1435c801e7f799540158f2cdb29b005eab66521ae8138281b4e91958f3b21ba66da3270142ca90942c0f7cd20328dea9b1523ed99c4a5eb169a35092c74d06750995542c8d94a85e51ae78385f72a2630a8af6abba61fd44bf77dcaf441fab5cbf4599a04d2720ca3be74b570ba3e0325a1a889a99244849cbea8dac1ad7cf64c2966ed970cb127d393ee65ee0043bf62d4a930b3a3f3b8c99b64365f17fc099e77ebe63fb1b39daa802086fda81aec01a0c111ded79c7fc76fade8f7e80d9c168163829d77a80548a3d259eab758193e1d2e8ef5e71ba646349dad4cf52b6b101e52f"}, {0xdd, 0x72, "e7db36729c1114ebbed6000a9982f9307ebcfa99dfbe3d4b682d280b0156ca0ee3ad3a8eb7662f16d762d0df815947606ef6846e678e79a24d0025d616dbe35c7288b2f47ce75a40cd60bcdc85b1c7c0847108b446c9751949b2053530136632ccca1628a9d89471a28b2a8405ab0848f12f"}, {0xdd, 0x66, "e1348947a0a290d37682594565137aaf0c0aee6735d8ea8f883ac49606e36d2df5b43ae6a475ca8952ffe6c9e86ea0c231a216ae700d063539a4b08dc443cd7ec379fe86b5061b8d2208d434857e22413395aa2976427903067b5aa0fa5f9fb26812ba22a880"}, {0xdd, 0x81, "829ca38b6505ae221a8b17ee318918291e406a09336b41e287dc70ae83fd8612c51a35a8609b63c45af25431384c11c482853392f169605da77a6a364cd3287fcd26c0a548a1613ec456dd79dd5fae76341032decf101b1c52905c6378f231471d22a5c1f1f5d4826c7eed84a8924e479d672f11a16eca2d6b67ea013373bb0d4c"}, {0xdd, 0x89, "0b745a7569bc86f5e817d6827af245145b4d060ccb1d6eb7c0f386eca2a29df3873786c87d35e7f306f5abbc8904dbfa4e2cd3a3be2595d5d900ebd252ca58c3166040301d93e497f7b3a3269d5d98338bbe328a7fa98cb7056132c2ce4c0fde72bb05de361b629140fdc747840518f3fc5ad286534006e8bbdb19512d9b24dce2aaf7bd0bf2ed7dc2"}]}, 0x472) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) 18:12:25 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3182.975812][T22934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.010834][T22936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.041372][T22937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.057532][T22934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:25 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3a5f090000000000}, 0x0) [ 3183.085079][T22942] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3183.097714][T22943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.109582][T22941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.126562][T22945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.139109][T22947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.157195][T22948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.180108][T22942] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3183.195891][T22937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.220832][T22937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xe000000}, 0x0) [ 3183.277481][T22949] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3183.293093][T22949] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:25 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3b5f090000000000}, 0x0) [ 3183.382025][T22958] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3183.406604][T22958] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:26 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3183.580706][T22937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.603343][T22935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.615454][T22947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdcb6}]]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) [ 3183.638853][T22937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.677737][T22966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.728185][T22967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:26 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x34) 18:12:26 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3c5f090000000000}, 0x0) [ 3183.772224][T22966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.793109][T22971] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3183.864923][T22971] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x48202, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x128, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_1\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "147c3aed7daf9f3701964cda78fec506cd73f7be6ebbb431"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1f0b2efaff5edb35f8a177b94c8a12d6ebb6fb072ce58755"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x128}, 0x1, 0x0, 0x0, 0x40004}, 0x0) [ 3183.922620][T22978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:26 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3d5f090000000000}, 0x0) [ 3183.972728][T22980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.009148][T22982] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3184.031118][T22982] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3184.084168][T22934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.112372][T22941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.127487][T22934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.148159][T22936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.174026][T22932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:26 executing program 0: syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:12:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xf000000}, 0x0) 18:12:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT, @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) 18:12:26 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3184.328299][T22978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.362420][T22995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.375814][T22980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.414374][T22998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.430647][T22999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.460622][T23000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:27 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000200)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @from_mac, @device_a, @device_b, {0x5, 0x40}}, @random="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"}, 0x7ed) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) syz_80211_inject_frame(&(0x7f0000002e40)=@broadcast, &(0x7f0000002e80)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @from_mac=@broadcast, @device_b, {0x5, 0xa22}}, {0xb, 0x0, 0x1, 0x0, 0x80}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x64}, @device_a, @device_b, @random="7039d9cfed43", {0x1, 0x1f}}, {0x1, 0x1, 0x1, 0x1, 0x6c}}}, @random="14295c586faaf54c6bc5c9936e984e9d2256cc56a6dbe6404e0a4b33d3c60ea0215fbc24ac3bc69cb795b1eb9a70a420b95cd80648af2c4778467bcb2693d590001c77c4ed00ec09f6a06bed8df058599cc781022744995710a7ec3a9264e975ea3f7546afda24b1a1e85d47"}, 0xa0) vmsplice(r1, &(0x7f0000002d80)=[{&(0x7f0000000080)="2558e4a9f64e1f70e6e00328b971a7d3aab6", 0x12}, {&(0x7f00000000c0)="b9699745c410e2a84a0811ca3cdd1ddbfde9eaf0c076879299ec7f91da774681f1f9aa3df8f8bc9faeb2e5348237f401d85ed916238b7cda4632261e922dc5fa11f7d8f9129221ab2709f4b0ec047e3c794e05ebd20cce575aa693c89522f51dce26844177c2322a8d488ef2535db416aafc6afa9e61b9a1419e8da6202ef3845e01b4ca47ca13c74b5a2dcda60e2c4a032ce94a54ee9cb8a61dc8c84b9890ae82b9", 0xa2}, {&(0x7f0000000a00)="d8b9e9d534e2315f7f9fd19263100cfc27d73730348d777d91f1ecd0fe58840a164a2c468a12f4c7f7d4ec4f2f75dbdf4de0d44fdb671230ceafa86049b740d8e213f076934a40a1584e37a1b1d365bc9b37dfd90105d5614061c6e017662a127afe9cd63bfccaf54a9e41b79b12225920ed40d346b75aeccf8509f75c41362e16943e60b94b33011dfdf67c76c2dc89acfa6ecd2b673a72873ff32e4e500f22db9949e9dc7041c3a4359052c16d4a2a722c176eccf49e4261878d98fdd53159d1a235b6f98896a653afd7dcfeaf6c44713961f8c82220ced98a9c759ec1f8b6c97150", 0xe3}, {&(0x7f0000000b00)="a8e0b030105189473fc16b8a060d9ad2ccc2d894a81ab652ec07f82ef43a620108141a1146c522f4bb5c8d22f563c51e6f63fd", 0x33}, {&(0x7f0000000b40)="c1d3b64c5054cc2b72d47d43505581d67270a6dea3a3ce6db10ce25f12b831ed554259ad76fa914e895886fda2dde867ad5d24f8a4ca8204a31de67e71b8ca65e6bf4024e03540dffc1522dd21402ebb2aacbd61c1f284a2fca03705205cd160d5a015217de3035370148e2c0ce0697b1c8283bbdd2e4a36c5911cffcc14", 0x7e}, {&(0x7f0000001c80)="bc65324c81fc6be050c01e1c7e8d139e3530134b950af1bd8726ff7b47eefae907325b0d1a76208096317b5f3c857783ee96a7e0633b22368b620eecd4a1d1863ca7640011e813ddfda558c3db63fb4eb5e58333a4b883546ac5d5a5aa4108298259d2e316b210024bbfd041140df61fa225f8d550889acd2b962b0938e06d4a636b7d8eb8b03df1b871cc171358ebe9bc711706f1966bb818f4ac37d5b3838a3cb871f26bee289b7eaaf08c5dbc5ed7a097474a2fa1ae1751a3", 0xba}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001d80)="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", 0x144}, {&(0x7f0000002f40)="721c5b2fd91b312c16ed172236dd3d702217590b9882f89ebe98137cedca4d36ea4633ee92d7ce00fcd2703382bafd6c3fb6dbda08dcbf5f30054439b02286d2fb39c63462b826dbe89498693e9605fa1a1c949fad9ff61a488fe9d01d6b22828f2bf47e2c0172e13543f4a2efe1291898d422b767221364b87915a1d921e08ebae799167a3074f6c2651222e24182e196ba2c00f6740ec7b6e66979edc8e1ebf149b1e5ef04fda7f92ecdf328baff3e34f19212eee0c1c2b3a0b017ca77e0222d0f682b5ad459da5a05430aa44aca931c6e939c8896bfc2f6233e870d270456f66beb663b1c96a4d008120ba58e8c168796f5b1f1aea8585e64c55e8e78d0d03145f40c8cf07d7380019d3e5a6abac185b73ff76c5e0f2ab068f34349de26f9345934e7d5f2b33c7c8819f28ab3c73c30e26566c29a06d4f4ccf0916520dd8a37afa5a63b2f8fbcd663ab1cc4e3ea99fb159f654acc1d425b60dc098531c9e629a82a6cd491546bcd60bdad90c1270c397a6b6e9e4d80026c05f3475c73bff91f45146662ee5e5094e78f95e6432e0238789c98987c831993088e84e8f83a7ba4dd28d7faae3a2c19716c224e8f2c8d8ff19dc7fc30bd09c15c2a03af3da4bbfbb61efa6980b02d078743c7e5fb768d9789ba400ddc2011a7c66cfb122e21487c92736193eca26db6fe73a53a8276bdef30b51a7677e990990ce0d77410db154e984591faa3c2eadb8579d7eba3d619ceb2d9f8ded834900453d99e157c790f1709e7510c4673abff40d889c9087005b8da1e33ec4e5fdea44dfdf04975470596a436106d5c84871dd433e40d6af2e35ea3e07dc6a3b62829f831c7ee97285cb5564579817bf93330738313e7c3a2ecfe82b4c2efcc2f1303e0dcab77def811526d68fe456c4d7dd5dc3976015ae0feaffb1f1d42224e8e55d9213fb76d15293bfeadff51bf586cae2b72cd1bedf25597397dd577f0c983bc03418a8e7111bbb8836fc9c96e11f24cb5fe1ae5d8553c901d6d851d7ce568a61c281ce8c689307430a0347081d2e377b9e94e3d9410b802a89269d5a1b458541f78616e1c6e6807a016a41e741ee3bf67000992734e0f06e0aa3371bc66768a8b9d434fcbc6042937de34cd37b28f95485e7de8e010957eaba570e7cb0969cf3ec7e5b0ce5e6670a440594f83f22fe7b758a27ed58ccf9c8c5528be16b4e3ece332c25cde3a232953af6c6d43163729c7368c31a858ad13f44eb2d791a6aa9c24b7ccf10dbdd745336989b4a209ab9b1cd3665e3e1a28f4b8d32a984c404249c66e9e97dfe417ae54a15b4dd2df24f201f5e622a107103fdb64f8cc6e02b3cc8a34f8fee5d41bfdc1a55266cc5b96e379b0d24cb57d4b3523f20d1749717df740fd5b8da5d17581a484d0747bcc795036b20f5f17c8c2a911c939b0f39a65eb063ed146770fb5952a808c1710cececac042c6f09ba9fd59a46712d4dc7ddf40ea6baf46362f4ac524db14b421e96efdce52833fc5595d8ee377eb10ed495a55024370ac0a288c27f10d395d8a39bf6843e40267278c4d9626bfb7d039148c3bc78eccb35aebda67e11d50cc8100906966bb1d6533f709d6034b8e44a2d41b8b02654c08aab870b6fa465af94a3da6ea74ad80d4611376b1636655d71481adf9980d1cdca644b1cd2ac941871dd45e167daa7c0989c243bb8ed168fe04fa081d24c9e47d4bfebc668454e574c5a23327509e1cbba1d1d39db184941e96df5f77bf2528b144c6d0b89e21387a65c6475a31b6ffb56da48071a0c2c6f2c20a225372756a7d744104c157101af8095f48915ed35abf38cca7ee1300f87de0938ad10c4bd03802566181c96e3181e6cfca953e0450889c73bf6733aaf890998a908a26ea3b49c9f5cd8e2e17e76de3d0c0133e508004bdc22a35ba5ae3da11e38ddfe0a4521ed59093edadcadd2bee1cd3f33cd020400169f2bb12158e0c33f78b1b07aa0ae92c382040b43718c6f7316a63e9804e2c193f361c5c6b2e2602b40ce4b25a5d4f33c8841af2bcb6d9ca436864513b8bf26875e13d225288573c01c041483f075a44adec966bfa3fac153b23cf53b0fa8cd6f911b1b4362b771a703f57de1c8f2978781706073b393728427a7c4a268467cc6cbb888cc9b985bba70f0dc8cf4dde998552d512fc1098d1e7fd244858980c848580e0254fdc89fbbd2cd3c656d23f9454c969946667c4d877760481df9785b54e8c8474d6857af364c70b939992f65912f464ec031e745d13dbc63d364a52118b9fdf5867c8db0849bcc7521097f714725855b64672f3a9dfad4e21a795edc7d3e93855c09fbaa8cd5cbd5eeb1657704c2f169626c9b0f5a1f5596e8ae9cf428ac604b8a048061051876ca7592d5954a667282995c8b860c21d4fc9b4c185dc805faad9a98cf0ed577f2ff31eeee5de43ddc35b721f0958cc6a26fc66a53b524d83efe2f93fe28031c62535a0b9a54546b00cf70f3076b4c15ab4045ff1f13dee297a6d5d124eb8d63b138967022bac7d39e551cd50d75a19bd8cb844d8d7a1dd40e1a77bfa1493da0421ed2dd6e40a41ec05350bc3a22c2ee47c72e211731068f17bee2885fda438ef352aaa90db4c85072aa6ad51ea413abef8c2924fff9ada839527b2f6e17f80664d3ca7b4be93164cf6f07260d13b50da1b9aacd0d0c4bc616c55aec4538633b0ba99f1df98442955b2a78642858973629bc2af73b2ca2fb462c18fb7623b852c1c44a9d3b2c51019f51b9f0d2bd7d165c6bd275eea1c7fdb21830c70da9beda2fdf41bd396156f6e0c74b7d47b0dc04abb00145ef04fd0fef0d8ea7f5200e3e771d1074fd173738d3826fbc03713eb95afa684ccd2e47b630c772536332bc0a50d0e62af25b9c1091c372436dd91213b8c4e155a6ba08dbb5c38d9258cd81b5b05ccc09f1c848d73abdce7271050b6aa58d1e7b9acdd1cf2a13c6182de126b85c399010b89ec276ff8b62760ad401eb4395cae115c48070e94f460330c91514887c70f71e885edb09591374bc8c97da4afa6d4b3384414f67146cdfc5b8f6724a0716deb65248e25f5d3bc739ccafc383299307795e7d1adc9892d0135e9517ef53554a6cdc4bf94a066e0041475164c69528efce53e65f0715de47b15759498b7d7541f735d75d49168f50019b9493cc3a589089b6affa8c4cc14727d48697ea9a7166cce3c7ee79516a29a74f3f63d55fbbad7925c3a7745d86e02d0899b573c09d3dd21784ca48ca240de96f548106fc2d0e88ba5186be3c5c414233411502eab3dfa38ae7e5117cf57e27d584242586b71fbf269087d56a51bc9a84217dcdff88a8cfef38d28e9b06cd7369f6d208a228bf2487816a2dc56c97518837b323da15ed9bdda82ed5f6244378d264fde01cca0e713c5c6ce58118c4cdea3ce9e91dc7cb8bd7930192b7d0a6f288973e4968283e1fccd1609131e58ba17d4b93262dc2a0cc31aeefc5377db184270a8494088845440a84754bb525dc18394dc648810074d90fb8a5be0e3bdb6b66650b03363a724e42fbee12a402c49864d6a03d5b585224dc4bfb2504a0e99fcf1ab0540591ac936fef0e1a824ce05d6fa1f1282ffcf6d9ca2752f93e5e59adaa2ee61156368bdf9a0536e2799121a7a849846058a9566fdfb1424e09b9a3f21e37fcd50430a2e4a08ad6e2a014ea9e3613fb4135fbb436f65f740a4516653dd94d7c78263c55c717a5699a00fe79f02f7457b2eecd1b0ab0a8132d9008ca60739be088152fbca7a4b95de253987d00fa88255aac16bbd6ba13971aa3f399d9c954d267079962896da6bd1558cffe982930f367d988e0ccd233c0fc03b7e05fa3689f38e10ee8755ca2983f0b4aae7a993b82f1150fa6dd92e58dde6f29e268b01398b0a5dc33f91a5f2fca2ade019451d8bf021a04f0c487254b3b4e6b3c91383859d9d062c1a091e72893b7d4b44834d6fa13b95ffe88df69390488829e27aec46886510fbb4ab0292e68c7760fb106f3aa6386983db1a6e75e5d71d992cd4c3c05beb8e9330d1fca3d8f0f40d18888b62297567afd96ac9ef4285cc9cc39dda9e95b0cd364d9fa9dd3d18135337dc78ec13d05641e6d5be1fe33ce0ed7e954b08b43dfed45c56c37664f89e14afda198aecb3be4d3378f89dacad7d1c042852eadac11bbd5d27731e8f17c608e2dfb3722c1ffb06941c23025582c2643588efb49959098ad785e4c6186589b097897568c694edeaac61d7b788e534eb370ef971b9fbb1370d339ffcb0ef723e7dc9599fca67861581b9c2be1d79ac1d08a3b8022273a4824bd95e7c68d10da1cb9ecdb5e77ac713ef35f81ac60017958eb42b97b02ac0e94090d54b4ee3a54aac775650cf996c5e8cb0365e73ca4a2d1761601f6d09e08d670ad8509f250466207a3ec7961171b1e0f590aff423ff8e09093490a3828f30e6d75baa976753d172bdbded20947f3bd3f014d97023fead2ed9cad9017738143b87292c467c4efa67022d910d3fd365d2586be8560092dd369359e7db30bdec973b2567c7aefc2600666807fd397c5e2dc31eb4c2e07d19e676b67af490e458780f73bda3646a61672dce6ae3852ab936e20716a019f12fb8d0477ee91990b765f8f6b6ddc26c04fbe0904e1c7b676ea3ae6d11a7f0280fdb12167f1044fdafac5b259414aa79959f9cb2ef80ba02b1506f166d3ca34f129b0127c143f8694e68ba5e7b0a7aabfe3f216d5ba801242dc36fe9b3314181ccd5aeb0e25b2c5dacf031a2330020aa647335ed51400e58ecd6d95f8c0586d9ce7aa3ffdc649d3d8bbafe671aeb716f43115779d5cc388277bedc6bebf32090354c5f044553319033e6d583fb66e784fabd9d1470116afa142eaafc0e0464167bcf2bc3897d9cd20437cffc43d84b0daa65c1f6835c42df9757602b68ec944abfc4da04feb7cb6fcafdd6a05cccd534b5f65e62c94b4bd1cb2d362f56f98452e8f7b23583a8e25a8710fa586c0e3e2ea10ad15b3432a867c32f5e95a3635ade712d4eca6b0f3738c59517cdfc296ef90aef8f84439f0b4a92cbcf5e7a16d70faf1e8f504b488945da3634352fd3c553e69b1169ee5630e215af3f72e7603e65e30d389327575a393161626c9aa2a480ff952f4d7b49e142de66b2f0c0adac3eb2072c370fc5e590a3c63456c75d1327a46c4858e7572cb02dc1b2182d1a0207fdf83dee2a008c22c3089327b9cf996b3dada3b0d4dfc08f1de41d33f6c5b0159b5b1ebc817af2f8611e07fa9c3408ca36f50ef2599aee4db2f9c77ef067d8da17b49a519906eb73c56fb20bc2cf3f66bd7d81c82592360642ba12af1080cb83628ec1376340845f0c52566375d3487fbaea244442c27b472ddf7be2af6ca11c643463b83664f095ffff55c55d516081ded79655c8a48b966588b4cb90dda688df80a50979d38363c3a23e8d02df803877dcecfa33d173437cbc3e4ad648c4f50cb7e38f5308e6e7480ea6f54fa9cd4261c39e86afa2bec9dce0ce74138acab45b11abaf5dbf4691ee398b46056b2642dd4fb91bb7cac796e013dda2926aad25c2a693099cdfc07b18e81f2e22a7c501461e6598962b24bae532f14659fb516541eb5d850b003c6c7f4f86503317701488d0486ffc90d3dfce3b7d9400220ed644d9f5ea57f6d87a07b160e16a61d61ceb6e2e6f1ed2886331a2da9efee36075b31c81c71b57236aec173d0d16f805c54100a23249cd3a988db64f6567d9e9c34ee5adadc1df957f7efddbbebafb794c82252ae715794387ed5f2abeb1f2", 0x1000}], 0x9, 0xa) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) 18:12:27 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000c80), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x40, 0x30314742, 0x0, @stepwise}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_complete(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0xb2, 0x4, 0x6, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x10, 0x7, 0x8c1, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8a0}, 0x4090) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000140)={0x2, 0x0, '\x00', {0x0, @bt={0x0, 0x7, 0x0, 0x1, 0x882, 0xfffffff8, 0x80000000, 0x4, 0x7, 0x100, 0x5, 0x0, 0x3, 0x2, 0xd, 0x14, {0x200, 0xfbf8}, 0x3, 0xc5}}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x14c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x556}, {0x6, 0x11, 0x800}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xffe0}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0xc3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x81000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x57ab}, {0x6, 0x11, 0xf0a5}, {0x8}, {0x5, 0x14, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB="de35f01063"], 0x30}}, 0x0) [ 3184.611006][T19272] Bluetooth: hci5: command 0x040f tx timeout [ 3184.616030][T23005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.660560][T23007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.713569][T23005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYBLOB="6f6c00000000c83c180000000055000000f3ff00000020008008000300", @ANYRES32=r0, @ANYBLOB="0c0080"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'dummy0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x24, 0x8, 0x8, 0x5}}}, ["", "", "", "", "", ""]}, 0x30}}, 0x800) 18:12:27 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3184.811977][T23007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.829917][T22999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:27 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3e5f090000000000}, 0x0) [ 3184.883793][T23012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.906264][T23014] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:12:27 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000000)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000200)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x3f}, @device_a, @device_a, @device_a, {0xc, 0x3}, @device_b}, {0x1, 0x1, 0x3, 0x0, 0x40}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x56}, @device_b, @device_b, @initial, {0x4, 0x3}}, {0x4, 0x1, 0x1, 0x1, 0xe}}}, @ver_80211n={0x0, 0x1f, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x193) 18:12:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c00000000000000005500000008c25914682000800800e7ddd3d4d2b3b3df1565e6a6d46509626cb6bca59ecbc576e4c629f4d7d6ba0d83e9e31f8d6efb40d00b6e787b4448c8b8aa4421345f9adb43d1d6ba3d3d2a23e762728496f0fa50e5a19ffb97d8c47c05f29d08358684956c492d121a46e6711b48cca978eb204eabe1a475c8ca6dea3577c8", @ANYRES32, @ANYBLOB="0c0680"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) [ 3184.981262][T23014] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3185.017620][T23020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.070523][T23022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.098231][T23025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:27 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x3f00000000000000}, 0x0) [ 3185.114742][T23017] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3185.125137][T23017] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3185.154854][T23033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x3f000000}, 0x0) [ 3185.180117][T23035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3185.189936][T23035] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3185.192664][T23025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:28 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3185.578447][T23025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.614075][T23033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.628142][T23025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.647290][T23044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:28 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="48050607505050505050ffffffffffffa46f110000000000"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000200)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_a, @random="3b76b1770fc9", {0x6, 0x2}}, 0xc010, 0x2, @device_b, {0x0, 0xd, @random="a60c2b4e9a62719fd6880c09e5"}, @val={0x1, 0x6, [{0xb, 0x1}, {0x3c, 0x1}, {0x24}, {0x1}, {0x1}, {0x16}]}, @void, [{0xdd, 0x58, "f9f543e1e891f6f7c22c4e20e174dd849a70c155398ba6600f0c12c51194aead9c4a8277f3c091984bd6bad55c8e0dabef70aab113f3d955ea606dbdf4ef35ab7a8bb54e217d6b934432649c794327537281d4bb011909fc"}, {0xdd, 0xb5, "1c1ca194412ae76f761ee9e79785809195b73afa743788b0b7a53c8c24f5f711a43fb3a15a6ff441afc619dea8f5ff4bd8cbe6c0304207496a44f161f7c094713059130b2721c22915464880837e41531c9e3624ac7b0064c1b15f0438e14c1faacb42fd1502ee14857ac8c4dbcb67eab9bd519b9a7fd1af3a08fe5ff50212e7b35c9d8bd13e4cdeb0e56b0e8c68f79895e1e97b42bcef96cef610b9ccd3adcf999339a79f8f1fb58cc32e89deeed0cdc4ac3ab111"}, {0xdd, 0x40, "4382ba4501d30ef801ea6fac675480803611b6cead8b8a0191f6e92025d54d8b8c276c14f275d76605495cb713a0f18a50406d62120e0cbf8867316e0d5567d0"}, {0xdd, 0x8e, "80e4ec42a6b1bed587fb37d1989bb7758594f53dd5789ca4df885ef45410af7aed98495bf7c7f0ab9410b07de6d082806c6b946b596656c525cecc817c18dd1257a6aab8414f5fdae21e57adda4a3ff1938f1dc7e4d29a05a141f68fe44413ef008409f7fefceed94d6acf86046af13c7df103b394ddd379d2735cf5bfaa9c5cf9e563c69d262f6ec9ab644cec96"}]}, 0x21c) [ 3185.699116][T23046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.739278][T23005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.779012][T23007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.794268][T23005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.812937][T23047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.857341][T23007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.876773][T23049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.914672][T23050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:28 executing program 3: ustat(0x3, &(0x7f0000000080)) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3185.966195][T23049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:28 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x4800000000000000}, 0x0) [ 3186.030651][T23035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3186.041239][T23035] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) [ 3186.101289][T23059] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3186.111509][T23059] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x60000000}, 0x0) 18:12:28 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3186.209654][T23062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.272656][T23067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.303102][T23069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.318518][T23062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.351809][T23072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.429676][T23049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.454953][T23050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.469018][T23049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:29 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000440)=ANY=[@ANYBLOB="48050600505050501050fffffff2ffff0802110000000000e9b9c2153383b06cedd2330c7b60055b982dfc880637b7212e3495c07e9a57ac308b520e96bb062d3ebd5f572f1e40b70910d33b239fd0b51da61835ddde3d96d53b30827739e86a7e0fa69ec3de7e003c802d23754910a37af98f45d3db86218b73b3e6dbbc61a8348d08b69300"/148], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@ack={{}, {0x7ff7}}, 0xa) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7f}, @device_b, @device_b, @from_mac=@broadcast, {0x8, 0x2db}}, @ver_80211n={0x0, 0x4, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x8110, 0xffff, {0x0, 0x1, @random="d0"}, @void, @void, [{0xdd, 0xdc, "bffce291857043af2222675d3f0f2cb79533cf0750e3e3f60372dde5d01381076d90b4b7138e3e8969f47fa982ae9054552abdf52938c4472be3e508dc2851be1e5f0e5d2bc9ea862a2f5ac01f5ef8361d9a9548e407ab27aa0e4fa1c0158c3c878eddbf5a758f4001b5ab9583bae958989bb912bbe1970e90595122cca79c12b5a7258da27ae762025d252f6deef1e770f3b790ad56fa420e87cf671b50875bb31f1c0d5d25b8b44482c96bab19ec9348a8a1aeddbfca6f89c286c7f5260d2b09fa816b515cf1d57a3d1c58c43dedab480b90fcbbb298dddc8f8691"}, {0xdd, 0xe, "9e21854a77e33a1f9ae8f5c0792b"}, {0xdd, 0x38, "d8dc8e01c58cadc48404a33c3b8ae6cd4183991095d4d15ec841e25062f9d19876810f72ab08d66ae7ea42b8461cf279753db3755b0789a3"}, {0xdd, 0x69, "5aff64e36404cf0d14830c8c4164b9b3aabd6ca46e96d0d956ac6dd8872be1667d25fdd8f8e51d5d514c3abfa31223257cdcefc54804b0bb3160b2a5180261e4da9dc3e6903b08b81d78f05e461503baf8b3eefaba41fd4f1d959b6fd56dd4bb7485a5165cb806e24f"}, {0xdd, 0x6e, "608b3b3b3a9fba4a06e6424b185ede8c47f5b6ca1de85653dad1084f796dcd8f5c4f3a8c4837ae2aa761a9f550fe4bb65efb429c216affb0a9948173e42578bc4f3902b2fe89e93e0b82c6bbf9559fccdba4512e04e5911b7dcb844238de5dc90de8c5a430df1181e5717dfcdc77"}, {0xdd, 0xa3, "e0d6907ffffcdff469a0188768c17131aead90a843bb38a0da7c69be5de7f735b7f1d8bfdfc49bddcb1bf27d6d2c9210d037c01dea5267b777558889cbd286e67438cecfab28229c7626a11461020bfa1aae2d32bcdef598f4c7afe3c290e9e2c57a80658b08a65a7cd3b80b1443a9a88adf46b4ed1fcb5320efc0cbacb679c73a95ac3da6444250e4fff378565ae39bb952dd979cd66335bbc7640d1956fc2190e5fc"}, {0xdd, 0xf5, "f167a07b8b2f200a06365645588b327492db69aec8a9eefc0d9012fad010032007c2431abbb032965947b84d6468c906116550b90e155e0ddabfad5f311fed7ad0aefe395768504fe2db6373b849546cecce9de892a05d97110e90b1314f4acca5c98e122cd99c41638986679d85a50c27e9eeea0b6ae35997eb6ecb0555e6316781ac6b782471f5c5d4c53d83bd476762bd621592d5b78cc67a0691b0ec4703b53f9406564e1579960aea18740a5a92f5641f103736e83261d43bfcfe902c8e766c19043a5beb98fad1cc0832c6827e821c982f4814139ee71b22b1394619d183cf232d0443d738f8de81ed3f6aa94ab3d920bd56"}, {0xdd, 0xce, "e20f7c1fd0029475cf48531918b147d9fa0f44b662d8495ee0f6185cadece2c52309983a20f54f1804cee421cc409a4d422393ccf283fefdda49bf9338514ca16bc61c73c1e90ee062ca6c33097a8b556e66fbe899d0da3781b7f14952b647dc97d7912e90a0a0a847bed6ec61ff6eecf360481df968fe7474067284632a25529f5fcb2289078455b5bb6a61ce31e2a0a9d0ed21ca8e3f243ce9486765cdc43dd16a25f341684f62e42e42a54d7033819aae3fabc18ffec8e926bc91e2cd42153d77e17b9773063a875e0438979f"}, {0xdd, 0x92, "0f81cca5424b652e51e983c39743e2ceb2c3a5c7118b1e5c4d378aadb640a5afb852e3cf24998089fb24abb6d0165e1f6d1650bdeb92cce72a00c2d1b7a2f028fcbeaa518ce18a0dc41002fcdb4131bbc089c51beee1f0b95dc9d167c1308b6eade8dfef0e151a6b24bda4ec78f714157cb8400999c7414dbf48b20b8eac303c2519f90b5ec071151e91d04022d08777fe4b"}]}, 0x526) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000200)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_b, @random="52fec38c7dad", {0x1, 0x8}}, {0x8, 0x0, 0x2}}, {@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_a, @random="2f762643113b", {0xd, 0x6}, @broadcast}, {0x9, 0x1, 0x1, 0x1, 0x1}}}, @a_msdu=[{@broadcast, @broadcast, 0x5b, "2ff9c45cd656cc02294d558c71a05a81cf9e9649a69cd80f55bb92862d54a02b68db6449ed10e72ee301742f47cb286605022dfb8786059b8cb536e94d85f3803daaa77e6072e91558d49075d341679da585c47a05eee5af9f680c"}, {@broadcast, @broadcast, 0xb6, "3188404988e9c18596768da6ddf673c19bfa7ec70b00843b666a2a1930d0971210a0793c1d5487e0ebb16d31489f99c5c569f20cf9082a0bbc1528172d3ca2ffc2a7f80cbfc26fd6e112fdeca15df54409f27cd234ae2029efaa9f37513bb5947b8ffba985aef1dc9209bd72544117ab6a75694a4a6ab3ece50cbc6e99a9ddddcb737577fa52093d4df6d303aea2ed303887f50b611fa299f9d12e7027c95e6d93b4e434890fd5087bb00d11f6740aab7067266ee562"}, {@broadcast, @device_a, 0xc4, "99c6072a1f4fcd162d92df7ec113901a82652638c72050e9dde34dbda77fa554b7a6c07c76b47c1a93d0e2fc627d60cbf9fe03da50bf2a13e9f5de427baf99b643a0c2e3b682981c20b0a727fefe43ee0ff6b98cf8f6221bcf6650cd93209b17ce9d6cdab7d58bfb02d103ff812a40b895e9b6d501044d1d6b3fd1e964b36483e08e3e5f44612262d86fbfa5513a2aded37c792838de146f4d5b14ffd25760cd31364db3a7424d803b035376552f5c5f6f6aa39af5097ecb0310bbcd604daf4f6ef7948b"}]}, 0x23e) [ 3186.624239][T23076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.663024][T23076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.675907][T23060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.691001][ T7739] Bluetooth: hci5: command 0x0419 tx timeout 18:12:29 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, 0x0, 0x0) [ 3186.729270][T23077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.761383][T23076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x4000}, @device_a, @from_mac}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000200)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x80}, @device_a, @device_a, @from_mac, {0x8, 0x1f}}, @ver_80211n={0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x100, 0x51, @default, @val, @void, [{0xdd, 0xb5, "00319e4615d38f1c7c6e34fbe16959f59c7ed82a174962774e436b7c2fa507b1e3e8ea80231ee8f5200a0ff700c159acc499fd1b98cf1b595ea066f74c79c2039bd5f8c097687a1bc5585c8a742d8a88b3a42765eec367255297d0c4ea5b87fb408dc2d0e27564ac02208b8862417435783f8bfd90ba8188c941384b8a31b11efada87294719dce835c5734cb1a9084bdf600f1623d282b3a6942047d0798a37adaec92f1f3ac1b90e4d927538a2f6c156841a88ba"}, {0xdd, 0x8b, "bc8e2f8ac8157e6724f919c34624949aa127029a998919f128465cada55937ccb365a83ab140a939d7f268993a1c8bb96180a0b31a225266bec84b3e2cf5235e9d3ffcdd9eb6095640cd716b783b8749b3371eadd106e5b00c84bdfd5175f2e456ca3980a045cce33b5188bdfc65f413d3f2b1d82a3507365f9e2a226bdfd0fea8d2e1719d1f58f2c243cb"}, {0xdd, 0x68, "14cd7e81d2d8cd1d39e4ff14d682433e8c2abbff65b5610afb468bb26316c1d7af9de7bf46c33eac4e0b90a567422eef98f36cffb014083f19cb18c1a61bd2eb38cccba4d9a9b559ea669f156e5e5e71cce9907cae6dfaf8d9056c099409f04bb8afb056551f765c"}, {0xdd, 0x6b, "11cc75005ea492a774580894c73f4f0c050b89d56e6ca34fe5b9a4173ad4925297ab81b393e9b5ec347bd39b9cb84eb9c622b263326cf65cf919aa00fcec6bf91172366d66397ff23af1c1a7b5343d2936dac974524dc8183dc89d165600debe612b39b8aa0da860fa7c39"}, {0xdd, 0xc8, "ceb3df5bbf71072e26b1f718e2e05d6b2ddd2b1e3946190d494c6f06cfd3e1d1514191b75f07213905973127a36a328d5996b21ebb3fdfe636fa790472eba75239169e5aec55d25a0898f0fa461eba0098c563dc7a60234efde1533c7568455d31f47b268b6016e4b9fe7cf7b0d661ebdd6415dc3eeaee45976c329c2623775c853c97d506c7d98d9142ec06229a85818da9936f83cc58710a46801a3f7afd584fae70e2afeb650ba6b233fcbb4908fcb88f97029c4456f636e5873044d6c859ce6cd9c0f39b8f7c"}, {0xdd, 0xd0, "802c7da3e798aec8dc4685e5e6138b7c41e9238a33991ac34192702e2048cd85b02a649d778bc144be9433e50a095648c790b294bd25d7d724725d4d44afcf639416c38c8038150f8d0119a9d3e18b5932c9238997432045c55955d1d26ec9ec2321f2264890198cd0e3552b7fd644940fc5597489cd26081d97f6c629996d1827d579d0585fbdd49bac6248b7b1d3d2719b8beb9d3ce94d20d8e0543722f0922b66ab6f7cbdcf1f9d916a31148d8bdfee94d02e54ad203067574fffbcc3183f0b69435c5c5c9a121a194453034891a7"}, {0xdd, 0x81, "96cc0c3f0ca9305a7bf658ca8d4359ecc809e8f416b2109e835878a6634704fa62d3147935b3d5887c22c2dbbe31e69dc02ff9e3db381f6468790c9b29cd7b2557a853a143d1cd923d959669e09cb74532ace1abe73941f115c1c7bc268d44f1a4ed8390cdce9303a08859ef0feddecb862710bc8359d806470331e34b362fb27c"}]}, 0x45e) pipe(&(0x7f0000000180)) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@ctrl_frame=@cf_end_cf_ack={{}, {0x7f}, @device_b}, 0x10) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x34) [ 3186.837084][T23079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.876157][T23059] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:12:29 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x4c00000000000000}, 0x0) [ 3186.887660][T23059] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3186.900697][T23081] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3186.972591][T23089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.989660][T23081] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3187.004522][T23090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.025821][T23091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.036650][T23092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:29 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x6000000000000000}, 0x0) [ 3187.078106][T23095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.096169][T23087] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3187.106098][T23087] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x9effffff}, 0x0) 18:12:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff01) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x650, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffff801, 0x2f}}}}, [@NL80211_ATTR_NAN_FUNC={0x630, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x56, 0xb, "d46b8c206e5b3a224e9a2c35733c407475e1a60f4a66c6d9a429b5bc3befeb4708fff61ca9cfc18ee30f3637470b63153f9c61cfa0df0ac172cf3df597ab1bdf2ba1bbecd7ca1b9254176f7a63be614518c7"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x43}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x128, 0xd, 0x0, 0x1, [{0x25, 0x0, "34a371eb891790259c9e3bbeb76da1c3b0640eb49ce0ce6f82c26d6ba2add85353"}, {0x44, 0x0, "90b694c2159433bd863eab2d2ac394029bd700ffd360c54dea35925412ebf09328f051e3aaad3f21a21b1ef9b2430b02b266f74eea75e7dddddf5d545e42554c"}, {0xb5, 0x0, "06346fdc2627f57d57614b94c95eb5b9bebcf908a9eb23c0d0eafcc2ba7971d3ebeaa55b107c077ae547ce9f0c4e9826b7429fd1e4ce9730904db58b6f82e19f44abc1bdf537687c212fcc65a41298b3bcbc07f49d0f07b52e5c0ea3d4625badb9f805e505c7e6105d369a80daaf61392031b932f3821b86053626cb7d157e8a76b7a1b5a879f04615197fbc9eeba5a7bfca4521d26c54cff3face29bce2d54e1e81755b907c678d5afca25b898617adc0"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x3f0, 0xe, 0x0, 0x1, [{0xce, 0x0, "3c1c7be67cd04015c593cb88e2518786763dcf25374db8f50f18e69ef0a0a35f5f22ebce1714641df1c7fe0ddf52ed1d2dda9dec93abe50689e1b0d5cdbbabff189aa854f22fb7c463b7f6d2022ca0740647ac4e171efb3d524e4f2088505d02d0bbb6a282556f5358614a51a89b8b9334828412c31844d82e9a8126b0c4013bf8cd2e0a485a299a575c4e87d4dca72465b033e4a0e4a66d87695a907797fdc968a413acfce1fa345a877de256c610ac8abbbe03bf3ebfcd36510b289a94069fec54453c82a87b6bdc81"}, {0x46, 0x0, "769a415fbb8dd5dc7e7a5ad22ead820404c7c49de2c2508f8bd405e2a38b17ff5ee4695843a4eefe8c36cd5fba5c24051782862a4203858a88fbe0c429d460eb800f"}, {0xf4, 0x0, "8003c7563154cbc6e98d50c0cc904816559d3d3539f3fe14d0125cdf2fa7ae153f143f266a70f9686a7d42ca78d9ab4a1986c93945bf89699b7a6f9a5c16bf95dd8f17b759cf9ef66c302b9a2dc2e24adc827cfe7b79d2aaae63dad1ba8a0247a25a88ebb55d3d982eb38386652ec00239e6f34c933469bbc6b4a2f01b197f3037067ab5b0adca292828415b76e4ebd5538293af5ed7e8d9e29193c659cc6bb9db02dd46aa3db241c2d366032c91eea9e41addb358850de162a5ac3bed6cf3c4484c50aa19bf3f9eafcde61d22feff39969a73b1c24e4fdd4e6aa9d95c519f7e588329e30c98d1e725a23347c506fc9d"}, {0xb8, 0x0, "701893bf86f232e76462353fbd7b7dfb4b2f0a86b7fd24d26e686a9135ac40477869e445a52b3c667350125c776faa8909e7f9e3f9ce3eb57dc62f8a9aa4bb8ef8caf50bc507c9e1269918b2a633839342eca833d796ea81d9e700aaa223e3403c21267de26efabf64109a3fec9a629c6b1a76090e85c69fd29e6765942287f994b02bb55c8d2172f8daa608c3c8a32160f015bbdf4e4b440e4836f49bbe7087b2d96a9e2f92eeaa8e03e612a6d0e3bd7483afdc"}, {0xe0, 0x0, "21da0c3464279852d83ed4f756eb16f0aa338112b45fd909490f1d5b73da4536c61c5fa0a99f32ed9be7c2157e1901c2e2a5a61e03cd423ae54da7b60ebc85583299b2b30aa6c6635ee294af5df24a8444bb6a2a359c254e041e32abda376e690ddea01b3e092d4c44718020f85ce0604444e80c907e6ff4fa6ee90c69c81f28c4df9e307c524d1420e658c76326815a6cc4bcc0680476ea1dd00d8e4b320be4ab24a0ad86f8ad67a2d728432c7adc34c9670472f854370b020ab3cea33a8b087b65387d21d4569b80ea8865eeb56e4ee7dd7ca4ba8df7f3fd1aa8f8"}, {0x47, 0x0, "f42cd2fc0d63abca8b8f2a7aab6104a325c60b53184026a9469bcac9bfb08cd8e0688ea44b5c901e3213b78407d46b23c33595201984d5eb07f2587dbb19d6f3e41a74"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x92, 0xb, "f3c566fe23d956594cfc17c40f0471f4feed98362839cd62a42a14c8df3a7d6888f0120e9c8ff9b5e379a421b6fbb28a83392d28d648dd8e21333067c4dee6c7a4622e562af1c657c86ceaf43f663d1b5bdf9adadf5bbe52cdbfd149d992e5c61abea71c62c71488ea1ffc46888c0e282c7ef860a84dbe1d748e7edc56ffc033966e19ebe11c2b8243dd71298e26"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x80000001}]}]}, 0x650}, 0x1, 0x0, 0x0, 0x40000}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r3, 0x0, r4, 0x0, 0x10003, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x1402, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41000}, 0x4000040) [ 3187.161809][T23101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3187.172767][T23101] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3187.274350][T23076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.306721][T23077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.322158][T23076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.338926][T23079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.359653][T23077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:30 executing program 0: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x34) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xff01) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) [ 3187.420337][T23090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:30 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, 0x0, 0x0) [ 3187.475439][T23088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.486290][T23090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @broadcast, {0xa, 0x20}, @broadcast}, @random="51f9f6187a68088767f1ed9d8391f762ff487cc0bd4f877fa4b3a336acbeb38358c65e88eb603feba6363535b63d1db1f611969672faf4ff70ec9f5c9c388cedc021"}, 0x60) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000240)=@ctrl_frame=@rts={{}, {}, @broadcast, @broadcast}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@ctrl_frame=@bar={{}, {0x20}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0xe, {0xe, 0x2}, "545dfa466b90b9e1"}, {0x0, 0x6, {0x2, 0xfc1}, "16842016b49d815b"}, {0x0, 0x9, {0x6, 0x8}, "1b926912eafad66e"}]}}, 0x36) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3187.580555][T23113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.609861][T23114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.659880][T23116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.699228][T23114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.715480][T23101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3187.726128][T23101] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:30 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x6800000000000000}, 0x0) 18:12:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xce000000}, 0x0) [ 3187.764765][T23122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.791916][T23126] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3187.802011][T23126] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3187.824661][T23127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.855424][T23122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.887911][T23118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.956082][T23113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:30 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {}, @device_a, @device_b}, 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) [ 3188.066752][T23135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:30 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, 0x0, 0x0) [ 3188.108184][T23135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.167748][T23137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) [ 3188.223054][T23122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.255079][T23140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.272490][T23127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.293572][T23141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.310406][T23143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.327655][T23118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.356225][T23140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@ba={{}, {0x7ffd}, @device_a, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x2, {0xc, 0x6}, "cc1aadb68872f9c2"}, {0x0, 0x1, {0x5, 0x81}, "195525900dd94a20"}], {0x0, 0x4, {0xe, 0x8f8}, "a2cf64f32bc769f5"}}}, 0x36) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r0, 0x0, r1, 0x0, 0x10003, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x34) 18:12:30 executing program 4: io_setup(0x9a07, &(0x7f0000000500)=0x0) io_destroy(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x800000, 0x0) io_submit(r0, 0x3, &(0x7f0000000480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x40, r2, &(0x7f0000000180)="33475c104303373207cccb90023c5caaa9ab856a49827413c2896b1fea110f5cff6776b35dd9d72e7bcbf49a3b98bc271fb9df790d3957b9a5c1ea1dc0a8c523ccd3c080107b74458b5da0340f4f5d91b2bb25d2ba0f852f504fc83c7fa766b95f4cc4dc1e687ec30b9ff044be08ad3dff6e0b8c8d3495fb9ca5496a0fdddd787e0886cffa46a8541664527b2ee907a1d4bbed", 0x93, 0xffffffffffffffc1, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)="5f594c739412f8d5df45b68203744539b384444982d862ebd95026ff1f8e41d79113d34727c0ae72412b0cccfb5d4dee1c18ed63f9cab615947259a323dfbe4b7021afa4709ca331d0d5f1188e6df64731c147f5c8477a665e020bf54ab60c6ee0a4f2f0af69", 0x66, 0x8, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000380)="ccabf3d4b60db0291b2cfa6582c6aca3524d381f470514391ecdb2eacc15c4e4bd8edd61ecb7a05694b331856c1e6de42a6e8677137ea87de9720ecd2a9a72b1772f4bbca5cca88b7f5e5143ffcd26867bdc968038c4813b87a493ba239fc4a1b9e0cdc4cc7ab3caa3b6845fe82ea9a1791a7ea2c7b566e41f1b3abe446cc37d3d67d2d4adc53cb5238b880862205695363d7684ac2d4198a0600d20bd356594cfe7fa983f5e88be64da95d44a2c94030281a5", 0xb3, 0xd61b, 0x0, 0x3}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74ce206521fd634347b2c9fb274ea90ee1a86daad71fc1993986cbd7b8a1b779013ec130cc316c7677092aedb403f29f40b708245f0b4e0438e907aaea43a85d4159c26ccd7c1b70aa54e75da25bf880575d5fea30296ea8538557a6e124e989a76a27231144c69adcefc60e180400000000000000f7cbf2d3646b4213b942bad26ab86f1f153e", @ANYRES16=r5, @ANYRESOCT=r5, @ANYRES32, @ANYRES32=r4], 0x30}}, 0x0) [ 3188.515772][T23149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.553940][T23135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.576400][T23151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.590524][T23137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.604860][T23149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.623447][T23135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:31 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x6c00000000000000}, 0x0) [ 3188.669950][T23155] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3188.702103][T23151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:31 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x3, 'vcan0\x00', {0xfef9}, 0x11}) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000580)=@mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0x0, 0x1}}, 0x0, 0x6, @default, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x3, 0x0, {0x3, 0x945, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x2}}, [{0xdd, 0x12, "8f4dd5dfc56a2a2bdfb80362762219b4a1ef"}, {0xdd, 0x98, "3d68cc5e97d9f46bc257c1cacb26177ea10ea8851b1f67c2c51bc1e8c286f7433b9e91de50d90ccefac86028152ab47d7efe2e4ea2d0ed04b9be965cfbe47967b6844575523fb713480db31b02295568f541c42fff5ee26ae481ea4894db38a5b8412752db129fab8a53747bbccd15a40ad31727d1555e3f12346fdeb7a8033c02e663e8ad518dda02cfa708890e2329d49bb405a4e5c532"}]}, 0xe8) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x1, 0x0, 0x7, 0x1, 0x81, "75924d9ffab34c1e841051d03603c8429e6b87535b8945ee2c65c4e90e1830ce2a3aff199741628aed592cbdeb904f0e889fa3ce7a4444a1d6a3db0ac47f96", 0x33}, 0x60) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000200)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @device_a, {0x2, 0x8}, @broadcast}, @random="eca122ea7d4ec42d934e67d26654cda7ee5ef8e579028c5d49a620b5955119880bde00785414288370d2907136d78384d4b5f3cefd250291135a5b04f9f33ce52b2eb64f92a4b33028b6f4399f1689a40b04d9136d4d0f77e458dd9b789214e31fba1fe77fdcdbdeda3cd46a8c8d824a0a78d7902663ab589f0d91877567fb5813db74905ad34b06971b2ec343056d46b9905f95ffbb98ef2245fb4a5541120fe4eb8db34d5abecce7dbba849b560e3345f12ec144b2d0896399f4b89adde735a1f1695c5d823baa99a2e40a878d26c846ca3701355b8270deab94494fddd2d457de0e089fa3fa282d4f4d608229e38998e136d9e6ec4b8dfd28dd34fe7088e5fab0bd0656c0cef1371a6871e9910fa90100f3b305faddaa44fa124ce8d7879b63854a49be90ac98d97db9bab03c1663808657ba90de51acf7caf50ab8a9bf0230f634b95e9af0c53145bab041adbef47e8403905ea316a91f5deaf5ed54cb69f2cbd30883cc75a20bfd1645d48349cb149ed52338a8ed0c008a260c5f0f68130369ff390159c1779821bada5f239b532c2bccb6f97983a754180aa13cc9e37f06fe2624996288e3f84b7595ef6c62aa878be309a336ef5fcb218f6566ade6adc7e13818b202b4cae1b960b1fc994568264662acd5e7ee44b6534da059a173ae40b9acd3b4e5bc7f6fdfd59da6f37d8a9466674630767f3482e3310789a6af7a94957c18fb9cb4e4ac560da733eac5d15bbe646587dc5ea056940a502a11c504c3c72bcd92bad6d1eab4de71d0fb9526abb6f6b900bc4c186824c24b6fb61f311233cd2eb69b5840180cc5be7779e7ba267b9387c5e9018a50d03dc0cc689daa96a06e81df23d1a9f7862f5049bafbbac8ea"}, 0x290) [ 3188.746800][T23155] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:31 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3188.850156][T23159] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3188.864628][T23159] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:31 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x7400000000000000}, 0x0) 18:12:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xf0ffffff}, 0x0) [ 3188.911835][T23167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.948214][T23168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.963765][T23170] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3188.973857][T23170] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3188.977226][T23171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.012632][T23173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.028269][T23174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.053075][T23176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.064167][T23167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.412071][T23171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:32 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:12:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xad4c}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) [ 3189.471874][T23167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.482528][T23174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.535166][T23185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.627895][T23189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.648966][T23149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:32 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) [ 3189.682111][T23191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.698917][T23151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r4, 0x0, 0x10003, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x24}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40814}, 0x4004894) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000240)={0x101, 0x7ec825e0, 0x3, 0xb4, 0x0, [0x0, 0x1, 0x800, 0x9]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r5, 0x400, 0x0, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) [ 3189.739030][T23193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.753372][T23146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:32 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x7a00000000000000}, 0x0) [ 3189.836280][T23197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:32 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cts={{}, {0xe8}, @broadcast}, 0xa) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3189.894953][T23202] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3189.907645][T23203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.969882][T23202] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3190.008706][T23209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xfffff000}, 0x0) [ 3190.048093][T23206] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3190.058354][T23207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.080044][T23206] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:32 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x8017000000000000}, 0x0) [ 3190.147481][T23217] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3190.157514][T23217] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:32 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3190.271727][T23222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.293025][T23197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.308799][T23222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:32 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xff01) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000380)={@my=0x0, 0x1}) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000000)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @random="640c57ffa9d7", {0x5, 0x1}}, @ver_80211n={0x0, 0x99, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @tdls_setup_resp={0xc, 0x1, 0x3b, 0x0, @val=0xe040, @val={0x1, 0x5, [{0x36, 0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0xb}]}, @val={0x2d, 0x1a, {0x20, 0x1, 0x0, 0x0, {0x1fd, 0xff, 0x0, 0x20, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x2, 0x8}}, @val={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}}}, 0x5a) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ack={{}, {0xff}}, 0xa) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000200)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @device_b, @initial, {0x7, 0x80}}, @ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x0, 0x4, 0x35, @val={0x10, 0x1, 0x50}, [{0xdd, 0x21, "7a9e1c8dca7dc9ca8ab14ff87b693aeec0911cde602fecf1ec704dd316b3199091"}]}, 0x48) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@deauth={@with_ht={{{}, {0x40}, @broadcast, @device_b, @random="b0fbd2a20eab", {0x2}}, @ver_80211n={0x0, 0x25ef, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x0, @val={0x8c, 0x18, {0x149, "1bd4733d3415", @long="24c3e6cf75f27e5786ca51c79addd037"}}}, 0x38) syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f00000002c0)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x17e}, @device_a, @broadcast, @from_mac=@broadcast, {0x8, 0xa57}}, 0x20, @val={0x8c, 0x18, {0xceb, "1f2f1efac464", @long="d839816f3359acba319afae79310e051"}}}, 0x34) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xff01) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000003c0)={{@any, 0x7ff}, @local, 0x3, 0xfffffffffffff800, 0x6, 0x7, 0x4, 0x80000000, 0x6}) [ 3190.359778][T23209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.393242][T23224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.437070][T23226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.462518][T23225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:33 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffefc5"], 0xa) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x800}, 0x8811) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3190.508537][T23228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.577803][T23230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.611748][T23228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.646743][T23228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.661302][T23232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.689862][T23228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.703323][T23232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.735242][T23228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.748877][T23231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:33 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3190.781156][ T7739] Bluetooth: hci6: command 0x0406 tx timeout 18:12:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) [ 3190.921589][T23237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.974505][T23242] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3190.993822][T23237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:33 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x97ffffff00000000}, 0x0) 18:12:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="88d8dff2", @ANYRESOCT, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB], 0x30}}, 0x0) [ 3191.035050][T23242] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3191.070216][T23232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.091617][T23230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.114256][T23232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.126178][T23247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.139667][T23246] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3191.142377][T23228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.157582][T23246] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3191.170628][T23248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:33 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x9effffff00000000}, 0x0) [ 3191.194827][T23251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.206864][T23253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.223859][T23256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xffffff7f}, 0x0) [ 3191.236724][T23257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.262127][T23259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3191.282929][T23259] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:33 executing program 3: syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES16], 0x34) 18:12:33 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:12:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x118, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xbc52}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2844}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x28004083) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4a00200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x1534, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "0ae0f81b44f6c0addb28d8a8b203de"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "fccfe30f06aac5a8627df31b134f3c58596a7e5bd4adc1f1ab50d71500f72729582bc407ce9b85d51244eb009ea5d125"}, @ETHTOOL_A_BITSET_MASK={0x16, 0x5, "6e5509c5477ba0b5f088841ba238e3c3e7cc"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x131c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7c9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '<)\\#:'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.&@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{+\\\xd5\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '!+#^&^!!@,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '&$\\]($^\'%{,*)#\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x54}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x26, 0x4, "30ae3ad50682925e24b3baaa0608e3ffab5cba6ff697c2c8089fe4421cf59f5b9c4a"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "63b223b704427654d9a4ed1c1236934024a20bab8ea4f1c100df26f381795e2aa88a3816fb7eaabdbd2f9aeef68d307529f72424daa41dcb"}, @ETHTOOL_A_BITSET_VALUE={0x102, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "b928f0705f1a1432eacb7bbcbad5455fdfd84842f80da644132e7f5c8445fcb173fddfbc273491664531ea3a374dd4fa73fb9e17b30ff644e72e"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "33c00f849521a7f78142af8edd7aed2f38e872e0dd055cc4d809b79938f68fe25f90ff0952ba4d0e5a9e03b684a5b662c6d9cc0c9edf8a91a260e28a7c982d2f8d8de04574820ba804505eba10363eff84021feeb925ea32e605f478ac09d24c3209c82613222ebe7c4497caf7b2bb9e9933cb34599a9f6dbeece7d1b1a5a4490d2475378d69a524c853435b83db4870d1b75f3d1ea43f052bdcb87fc7db4bd3af99ef6ac1cdc1cec07a0a5def5614f89caa1c561fc1405170aae81c4572bd4ce35ddf813b1da200922a7eb6696d94a7c53ebca51f17f40b"}]}]}, 0x1534}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) 18:12:34 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xff01) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xff01) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="e84d0bbd52fdf4a6e96fbcc9b8f6a323c1cb2998148d51e162ecc286ac7bb6d735e53a9bedf0739e5baf137561c9f92a9ace5e1c897d7c796987e1ecd216d522dfc5316b964edc3320361771b4a6490b482a8daebe8c"], 0x34) read(r1, &(0x7f0000000100)=""/119, 0x77) [ 3191.567693][T23272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.592149][T23269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.606226][T23274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0xf3634fee1e9d92fd, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) [ 3191.625551][T23276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.656487][T23272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x36e8b48a, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4005) 18:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xff01) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181001, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff01) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000000c0)={0x96a9, 0x40, 0x1, 0x5, 0x2, 0x1f}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) [ 3191.975195][T23269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.996254][T23288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:34 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xc0}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:12:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) sched_setscheduler(r2, 0x3, &(0x7f0000000080)) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) 18:12:34 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xe4ffffff00000000}, 0x0) 18:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040840}, 0x4) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x931, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x44) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) [ 3192.154972][T23294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3192.225377][T23298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.244628][T23294] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3192.270526][T23301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.286770][T23302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.314825][T23298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.336079][T23305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.350691][T23300] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3192.368427][T23300] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xffffff9e}, 0x0) 18:12:34 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x7, 0x80}}, 0x28) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:12:34 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xf0ffffff00000000}, 0x0) [ 3192.382822][T23302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r4, 0x0, r5, 0x0, 0x10003, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRESHEX=r4, @ANYBLOB="0c0080"], 0x30}}, 0x0) [ 3192.487459][T23315] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3192.505201][T23315] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3192.544110][T23316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.568991][T23318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:35 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3192.755396][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3192.767268][T23302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.781080][T23327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.798217][T23297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.812037][T23302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.827635][T23330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:35 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cts={{}, {}, @device_b}, 0xa) [ 3192.860978][T23327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.923456][T23318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:35 executing program 0: setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x53}, 0xc) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@ctrl_frame=@rts={{}, {0x2}, @device_a, @device_b}, 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@bar={{}, {}, @device_a, @device_b, @compressed={{0x1, 0x0, 0x1, 0x0, 0x1}, {0xe, 0x4}}}, 0x14) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000580)=@mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xf8d}, @broadcast, @broadcast, @initial, {0x1}}, 0x0, 0x1, 0x3c, @val={0x10, 0x1, 0xf2}, [{0xdd, 0x3d, "d6d5b9b69dfc733300f1c95620c351fa4491a444e2a1a212e6b888fe00cab1793f2207cd28fb4106623ac2c87d5eccb718e4ba2cab6b451bd81ad127c6"}, {0xdd, 0x70, "e51027169a13eb66cc9bcc699072da511f5be510654bd8c384b935d71e12f0a8fd244940614fdf76132df149f60fbaf9ccb87a2088448a86274885e6005b0594d947cf2e236a6da61543195098b05c2e9d83bb7bc26028b3350120847cfb4bfff38ffa44a400dca5c21485a307bf4083"}, {0xdd, 0x60, "90ef4bbcbbbfd5a16e6ee0a575aed82fd7c685f591843a9256a27a755397d43b6cd2f18d7f91141d3c2704a2bb84ffe1638295a8b78d6d76a439ec8f940bb51a96a0cfaa2d634a97aa36df0e3049cf059e91733725971db921f6101e5c8e9938"}, {0xdd, 0xc2, "b646ba1a2d62d5032de54b37f9e0648e71599abb7f685a1a0ec5fe460654c8c1724b95a94769331527ab79dc8cf777609f54b25f7943e0e2cee39ee647789821cd5b02adb5c73d87445ff959f40c674d99e481d6b6297e0881ad72b51bed63231a080e27ba422a58fc7d80783431f8bd2ac5211538f8855b0a180a3b11c859bd38cbc29ec096c901373e1a6f9a909da226591fcb4ffdb89c326270a8364350ed2b6a5381a0f057b257b99f0ddcf7ea02b6cf633757bacda504b9368741fdb987054e"}, {0xdd, 0xb0, "5688ce455abb63a945443a572a541c455ce0d742db4739396b8c1a5bf071241c89fdb7b75629c12e0a76c48730760ba39f1f256776746ee73534b8ceda19bd451e92c8086c248f7b35cc1a97d6220da2141ebc442d425b73245affb3c32e05aa3652f38f79a54c637b339cb62b297841ff60a04bc1772274cbd174ce68cf50296aa75db4a4b9579de4740c54ce4ccc04d68a8f8189f19e9ed6ad0a607f9c0ad5b7f33082c1d07a8243e8a42a7d43d1f0"}, {0xdd, 0xe1, "1014623aa5e09d3dd902e0f33cff60b91af0293151abdc452305678e085009a453569aff80ffdc7665ab1354a36e10a9452f86bae8979330633e9745ca970012ab24721a2e643b7588de17e81e5715d23ade0106b66567262d1b92c57e7306e5fce2de77de6ca66ded8d2c75a0c1572bd6356a427edd6c69bf1e04f7c723493d3aeb8b49521e56337f47051779117fc49b164ea346aeba2a495314ab14e799071c9f405ffc4e27599a28ea4049ca19c077c92c23bef5ba02b64130a5aae322e2889b2ebfe3034adec91a76c12278de6fd095917cc1053e0999668589711f7bc5ba"}, {0xdd, 0x78, "95bc332b530fe87a2edad9b874cdc0eb7e03651f64fa3b1c7330d102f58007d7cf4b055bf0bf268b3b234dc8a38af1ef321c413d928c625a371ce22e9cb8d670a9eacda9a026b31c5645d74d034cb08e0be84d755be781c97d21769256b7e5a2a74bbbae3972665288f5f0fd902c9da64c2621653aaaf350"}, {0xdd, 0xa4, "20eb451912ce0f23a0f2efb9525c48743d23165278077c0ecdc70c597c72595e8a8d47dda086cfcb98d3129fa5e81fd6a1f7daf867413c200d02e37e5cd146b7847ed29e90a0ff35c079f682ef019cb6de62d802eaa540887f84ef45309d29a15b9bbf03658f4b0f16f328654d2ea79bd939b15c5dc95ac7d20e3f251960429e46e5450478b2f6be0de3b323cba804e78431dfd2b92762d6ca01751c8b8f4d961ee5b629"}]}, 0x4ad) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, {0x6}}) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000240)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1f}, @device_b, @device_b, @initial, {0x1, 0x93d}}, @ver_80211n={0x0, 0x4, 0x1, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @ntf_ch_w={0x7, 0x0, 0x1}}, 0x1f) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@ctrl_frame=@bar={{}, {0x6}, @broadcast, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x6, {0x4, 0x5}, "273267e590f0e52b"}]}}, 0x1e) [ 3193.030717][T23334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3193.064248][T23335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:35 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xf6ffffff00000000}, 0x0) [ 3193.089514][T23337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.115617][T23334] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3193.145441][T23339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.183300][T23342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.195244][T23335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.209720][T23341] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3193.227872][T23341] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 18:12:35 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:12:35 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xfdffffff00000000}, 0x0) 18:12:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xfffffff0}, 0x0) [ 3193.246808][T23344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.299475][T23347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.335550][T23342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.349232][T23349] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3193.370283][T23349] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3193.385710][T23342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.406415][T23355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.434598][T23355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.464848][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3193.476766][T23355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r4, 0x0, 0x10003, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x204800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000380)="8e66161690b5b918acb048a320dd5b7fbc5e5befab8b95b45ea68ddf31045c15c33d63868d23cd3a2c64c15d261a8ee9effdc6ab7f22f3ff0aa38ecd778987f4601977984643fb8b288692bac5735acbf71c795d5fb8779911f4622d0ddae931305d3f5e93fae3e79ee4178d6b2876aee828b2ec0819645e05e8b634d1bd9e9fb60b1add342402ff97d8b0c5eee4eb059882876400b0f7f27ebec589bdcb0e0f8875e3ceb3c40f41296f61a77afc343aac3e29fb8521a07e71ca4faa0b79e0efb808", 0xc2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="48020000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000000a40ddbe7877ad3be0000000000000800080026006c0900000800a1003fdc0000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8004) [ 3193.547527][T23335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.574683][T23339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.587166][T23337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.601164][T23335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:36 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x2}, @device_b, @broadcast}, 0x10) pipe(&(0x7f0000000080)) [ 3193.726812][T23344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.738978][T23342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.777314][T23347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.800473][T23362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.826797][T23363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.852491][T23344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.862663][T23342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:36 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @device_a, @initial, {0xe, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3193.888140][T23365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.928379][T23366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:36 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1}, {0x6}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000200)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xc51}, @device_b, @broadcast, @device_b, {0x9, 0x3}, @broadcast}, {0x2, 0x1, 0x0, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@device_b, {0x5, 0x3}}, {0x5, 0x1, 0x3, 0x1, 0x81}}}, @random="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"}, 0x135) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000580)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7fc1}, @device_b, @device_b, @initial, {0x6, 0x3f}}, @ver_80211n={0x0, 0x5, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x2000, 0x7ff, {0x0, 0xc, @random="a530884a493260682192cc9a"}, @val={0x1, 0x3, [{0x59}, {0x9}, {0x48, 0x1}]}, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0x40, 0x7f, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}, 0x400, 0x3, 0xb4}}, [{0xdd, 0x80, "40660804367c92a76319a81953955e1749d746a5c913b8575e64197583652dd73f507fe3bf6fa688510e9488e1d49d094d4719dcb0be2c3dea9c2d8f2a977029e5e164850cfac58a4a5c2d99fde2e760d569206fdc275de30f8fce4061391d5390f804a9ceea77693339e1cee3c0606652654fe25e5908230a3670f0f1fb173b"}, {0xdd, 0xce, "f1da32944a642a07f0de9af6935293c5d514abc9700707524cbf4fecf76e28ea7fff50cbf14055e4bce9a817682babb3efe047c751049aa773fadcbb911a3d6f7cac37699e9cf0d8cb5863563bb3c7c84150955bda3f4bafcce2601168b6dcd489e5ff93b1dbae724e464d5124506e5a68808d069c3901d8f3b4e49448094e2ef8b615a5972ab1e84c08f20fbaec9d331919ade75052b8604e73d158017d359fdb63dfe6303b51d8924fe461175a41f438f7c135dea2513c6bf4393fdaf27fcade46a5e5f8ba9c4619a9f6342510"}, {0xdd, 0xe5, "04e44fbb9271c009a4b9e34a69571be1b02b08b32fbd06daf1c61f0f48e57096afd06cbb65e70716c603edd1de373b14a659078443987d8904489a421ca4b80b25c37cbbb7853268e83cd2a9d55f97e948527ad1bfc378463975b542a07c37d191d938f5bc1b0f3fcf2153e1ddd458b09a3af735efe54c7d71d5379cf926d29e9844a6d598a91b4ff743b1027b56fca252993a8c628995e12d4a81a4345025fb20c667e57cb5041a7f5bb2d976c3b5d4c47e8fb98725e27d45bc630e1ffbdfb9fb99ae046050a76f177ec75cec5b96b8009ecd3ddda6adcea7e9a6607c2f25b320af01a1f4"}, {0xdd, 0xbc, "8cf3c37f796e9a4fd7ae6a46d16a8adea9b219a007d942794156e632e69d899bf914a2758b19030943968cb2d43a8a139f02d12d21affde4f46983671849338a401e9e5f60c7c830055559bec9fa70e9eb630d3a19f714ebd3d296f2217127a821757180248029c506eb4dc718e41e304bd09da712f5cf7310a5368a618e04da8056c9453ba52605bc09426b2e9eeaf2ff3088a5462cb6b609a35d026c60d63d798911d41ba817acd02d8e0bffa09af9e9edd60495402c114e1b0a42"}, {0xdd, 0xfb, "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"}, {0xdd, 0x6c, "32088336bb97ab632c2a7464c8edc9060cfc0ecae55ce26d04f162fe84e275c44aa041101778a1b2ddda4dcf13c1c079a0ac0bb2919d47a41e2d10d1973acff40f881442847035d12057ef8089e8dc971e6da0daaf5d86ad634cdad11a99dd925481634234b78dd7a3a99b9a"}, {0xdd, 0x33, "c92b27a3fb254c191dceefcd923ceb4f628b3f010f5565bbeaa97833bb8468c484170330e68a58807e8774aa10c47c8e535825"}, {0xdd, 0xe4, "21af663ca4d76f5c81056699e40f173bcb45d9fd5d18b178eab1ef180384e540cc269b82018bc436087b1ac2eb8dc6bb5c3cb6fc12cce8228070af7bf1a9133fffc6d9f3dc402b2fe78ea2c31fa11403281c5ef16d1330a6034812c2910c50f694f0aea399b928bd14012aae625353d463a9a133a03b199a534e580ae67c65942b9787930aad6b40ef1013ae3c9f7299bcbfcd6894e3f12d162d204fde2594c466b9efbbcafd3d5fa23a6f8f09720119880575fd32a60b8acb7b916c739eb91ba02aa67d8898c68ac2d43e044345fa06123db78a39c4266affed01620880a548a398a895"}, {0xdd, 0x9, "ca87df887f8a126fc9"}, {0xdd, 0xb3, "8791c68f3592f150f7a731ea38e796d13792275e71a2ccf5363ea8468d460f843e5781b6ba00caafc4d8a74d115dba7cabf6ecffa08ace80d9aa918db4cfdfe5cd9eb8b6ab1473b0a3c0cf85ca0abefd405dd6a781e039618afe604b4a37a01adab4cf7b5f2bf694082741cc5204e200354bffccfbf892b09d943063ea7813e8f6d1430fcf9d4cd919724c826eda62d778b23f5472009bb5c1ff871ccba65543c26ae0d730e84246c95f328c74009a410ec6a4"}]}, 0x68c) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) [ 3194.019036][T23368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.100648][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.139235][T23368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.153067][T23372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.189145][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:36 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xfeffffff00000000}, 0x0) [ 3194.217195][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.231671][T23375] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3194.282638][T23363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.297361][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.308438][T23375] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3194.330329][T23365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.346929][T23363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x3000000000000}, 0x0) 18:12:37 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x28) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3194.513148][T23382] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:12:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x40, 0x9, 0xe00, 0x101, 0xfffff070], 0x5, 0x800, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x18}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000080c}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) [ 3194.556093][T23382] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3194.659337][T23392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.696141][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.747301][T23372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.765651][T23399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.798179][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.809704][T23372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff01) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40800) write(r3, &(0x7f0000000380)="1e97e74db5abb7e64b51f0a2cadf29bc4f7c5bf9bb58569151b28ede9c59159786f217e4e5a6db0caa59243c691744525a0b18b2bbc266b637d73ec7932a3599dfe288677e57f37748e160eb623b5cd1ff3ddfe87f5a44bb45dc2e7265709352186ed28a2870ad68f2793b7fee1b44e3769348f473a486c977258d6a74461525149d06415e37ffaa055a714d9f441fd4f7a5e6aba1368b0aab87259466b646bbb2f1d60c01438340db7d6b562ddf0422138d1afa7e932ec049f3e58b3b9718fb87a8b164eef2bc", 0xc7) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7f}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) 18:12:37 executing program 0: syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="480550d309000000a3f5b8722a0ebd66a3000000007c50505050ffffffffffff0802"], 0x18) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="c4000000080211000001603998544dbb230b69ac98d8fba9e418e179f2f9fccf618ff47b998c8f0b7bb87e6258586d92d3303280b5cf9dea401239942322382fcb9edd87925475bec356ed1e8dbe539d72ee493dbd9d91d2a3e290"], 0xa) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x137) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000580)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x72}, @device_b, @device_a, @device_a, {0xd, 0x78f}}, @random="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"}, 0x51d) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x34) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000380)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @device_b, @from_mac=@broadcast, {0x3, 0x1}}, @ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x3}}, 0x1f, @val={0x8c, 0x18, {0x53d, "2f35119c39e0", @long="7e9a9bdebcf639b30c94998610f5f501"}}}, 0x38) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000003c0)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1}, {0x854}, @broadcast, @broadcast, @device_a, {0x3, 0xc}, @device_b}, {0x8, 0x0, 0x3, 0x0, 0x8}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_a, @from_mac, @initial, {0x3, 0x80}}, {0x2, 0x0, 0x2, 0x1, 0x10}}}, @a_msdu=[{@device_a, @device_a, 0x3, "65a36a"}, {@device_a, @broadcast, 0xa0, "3feec18864003453f354def86ac464704249a28cfdb295835de5f477ce72ed12608a624d05dd2fb5c9cbd7f19d3e3919b0ff6fe2b2ec60712b4d22164c1a304ada855e95e04a54854b7382153c3e86e36fbf77e7731a368b38942184b9c332c789cb8df97b8e7cefdedef4584f94a08bc4c2b7807cd682dc34f6a5a06240d2e99b1e22d45c0b034422916cf68c2cae0a33b9422747d96719810f0d9ea12ffd67"}, {@broadcast, @device_a, 0x64, "7fd06cad1377c5e2ae1e603fe4304cb029e8dff1e66af263a24284aed8490fe34d81f998967e60e4c21e9e4e1104d516a3bdcbad7d723a483562797e5f72c71c46d8804726a2a11fc0cd65714e33d5f4265e5d9e33fb792d9f40bcaac34223409bd90ccf"}]}, 0x172) [ 3195.062388][T23407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.084821][T23392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.096905][T23396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.118143][T23409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0c0080fcfe1f317023757df000be52493ec6a9fb184da52f2bd9bc9f17663ccc8c8a1f60c617acf4594d837988dd9499f4a999285ef773f814184d5fcf9d3185ee4469fcb7b15b1ff22464a57453d4061d28240c4d77c8caea45263b800e9b32aa59a14dec068912aead1d6eab81129b02210fc674bbc1ff97e998f349c6c09ee312d4ad86ea7cf1bde741ec0043d44532e4baf539c5e52fb238331e1c02aaca218b53e94aec43a860f78606f5dddd96796dc0cf76f2d0"], 0x30}}, 0x4000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x85, 0x1fe, 0x8}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000030000000000000000f70f4dd90ed65dabc976180000000000b477a53846dee1fb42ddd34015f00e73ffa7fe2793c0fd566a8895e0e700b9755f7aefa5fb876ffec4154efb6c371e03ad1cc00a6c7a8cf12fb34030d359ae884734288287a1000c988c58fbbfaddaade4c2246f61553435573139a8fd31", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a0007609000008009f0004000000080026006c0900000800a100b6dc0000"], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a0007609000008009f0004000000080026006c0900000800a100b6dc0000"], 0x48}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="200028bd7000fbdbdf2555000000080001004e00000008000300", @ANYRES32=r9, @ANYBLOB="f677bbc8918e2b01c3dcfc16938012e22700e83a872f794c13e1fbd516ac9a1d980fb29ac104e4dd7c4d70532b050000000000001d476a123ee823b960c23121d47b915dcbe040b84ef7d597330bbd2fad38bba071bb963c6bb231e012dbd17797b514e523df6f19d2a87f9cabeb8fa3bf53bf5f7792d6ff0f2c70aba9a3b6228c393f0000e994889e5d8508a5c2"], 0x24}, 0x1, 0x0, 0x0, 0x20044004}, 0x44044) [ 3195.169026][T23411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.202493][T23414] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:12:37 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xffffff7f00000000}, 0x0) [ 3195.214036][T23407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:37 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000200)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @broadcast, {0x0, 0x40}}, @a_msdu=[{@device_a, @device_a, 0xcd, "d48b8993efe5f619df33c07ba5482c457a5cf2892157e25581f8679825dc19bb4bea37a4e3077d02b71c0a716dba0212da225acb9450dcc64e3dfe13ab02dde09c9bfed974932ee06051f429581580f88a10ef597b00aec593ad8d9a78778c3e3f17bdd573afb1c9dcd95ebafc45eb22c423acc9a456131c3dbf8e066575105da9bb50d7a995c92597fcd6a18ee383e6fc3c94e70a6e3dfee8f41c52fbd7134cbca15964024944c69648c5ca60f292628d06be7717be3d4c02513bb9817ae58145afd64bed9f8657c8bccb7630"}, {@device_a, @device_a, 0xc6, "34f5c84fa743bb989abad0d70543139a754f96ebbd76725c5682e669d3e4d107e4e74c17ecbb7194fe3caa7807556dcbc3a57244861f8d8b43df1866e5b64bee35e5d9006ae6e20c01a92e2cfee4add723934cd20aeeab92a3b70bc8b1b34ac1a4ea907d4739f6dd16915e1cd27e683ed0739f2dc8dfe829994f42df775a3544c7a65540ed01ae7ffd4082c6cbd5f8071fe743c86e774866eaec417ed73341c845682feba400b6e718a552405a549a293ff2929f88d8c785e85cd062463f70cdafc9c8a34bde"}, {@device_b, @device_a, 0x9e, "22a57b756d156d19c743f161162bfb38ede7121ea508d02ce7a72955447d15896404a47330fa31184b36028793d6e436c1634f1754b8c8b3bbc309b2b1f50475777bdb8eb5fc96c78f0afd0f15d9ab5290c61d4c36bfabb8f1bac866deda8f2ee72b928592abcf70ed7b65fc07b875a69b8ad7fa7e6854936a6e5698b498ad692160ad7528bbbf75b4647f50771101eaf7d6bd018c37fded4b6495a30ef2"}, {@broadcast, @device_a, 0xc9, "a7facd243327fe717721fd9316512fe97e61aab1fef367f141ecbf67ed1f3374442fc0ce5a953b3706e0e14078e6cbf2114f54f9a8099aaac4f841cd82111d98927e2bffea4b3668a7b7d3f189120d426c2fbc830b86e37c4e270584fb07d34026dc0bcb893e5cd12b3f5f7237f7382674ff7e05c794c7f1b6f5c3b996b06573515ebcc6a5a09659f3311ddbd085a9efc73854a6fabca24a1ec55364eb9c3674adc11009a05d508d2f4aadcba6045affc18af2917ed2fe48fbf70af5fd4e67d96909d71810bb3afe8f"}, {@device_a, @broadcast, 0x8e, "dabef512986a4687acb9b1ff58f32f28157059402d3e9f810af5ad617064239aebffe83b5cb087c55ca73be811ccd2c1fc1ad19c028693d809da08ff65757667bc8d9aaedeb4704a14bae30b1f393e8f59855749244f234379867ecc309f7f5304e9c03364a6a85a00211a13e28b6ea5e4af9fe873e8467a138856569cf9d94ac3d1e3542316906793705e85cd64"}]}, 0x3ee) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3195.264393][T23409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.325285][T23422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.343479][T23414] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3195.366139][ T9077] device hsr_slave_0 left promiscuous mode [ 3195.375091][ T9077] device hsr_slave_1 left promiscuous mode [ 3195.410619][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3195.418554][ T9077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3195.421689][T23427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.448434][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3195.456283][ T9077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3195.467939][ T9077] device bridge_slave_1 left promiscuous mode [ 3195.476394][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 3195.478076][T23431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.501854][ T9077] device bridge_slave_0 left promiscuous mode [ 3195.508362][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 3195.524621][T23433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.547866][ T9077] device veth1_macvtap left promiscuous mode [ 3195.559932][ T9077] device veth0_macvtap left promiscuous mode [ 3195.570610][ T9077] device veth1_vlan left promiscuous mode 18:12:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x40030000000000}, 0x0) [ 3195.582140][ T9077] device veth0_vlan left promiscuous mode [ 3195.603418][T23427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3195.982073][T23427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3196.018082][ T9077] team0 (unregistering): Port device team_slave_1 removed [ 3196.033276][T23431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3196.045476][T23433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3196.046886][ T9077] team0 (unregistering): Port device team_slave_0 removed [ 3196.081660][ T9077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3196.082423][T23433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3196.112333][ T9077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3196.234349][ T9077] bond0 (unregistering): Released all slaves [ 3196.326186][T23420] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3196.336202][T23420] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3196.429753][T23441] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3196.471387][T23441] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3199.225450][ T9077] device hsr_slave_0 left promiscuous mode [ 3199.232231][ T9077] device hsr_slave_1 left promiscuous mode [ 3199.238807][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3199.246641][ T9077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3199.266573][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3199.275154][ T9077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3199.284361][ T9077] device bridge_slave_1 left promiscuous mode [ 3199.291604][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 3199.299942][ T9077] device bridge_slave_0 left promiscuous mode [ 3199.306875][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 3199.318121][ T9077] device veth1_macvtap left promiscuous mode [ 3199.324821][ T9077] device veth0_macvtap left promiscuous mode [ 3199.331084][ T9077] device veth1_vlan left promiscuous mode [ 3199.337065][ T9077] device veth0_vlan left promiscuous mode [ 3199.510330][ T9077] team0 (unregistering): Port device team_slave_1 removed [ 3199.524888][ T9077] team0 (unregistering): Port device team_slave_0 removed [ 3199.537225][ T9077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3199.553846][ T9077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3199.620297][ T9077] bond0 (unregistering): Released all slaves [ 3200.577500][T23471] chnl_net:caif_netlink_parms(): no params data found [ 3200.769175][T23471] bridge0: port 1(bridge_slave_0) entered blocking state [ 3200.791860][T23471] bridge0: port 1(bridge_slave_0) entered disabled state [ 3200.809257][T23471] device bridge_slave_0 entered promiscuous mode [ 3200.830566][T23471] bridge0: port 2(bridge_slave_1) entered blocking state [ 3200.847343][T23471] bridge0: port 2(bridge_slave_1) entered disabled state [ 3200.877107][T23471] device bridge_slave_1 entered promiscuous mode [ 3201.042961][T23471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3201.085047][T23471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3201.194503][T23471] team0: Port device team_slave_0 added [ 3201.278639][T23471] team0: Port device team_slave_1 added [ 3201.285952][T23478] chnl_net:caif_netlink_parms(): no params data found [ 3201.376472][T23471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3201.386171][T23471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3201.427797][T23471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3201.454484][T23471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3201.467421][T23471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3201.503300][T23471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3201.586122][T23478] bridge0: port 1(bridge_slave_0) entered blocking state [ 3201.600256][T23478] bridge0: port 1(bridge_slave_0) entered disabled state [ 3201.617236][T23478] device bridge_slave_0 entered promiscuous mode [ 3201.626892][T23471] device hsr_slave_0 entered promiscuous mode [ 3201.643938][T23471] device hsr_slave_1 entered promiscuous mode [ 3201.650395][T23471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3201.669263][T23471] Cannot create hsr debugfs directory [ 3201.676227][T23478] bridge0: port 2(bridge_slave_1) entered blocking state [ 3201.690244][T23478] bridge0: port 2(bridge_slave_1) entered disabled state [ 3201.699334][T23478] device bridge_slave_1 entered promiscuous mode [ 3201.804182][T23478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3201.857355][T23478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3201.969218][T23478] team0: Port device team_slave_0 added [ 3201.998314][T23478] team0: Port device team_slave_1 added [ 3202.058191][T23478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3202.075951][T23478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3202.110323][T23478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3202.138843][T23471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3202.159818][T23478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3202.168375][T23478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3202.202264][T23478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3202.228641][T23471] 8021q: adding VLAN 0 to HW filter on device team0 [ 3202.249514][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3202.268282][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3202.291053][ T8373] Bluetooth: hci4: command 0x0409 tx timeout [ 3202.314968][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3202.330366][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3202.339827][T21825] bridge0: port 1(bridge_slave_0) entered blocking state [ 3202.347051][T21825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3202.364516][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3202.378599][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3202.394070][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 3202.401225][T21825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3202.415928][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3202.425838][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3202.482092][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3202.490596][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3202.506470][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3202.517512][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3202.534060][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3202.547388][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3202.559383][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3202.574018][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3202.586312][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3202.601267][T23478] device hsr_slave_0 entered promiscuous mode [ 3202.615386][T23478] device hsr_slave_1 entered promiscuous mode [ 3202.623900][T23478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3202.637305][T23478] Cannot create hsr debugfs directory [ 3202.647500][T23471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3202.665163][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3202.738230][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3202.750050][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3202.778076][T23471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3202.914591][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3202.930600][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3202.941136][ T8373] Bluetooth: hci6: command 0x0409 tx timeout [ 3202.964897][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3202.974500][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3202.984948][T23471] device veth0_vlan entered promiscuous mode [ 3203.001893][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3203.009912][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3203.034296][T23471] device veth1_vlan entered promiscuous mode [ 3203.086654][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3203.096701][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3203.112216][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3203.120631][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3203.141978][T23478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3203.150161][T23471] device veth0_macvtap entered promiscuous mode [ 3203.166595][T23471] device veth1_macvtap entered promiscuous mode [ 3203.190481][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3203.199496][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3203.208568][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3203.217908][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3203.228263][T23478] 8021q: adding VLAN 0 to HW filter on device team0 [ 3203.246042][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3203.257826][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.277545][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3203.289136][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.306035][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3203.318769][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.337307][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3203.350420][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.367553][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3203.380322][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.396855][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3203.408724][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.430573][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3203.447804][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.458470][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3203.478668][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.490459][T23471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3203.531744][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3203.548107][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3203.557505][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3203.576696][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3203.593714][T10711] bridge0: port 1(bridge_slave_0) entered blocking state [ 3203.600874][T10711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3203.616021][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3203.626354][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3203.640718][T10711] bridge0: port 2(bridge_slave_1) entered blocking state [ 3203.647874][T10711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3203.662792][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3203.676642][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3203.690303][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3203.711244][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.728381][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3203.750815][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.767648][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3203.780397][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.796389][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3203.807364][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.824075][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3203.837493][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.853935][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3203.868586][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.886223][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3203.905316][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.916687][T23471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3203.933776][T23471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3203.948441][T23471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3203.968037][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3203.983454][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3203.998921][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3204.009043][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3204.024642][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3204.052211][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.058560][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.075337][T23478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3204.096970][T23478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3204.118151][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3204.129931][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3204.145272][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3204.156733][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3204.169075][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3204.180616][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3204.197296][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3204.236437][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3204.249302][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3204.258481][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3204.276007][T23478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3204.370979][T19272] Bluetooth: hci4: command 0x041b tx timeout [ 3204.422823][T32511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3204.431610][T32511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3204.445304][T19272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3204.506050][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3204.527546][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3204.564298][T13361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3204.589770][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3204.606877][T13361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3204.618413][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3204.641862][T23478] device veth0_vlan entered promiscuous mode [ 3204.659899][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3204.670238][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3204.685403][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3204.702695][T23478] device veth1_vlan entered promiscuous mode [ 3204.766763][T24147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3204.808045][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3204.820521][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3204.830595][T24148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3204.859199][T24147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3204.871798][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3204.919986][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3204.948598][T23478] device veth0_macvtap entered promiscuous mode [ 3204.976489][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3204.998908][T23478] device veth1_macvtap entered promiscuous mode [ 3205.011046][T19272] Bluetooth: hci6: command 0x041b tx timeout [ 3205.038488][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3205.050725][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.068959][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3205.087277][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.107303][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3205.127785][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.138763][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3205.156696][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.167549][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 18:12:47 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @device_a, @initial, {0x0, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) 18:12:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000200)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1}, {0x5e00}, @device_b, @device_b, @random="fb158898b419", {0x0, 0x6}}, @ver_80211n={0x0, 0x1d5c, 0x3, 0x1, 0x0, 0x2, 0x1}}, 0x0, 0x1, 0xf27, @val={0x10, 0x1, 0xfc}, [{0xdd, 0x43, "782dc41208e1fa638bbca6a266e6db9f757ab5e5d2244092c26bbd1493645c98df49519048ba784ea16fb9e28f935ca1fa4120467d4fa2ecaf11c19b81c6d4c9675403"}, {0xdd, 0xae, "b99299113a177a9ac0df0179117bf2da5b0dda51982b14cd824562e63cd7e56033ab10b79749e69ae183146acbb078563e8fd90b925b19e4b6809062ed545bfe238a2a90af24dfad73fa50c35e373afd475c01323e62ebb686c0efd45d7474c66fe23ac7377bea61c119ad1a17e0198e702cf9ec4ee2ccd3d53c534c2c467482cd1c1693a21728a9b7098e0952ef47fa182e15d46ef9208f432672f4ceecdbbfa020b37a5521e18af34758b2e43b"}, {0xdd, 0xfa, "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"}, {0xdd, 0xd3, "52244fa45eed9734d1dc9f7bdf0dcc89602d10e92d20b20b2318f314aad8ebfc8acfd7b1d3d94ca651211d0e61eca160b0edece77a8b685f9f5c586a050c0dfdb3d012ba9f39e5560aeb76144af0ba2c2ca8105a43903e7f91854755844fdf976967416182f4e8f4a943456618fed39d12f8a0c6812de9d992573da92695cf88936c0c61227229ce0e557f6dc9b1c4cbf9d5c7dbac3ffb46901afefde031f597f908d651630b5798786921db6409a64ac95e11daae4bc0d87a843f02f1f58ce99d39ef329916475aee70a0be51ac66a3319066"}, {0xdd, 0xf5, "d9046f5747c0f0b641e7923439ce0f2fb48a00fe9d0a1cb452522b9922e5ad8f9feb10deead4f9963caff3e8c5c577cbf76b621fd67dda9106e4b4c206896b9669829693f54d96f7eee617d15a09d57c037fdff9544661d71e607f58eced4576f1754f082bac18b4dce85ac91b02bbe88488eee283cb5fd3f8e9bd53f0c534f55ac7e0fe33cfc62f2cf2abd03f213205f12761c633954f099376d5d6bf090a7c95d4c3d42e4d8c07d4ee4651439081888157e57c8ddce02c3d46d989abe61f863a335fc119f1b61bda6d246f88140c19207d2fb2515eec34e9a65cd0567db27325e64a67545b9cf83ba4870422982121f63c75ae30"}]}, 0x3e2) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) 18:12:47 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xffffffff00000000}, 0x0) 18:12:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0080"], 0x30}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r4, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0x40000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 18:12:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) [ 3205.186126][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.198284][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3205.226595][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.295453][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3205.346701][T24159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.367984][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.383770][T24160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.401728][T24161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.423626][T24163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.442992][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3205.456349][T24159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.476600][T24164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.503752][T24159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.524336][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.564077][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3205.600800][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.627728][T23478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3205.645785][T24152] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3205.656646][T24152] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3205.666389][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3205.688800][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3205.723651][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3205.757890][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.776691][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3205.789545][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3205.809110][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3205.830489][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:12:48 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYBLOB="483d0600505050505050ffffffffffff09024b0e390f86dd"], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @device_a, @initial, {0x0, 0x4}}, @ver_80211n={0x0, 0x21ba, 0x1, 0x0, 0x0, 0x3}}, @tdls_setup_resp={0xc, 0x1, 0xd, 0x1b, @val=0x1, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}, 0x37) [ 3205.870128][T24159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.887363][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3205.925334][T24153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.938066][T24159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.961783][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:12:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {}, @broadcast, @device_b}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) readv(r4, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/29, 0x1d}], 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x28, "8a2f1a3928e3412c1f168324078d0e6e6269b4c052d78b072bf7eebd55ec62786202c53efdac330a"}, &(0x7f0000000380)=0x30) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000300)=0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0', "0f08df2c161b6c7196849f28b185be19172dc2b33fa13e07f4dd02f70da44fef620e40415c8badbd9926995a350685e9ce14721024d7f7457538804ebb2d0a56bee15725da5abecd35b867caa4b6df15338e25b54b26f68b44965b035131edb812a6efa868298b5c4636b37da8fa29992198fb9834b10e58a2c5fcec0e6562529ed0ab822e8fa850531cf61972608400d5d55feeae63b56855cf64cd702137b46e5b803ac16d43eee568e43de728e8197807e2a4e173db73dbc073625a1aa060262b12daf6ee15f2b0e958b07f525fc4039e8935783767e30f9532fd9a"}, 0xe1) [ 3205.984026][T24175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3206.020416][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3206.097395][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.124670][T24175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3206.159117][T24180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3206.175627][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3206.216162][T24181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3206.240717][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.253900][T24180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3206.286480][T24180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3206.301909][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3206.354385][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.395886][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3206.418571][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.437227][T23478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3206.450976][T23465] Bluetooth: hci4: command 0x040f tx timeout [ 3206.459171][T23478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.509792][T23478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3206.570248][T24171] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3206.617605][T24171] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3206.702420][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3206.722018][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3207.019728][T32525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3207.050506][T32525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3207.091034][T23465] Bluetooth: hci6: command 0x040f tx timeout [ 3207.136124][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3207.173773][T32525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3207.224730][T32525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3207.283321][T24180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.334604][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3207.343853][T24181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.369010][T24214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.411913][T24216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.511355][T24220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.566712][T24223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.611412][T24226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.678324][T24227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.703372][T24220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.752486][T24220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.801930][T24223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.831758][T13361] device hsr_slave_0 left promiscuous mode [ 3207.848687][T13361] device hsr_slave_1 left promiscuous mode [ 3207.902544][T13361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3207.953933][T13361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3208.001422][T13361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3208.040820][T13361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3208.093055][T13361] device bridge_slave_1 left promiscuous mode [ 3208.120165][T13361] bridge0: port 2(bridge_slave_1) entered disabled state [ 3208.150012][T24220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.174722][T13361] device bridge_slave_0 left promiscuous mode [ 3208.199209][T24223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.211816][T24220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.227301][T13361] bridge0: port 1(bridge_slave_0) entered disabled state [ 3208.244356][T24226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.257989][T24223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.283242][T24227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.295467][T24226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.318012][T13361] device veth1_macvtap left promiscuous mode 18:12:50 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000540)=ANY=[@ANYRES64=r1], 0x18) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) 18:12:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = syz_mount_image$xfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0xf99, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="aae830be08278606d013121e52a02555a9f5bf5fe496926f3da1865da64fdbf3c8149e6a30f5919624c3e107cec84b52630ddd6e8aa892661e7ce9b4ce7383f3c2cab182a0afa60801ee01c1adead2213bca176d1334f371266d48ef2e0079a9b6255c8644e347ba9169549b47a0e989e1e0ca88b466fd0a", 0x78, 0x5287}, {&(0x7f0000000480)="d9385d5deb7e77eb43fee158ad9520ca44985bbc0e55f772bf14d1ef10bc79ca0c3f183276b8e7c40ebc82167395212d752b7c0954d1e30dd13a396cf08c8ccbc2afc4727a6589c98e304ed5db5cbe566966b29fe257b98e6323389b7b5d7eaf210b2dab94795249740651514fb98f13cb7867f994d6dec9d8d67c6f4a1763556cabef420ec42edb4149af186608bc5536a2cc8bbdf5e89b39c2287adacc61661a0ef2ef523b0e9ab3dd6d8f67d1281da4cd3aa7eb69238f723be6eeaf067419637e43d929177279e06b", 0xca, 0x9}], 0x1000000, &(0x7f0000000580)={[{@dax}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) fstatfs(r4, &(0x7f00000005c0)=""/248) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRES16=r1, @ANYRESOCT, @ANYRES32, @ANYBLOB="0c008027cc1359a17204a9ca66a1b420fdcae2add54f88cb5d52fc4270984bc609beef8ae17d624efb5ddda4a195daf88a198304499d50d71a77bbbd4e0fbbeaa21291fa7f3bbaf6bd8396bae5c68cb29553c7ae41f7dd0aa27aab982ef17d13d481835fed0a04233fc7a322e84658e275a98ce9237c792364674fd139c5a16355df27600396313052d0543573282ee7f1924d6fb908174a5e83f780f1a052978a5b1fa96ddf"], 0x30}}, 0x20000880) 18:12:50 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0xffffffff89a00000}, 0x0) 18:12:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x100000000000000}, 0x0) [ 3208.347084][T13361] device veth0_macvtap left promiscuous mode [ 3208.379278][T13361] device veth1_vlan left promiscuous mode 18:12:50 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) [ 3208.442860][T13361] device veth0_vlan left promiscuous mode [ 3208.496681][T24250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.510368][T24248] loop4: detected capacity change from 0 to 82 [ 3208.539176][T24254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.556637][T24256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.601854][T24248] xfs: Unknown parameter 'rootcontext' [ 3208.623561][T24258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.633749][T24259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.013474][T24250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.024349][T24259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:51 executing program 0: syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x10) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="c400199e710009021100"], 0xa) 18:12:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000240)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x1}, {0x6}, @from_mac=@broadcast, @device_b, @device_a, {0x6, 0x66}}, {0x8, 0x1, 0x1, 0x0, 0x8}}, {@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1}, {0x6}, @broadcast, @device_b, @from_mac=@device_b, {0x5, 0xeb}, @broadcast}, {0x7, 0x1, 0x0, 0x1, 0x5}}}, @ver_80211n={0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x33c) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xffffffff7fffffff) [ 3209.171072][T23465] Bluetooth: hci6: command 0x0419 tx timeout [ 3209.312552][T24261] loop4: detected capacity change from 0 to 82 [ 3209.319654][T24261] xfs: Unknown parameter 'rootcontext' [ 3209.355779][T24271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.372305][T24273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.395421][T24276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.429883][T24277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.452781][T24278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.469651][T24279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.513249][T24280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:12:52 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000026c0)={0x0, 0xffffffffffffffff, 0xf0, 0x1, @scatter={0x7, 0x0, &(0x7f0000002480)=[{&(0x7f0000000000)=""/114, 0x72}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000002380)=""/251, 0xfb}, {&(0x7f00000002c0)=""/9, 0x9}]}, &(0x7f0000002500)="6f8ee385f57f9f29628fefac7f45e5f668e0e1679a839a3e299cff264d6b044dbd31073c675a5266bd54e18b248d9ecccf7e096da9318e6a952d36265d925c5a91b829bf9a665c88e4936a16c11bfc5d5e029a6d84e4f264f50006c772796a9a719df2bf8bc4e5255d7eb8a5512925fa44c6763ea3648f36165ec0552ae8e03cdbc8b1742af734a0ef9846cc843a16ad0f4256f5cc34e64d31b08290100855b4dfabec1daa4c7f45a697d6095bdcd725072cadba6ad64b8f21e14e3bf265bf0df3b303b583fb7ee21b11b6f90e17091d0b066c879b62f100467afc78f725f50dd472084994a69867633485f547d3b17e", &(0x7f0000002600)=""/144, 0x8, 0x10, 0x3, &(0x7f0000000300)}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000002840)={0xf8, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x18, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}, {0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x4}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xac, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa1, 0x1, "3bc090dbf8757c7d1a4c5c5255082a627c5f83fedfec36d03a00cf45788eefb7f27ea9fa287fd093c7ce8b039ec588c77b646e05cb90ac27f9fa40a0f6af612146a984664c151f86009b36b00591ea8d033cb6ad40b1217d43446d0e016aea12377ec20317015c3be824b01164aaf15dbb75238296050181c1247004aadd3240afaf2aa1736aa2b214462d3720b6d604343befb6e0f78d6acaa994cf13"}}]}]}, 0xf8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="a17ade98373df809ca78e1ac00055acf4d1c972a66f7", @ANYBLOB="6fbdb4dfdf0000000000550040000800010000200080080003008550e5f04acea7fc5e76a975c6ff8c1dbc530d142cbaaa05fa5b908a16dece1b6f495a729060783494e3218e9e31eef96a0e1662a26a5489ab7f495cf0b7ed1fee194b6977e69ae7773c738d1dde9280548e8aa79f92baa6f165bb36ea14bf95c5bbaaafdbafa36599f33dbee6a8e14b66d9f44b43ee913a1d71b453eac2e01eb259b2b3a554cda443a8629c224161fd99", @ANYRES32=r0, @ANYBLOB="0c0080", @ANYRES32], 0x30}}, 0x0) 18:12:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6f6c000000000000000055000000080001000020008008000300", @ANYRES32, @ANYBLOB="0c0090"], 0x30}}, 0x0) [ 3209.897948][T24273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.939463][T24277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.953989][T24273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3209.969819][T13361] team0 (unregistering): Port device team_slave_1 removed 18:12:52 executing program 0: syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x34) [ 3210.039199][T13361] team0 (unregistering): Port device team_slave_0 removed [ 3210.101939][T13361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3210.136697][T24293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3210.179367][T13361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3210.374030][T13361] bond0 (unregistering): Released all slaves [ 3210.466564][T24245] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3210.471886][T24271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3210.481979][T24245] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3210.502971][T24293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3210.542901][T24276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3210.554127][T24280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3210.564876][T24278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3212.675205][T24305] chnl_net:caif_netlink_parms(): no params data found [ 3212.753434][T24305] bridge0: port 1(bridge_slave_0) entered blocking state [ 3212.760672][T24305] bridge0: port 1(bridge_slave_0) entered disabled state [ 3212.771506][T24305] device bridge_slave_0 entered promiscuous mode [ 3212.782305][T24305] bridge0: port 2(bridge_slave_1) entered blocking state [ 3212.789889][T24305] bridge0: port 2(bridge_slave_1) entered disabled state [ 3212.800205][T24305] device bridge_slave_1 entered promiscuous mode [ 3212.837757][T24305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3212.863987][T24305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3212.926917][T24305] team0: Port device team_slave_0 added [ 3212.944993][T24305] team0: Port device team_slave_1 added [ 3212.984409][T24305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3213.002582][T24305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3213.041945][T24305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3213.061136][T24305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3213.068378][T24305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3213.109287][T24305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3213.156581][T24305] device hsr_slave_0 entered promiscuous mode [ 3213.175776][T24305] device hsr_slave_1 entered promiscuous mode [ 3213.189327][T24305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3213.197710][T24305] Cannot create hsr debugfs directory [ 3213.306592][T24305] bridge0: port 2(bridge_slave_1) entered blocking state [ 3213.313722][T24305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3213.321212][T24305] bridge0: port 1(bridge_slave_0) entered blocking state [ 3213.328271][T24305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3213.398641][T24305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3213.421841][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3213.430844][T21825] bridge0: port 1(bridge_slave_0) entered disabled state [ 3213.445925][T21825] bridge0: port 2(bridge_slave_1) entered disabled state [ 3213.456531][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3213.477906][T24305] 8021q: adding VLAN 0 to HW filter on device team0 [ 3213.498206][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3213.516579][T21825] bridge0: port 1(bridge_slave_0) entered blocking state [ 3213.523728][T21825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3213.547311][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3213.561966][T10711] bridge0: port 2(bridge_slave_1) entered blocking state [ 3213.569231][T10711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3213.599397][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3213.616544][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3213.638594][T24305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3213.657643][T24305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3213.677222][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3213.687223][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3213.702959][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3213.731570][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3213.739179][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3213.747900][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3213.757421][T24305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3213.826764][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3213.837052][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3213.860684][T24305] device veth0_vlan entered promiscuous mode [ 3213.868880][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3213.885959][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3213.903822][T24305] device veth1_vlan entered promiscuous mode [ 3213.912062][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3213.922337][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3213.930451][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3213.957053][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3213.966213][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3213.976133][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3213.987174][T24305] device veth0_macvtap entered promiscuous mode [ 3213.998717][T24305] device veth1_macvtap entered promiscuous mode [ 3214.017307][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3214.031688][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.042608][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3214.054333][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.065130][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3214.076806][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.087339][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3214.098419][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.109168][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3214.121470][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.134705][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3214.146207][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.157459][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3214.168763][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.179856][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3214.190984][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.202324][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3214.214637][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.227719][T24305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3214.239136][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3214.249271][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3214.258200][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3214.267751][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3214.280022][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3214.294807][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.306182][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3214.317084][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.330548][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3214.342010][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.353744][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3214.365543][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.376674][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3214.387877][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.398728][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3214.409846][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.420740][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3214.432679][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.444135][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3214.455973][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.466515][T24305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3214.478539][T24305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3214.490612][T24305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3214.502317][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3214.513538][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3214.531199][T23465] Bluetooth: hci4: command 0x0409 tx timeout [ 3214.609883][T32533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3214.627182][T32533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3214.649776][T28627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3214.690720][ T9077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3214.706849][ T9077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3214.727528][T28627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3214.793712][T24648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3214.819728][T24648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3214.892697][T24648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3215.723050][T32525] device hsr_slave_0 left promiscuous mode [ 3215.757275][T32525] device hsr_slave_1 left promiscuous mode [ 3215.781968][T32525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3215.789466][T32525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3215.823155][T32525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3215.830581][T32525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3215.883177][T32525] device bridge_slave_1 left promiscuous mode [ 3215.889389][T32525] bridge0: port 2(bridge_slave_1) entered disabled state [ 3215.932424][T32525] device bridge_slave_0 left promiscuous mode [ 3215.939320][T32525] bridge0: port 1(bridge_slave_0) entered disabled state [ 3215.991934][T32525] device veth1_macvtap left promiscuous mode [ 3215.998018][T32525] device veth0_macvtap left promiscuous mode [ 3216.031204][T32525] device veth1_vlan left promiscuous mode [ 3216.037110][T32525] device veth0_vlan left promiscuous mode [ 3216.250609][T32525] team0 (unregistering): Port device team_slave_1 removed [ 3216.277984][T32525] team0 (unregistering): Port device team_slave_0 removed [ 3216.294888][T32525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3216.308418][T32525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3216.381331][T32525] bond0 (unregistering): Released all slaves [ 3218.686806][T24669] chnl_net:caif_netlink_parms(): no params data found [ 3218.778564][T24669] bridge0: port 1(bridge_slave_0) entered blocking state [ 3218.796200][T24669] bridge0: port 1(bridge_slave_0) entered disabled state [ 3218.809685][T24669] device bridge_slave_0 entered promiscuous mode [ 3218.824768][T24669] bridge0: port 2(bridge_slave_1) entered blocking state [ 3218.837470][T24669] bridge0: port 2(bridge_slave_1) entered disabled state [ 3218.848293][T24669] device bridge_slave_1 entered promiscuous mode [ 3218.888924][T24669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3218.909490][T24669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3218.969113][T24669] team0: Port device team_slave_0 added [ 3218.978100][T24669] team0: Port device team_slave_1 added [ 3219.027880][T24669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3219.036457][T24669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3219.072435][T24669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3219.090875][T24669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3219.107843][T24669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3219.143113][T24669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3219.189473][T24669] device hsr_slave_0 entered promiscuous mode [ 3219.204796][T24669] device hsr_slave_1 entered promiscuous mode [ 3219.216646][T24669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3219.226849][T24669] Cannot create hsr debugfs directory [ 3219.365480][T24669] bridge0: port 2(bridge_slave_1) entered blocking state [ 3219.373718][T24669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3219.381548][T24669] bridge0: port 1(bridge_slave_0) entered blocking state [ 3219.388572][T24669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3219.458402][T24669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3219.477299][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3219.486885][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 3219.495753][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 3219.505147][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3219.519880][T24669] 8021q: adding VLAN 0 to HW filter on device team0 [ 3219.531387][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3219.539691][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 3219.546910][ T5653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3219.572514][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3219.587843][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 3219.594894][T21825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3219.620469][T24669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3219.638312][T24669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3219.661271][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3219.670620][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3219.686104][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3219.696527][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3219.723644][T24669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3219.730632][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3219.741474][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3219.749109][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3219.775449][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3219.835925][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3219.852102][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3219.910689][T24669] device veth0_vlan entered promiscuous mode [ 3219.919572][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3219.934869][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3219.954606][T24669] device veth1_vlan entered promiscuous mode [ 3219.966604][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3219.977871][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3219.988973][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3220.020554][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3220.029708][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3220.045141][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3220.070397][T24669] device veth0_macvtap entered promiscuous mode [ 3220.089012][T24669] device veth1_macvtap entered promiscuous mode [ 3220.110224][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3220.128658][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.150501][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3220.168980][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.179392][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3220.196127][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.207060][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3220.227725][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.238302][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3220.255258][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.268948][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3220.285535][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.298768][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3220.315793][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.326819][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3220.343646][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.357162][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3220.383544][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.397933][T24669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3220.411490][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3220.420001][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3220.435809][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3220.446697][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3220.464892][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3220.484865][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.499001][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3220.515552][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.526453][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3220.541026][T23465] Bluetooth: hci4: command 0x0409 tx timeout [ 3220.544690][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.560645][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3220.579934][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.590478][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3220.607474][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.619414][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3220.636335][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.646970][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3220.663567][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.678498][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3220.696360][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.707827][T24669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3220.724686][T24669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.738037][T24669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3220.751908][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3220.760318][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3220.882828][T13361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3220.920359][T13361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3220.987829][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3221.008193][T13361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3221.035160][T13361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3221.055050][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3221.123500][T25014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3221.147615][T25014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3221.210623][T25014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3222.165116][T32533] device hsr_slave_0 left promiscuous mode [ 3222.172538][T32533] device hsr_slave_1 left promiscuous mode [ 3222.178871][T32533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3222.186364][T32533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3222.196042][T32533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3222.203695][T32533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3222.214903][T32533] device bridge_slave_1 left promiscuous mode [ 3222.221549][T32533] bridge0: port 2(bridge_slave_1) entered disabled state [ 3222.230254][T32533] device bridge_slave_0 left promiscuous mode [ 3222.238311][T32533] bridge0: port 1(bridge_slave_0) entered disabled state [ 3222.250089][T32533] device veth1_macvtap left promiscuous mode [ 3222.256805][T32533] device veth0_macvtap left promiscuous mode [ 3222.263010][T32533] device veth1_vlan left promiscuous mode [ 3222.268777][T32533] device veth0_vlan left promiscuous mode [ 3222.444548][T32533] team0 (unregistering): Port device team_slave_1 removed [ 3222.475924][T32533] team0 (unregistering): Port device team_slave_0 removed [ 3222.490296][T32533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3222.507155][T32533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3222.587640][T32533] bond0 (unregistering): Released all slaves [ 3251.666745][T25057] chnl_net:caif_netlink_parms(): no params data found [ 3251.755181][T25057] bridge0: port 1(bridge_slave_0) entered blocking state [ 3251.774913][T25057] bridge0: port 1(bridge_slave_0) entered disabled state [ 3251.787811][T25057] device bridge_slave_0 entered promiscuous mode [ 3251.800688][T25057] bridge0: port 2(bridge_slave_1) entered blocking state [ 3251.817016][T25057] bridge0: port 2(bridge_slave_1) entered disabled state [ 3251.826642][T25057] device bridge_slave_1 entered promiscuous mode [ 3251.869401][T25057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3251.890051][T25057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3251.952688][T25057] team0: Port device team_slave_0 added [ 3251.960780][T25057] team0: Port device team_slave_1 added [ 3252.005500][T25057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3252.018468][T25057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3252.052123][T25057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3252.072037][T25057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3252.079010][T25057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3252.114465][T25057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3252.167242][T25057] device hsr_slave_0 entered promiscuous mode [ 3252.177232][T25057] device hsr_slave_1 entered promiscuous mode [ 3252.189209][T25057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3252.199842][T25057] Cannot create hsr debugfs directory [ 3252.345896][T25057] bridge0: port 2(bridge_slave_1) entered blocking state [ 3252.353020][T25057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3252.360325][T25057] bridge0: port 1(bridge_slave_0) entered blocking state [ 3252.367456][T25057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3252.446195][T25057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3252.469162][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3252.484328][T21825] bridge0: port 1(bridge_slave_0) entered disabled state [ 3252.496587][T21825] bridge0: port 2(bridge_slave_1) entered disabled state [ 3252.507721][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3252.530105][T25057] 8021q: adding VLAN 0 to HW filter on device team0 [ 3252.549679][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3252.566004][T21825] bridge0: port 1(bridge_slave_0) entered blocking state [ 3252.573544][T21825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3252.608095][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3252.631898][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 3252.639133][T21825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3252.655679][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3252.668412][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3252.686239][T25057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3252.708057][T25057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3252.729432][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3252.746508][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3252.757889][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3252.787772][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3252.796091][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3252.810179][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3252.820365][T25057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3252.917038][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3252.928649][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3252.957663][T25057] device veth0_vlan entered promiscuous mode [ 3252.970765][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3252.980909][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3253.000304][T25057] device veth1_vlan entered promiscuous mode [ 3253.011775][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3253.019378][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3253.037995][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3253.067354][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3253.075984][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3253.092127][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3253.102967][T25057] device veth0_macvtap entered promiscuous mode [ 3253.123261][T25057] device veth1_macvtap entered promiscuous mode [ 3253.149323][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3253.166876][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.179982][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3253.197647][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.208116][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3253.225852][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.240469][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3253.257618][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.268751][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3253.286463][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.296867][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3253.313725][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.327009][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3253.350281][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.366738][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3253.377617][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.393759][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3253.407977][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.429006][T25057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3253.438505][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3253.456440][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3253.467510][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3253.479904][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3253.491071][ T8373] Bluetooth: hci4: command 0x0409 tx timeout [ 3253.499457][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3253.517767][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.528286][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3253.547700][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.559465][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3253.579251][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.590121][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3253.607575][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.618559][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3253.635888][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.649728][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3253.671371][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.688078][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3253.699584][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.716477][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3253.728370][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.748023][T25057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3253.767052][T25057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3253.778664][T25057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3253.796712][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3253.814169][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3253.949877][T13359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3253.992009][T13359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3254.059184][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3254.084119][T13359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3254.094367][T13359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3254.109358][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3254.173982][T25400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3254.198363][T25400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3254.267646][T25400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3255.167467][ T9077] device hsr_slave_0 left promiscuous mode [ 3255.180366][ T9077] device hsr_slave_1 left promiscuous mode [ 3255.189683][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3255.197644][ T9077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3255.206291][ T9077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3255.214411][ T9077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3255.224653][ T9077] device bridge_slave_1 left promiscuous mode [ 3255.231964][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 3255.240661][ T9077] device bridge_slave_0 left promiscuous mode [ 3255.247255][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 3255.262012][ T9077] device veth1_macvtap left promiscuous mode [ 3255.268081][ T9077] device veth0_macvtap left promiscuous mode [ 3255.274784][ T9077] device veth1_vlan left promiscuous mode [ 3255.280629][ T9077] device veth0_vlan left promiscuous mode [ 3255.444720][ T9077] team0 (unregistering): Port device team_slave_1 removed [ 3255.459119][ T9077] team0 (unregistering): Port device team_slave_0 removed [ 3255.474024][ T9077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3255.490183][ T9077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3255.560575][ T9077] bond0 (unregistering): Released all slaves [ 3257.908862][T25421] chnl_net:caif_netlink_parms(): no params data found [ 3258.004029][T25421] bridge0: port 1(bridge_slave_0) entered blocking state [ 3258.018417][T25421] bridge0: port 1(bridge_slave_0) entered disabled state [ 3258.030397][T25421] device bridge_slave_0 entered promiscuous mode [ 3258.045669][T25421] bridge0: port 2(bridge_slave_1) entered blocking state [ 3258.059436][T25421] bridge0: port 2(bridge_slave_1) entered disabled state [ 3258.074438][T25421] device bridge_slave_1 entered promiscuous mode [ 3258.115981][T25421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3258.136951][T25421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3258.196061][T25421] team0: Port device team_slave_0 added [ 3258.207700][T25421] team0: Port device team_slave_1 added [ 3258.248156][T25421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3258.266844][T25421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3258.300706][T25421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3258.320078][T25421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3258.327996][T25421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3258.363328][T25421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3258.416770][T25421] device hsr_slave_0 entered promiscuous mode [ 3258.429398][T25421] device hsr_slave_1 entered promiscuous mode [ 3258.444457][T25421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3258.456866][T25421] Cannot create hsr debugfs directory [ 3258.589854][T25421] bridge0: port 2(bridge_slave_1) entered blocking state [ 3258.597173][T25421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3258.604783][T25421] bridge0: port 1(bridge_slave_0) entered blocking state [ 3258.611838][T25421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3258.678962][T25421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3258.709500][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3258.718720][T21825] bridge0: port 1(bridge_slave_0) entered disabled state [ 3258.733928][T21825] bridge0: port 2(bridge_slave_1) entered disabled state [ 3258.746643][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3258.762015][T25421] 8021q: adding VLAN 0 to HW filter on device team0 [ 3258.783041][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3258.798515][T21825] bridge0: port 1(bridge_slave_0) entered blocking state [ 3258.805787][T21825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3258.838057][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3258.847798][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 3258.855083][ T5653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3258.888591][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3258.913394][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3258.927304][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3258.938089][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3258.953676][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3258.968881][T25421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3258.997616][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3259.009897][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3259.029309][T25421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3259.111373][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3259.120207][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3259.146215][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3259.160328][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3259.170060][T25421] device veth0_vlan entered promiscuous mode [ 3259.187488][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3259.197768][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3259.214778][T25421] device veth1_vlan entered promiscuous mode [ 3259.255728][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3259.271807][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3259.288832][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3259.298319][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3259.315195][T25421] device veth0_macvtap entered promiscuous mode [ 3259.334054][T25421] device veth1_macvtap entered promiscuous mode [ 3259.357083][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3259.373995][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.389661][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3259.406705][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.419030][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3259.436422][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.448153][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3259.465154][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.478130][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3259.497294][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.508837][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3259.526156][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.537126][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3259.554055][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.567219][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3259.586796][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.603978][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3259.617154][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.634844][T25421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3259.647448][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3259.665352][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3259.675948][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3259.688333][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3259.702788][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3259.720763][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.731153][ T8373] Bluetooth: hci4: command 0x0409 tx timeout [ 3259.741756][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3259.758848][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.769526][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3259.787009][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.799142][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3259.818482][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.829928][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3259.846830][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.857944][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3259.875100][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.887543][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3259.912079][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.927208][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3259.940452][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.956659][T25421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3259.967982][T25421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3259.988467][T25421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3260.001541][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3260.010078][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3260.138671][T32533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3260.148419][T32533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3260.171616][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3260.223465][T32533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3260.232289][T32533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3260.244200][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3260.326792][T25770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3260.360588][T25770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3260.438242][T25770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3261.332721][T13359] device hsr_slave_0 left promiscuous mode [ 3261.352568][T13359] device hsr_slave_1 left promiscuous mode [ 3261.359271][T13359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3261.373981][T13359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3261.385685][T13359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3261.396687][T13359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3261.408258][T13359] device bridge_slave_1 left promiscuous mode [ 3261.419553][T13359] bridge0: port 2(bridge_slave_1) entered disabled state [ 3261.436408][T13359] device bridge_slave_0 left promiscuous mode [ 3261.444978][T13359] bridge0: port 1(bridge_slave_0) entered disabled state [ 3261.460316][T13359] device veth1_macvtap left promiscuous mode [ 3261.469985][T13359] device veth0_macvtap left promiscuous mode [ 3261.480357][T13359] device veth1_vlan left promiscuous mode [ 3261.489081][T13359] device veth0_vlan left promiscuous mode [ 3261.667485][T13359] team0 (unregistering): Port device team_slave_1 removed [ 3261.680769][T13359] team0 (unregistering): Port device team_slave_0 removed [ 3261.697591][T13359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3261.712853][T13359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3261.783675][T13359] bond0 (unregistering): Released all slaves [ 3263.869659][T25792] chnl_net:caif_netlink_parms(): no params data found [ 3263.992926][T25792] bridge0: port 1(bridge_slave_0) entered blocking state [ 3264.008684][T25792] bridge0: port 1(bridge_slave_0) entered disabled state [ 3264.020775][T25792] device bridge_slave_0 entered promiscuous mode [ 3264.036648][T25792] bridge0: port 2(bridge_slave_1) entered blocking state [ 3264.047513][T25792] bridge0: port 2(bridge_slave_1) entered disabled state [ 3264.058865][T25792] device bridge_slave_1 entered promiscuous mode [ 3264.106649][T25792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3264.127437][T25792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3264.180228][T25792] team0: Port device team_slave_0 added [ 3264.197052][T25792] team0: Port device team_slave_1 added [ 3264.237598][T25792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3264.255108][T25792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3264.289563][T25792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3264.313709][T25792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3264.320648][T25792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3264.354702][T25792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3264.407444][T25792] device hsr_slave_0 entered promiscuous mode [ 3264.425761][T25792] device hsr_slave_1 entered promiscuous mode [ 3264.436936][T25792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3264.447732][T25792] Cannot create hsr debugfs directory [ 3264.576593][T25792] bridge0: port 2(bridge_slave_1) entered blocking state [ 3264.583937][T25792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3264.591326][T25792] bridge0: port 1(bridge_slave_0) entered blocking state [ 3264.598413][T25792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3264.669327][T25792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3264.689228][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3264.704836][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 3264.719059][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 3264.729690][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3264.749212][T25792] 8021q: adding VLAN 0 to HW filter on device team0 [ 3264.767094][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3264.780630][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 3264.787729][ T5653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3264.818692][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3264.830212][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 3264.837482][T21825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3264.868513][T25792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3264.906321][T25792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3264.928947][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3264.948194][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3264.957953][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3264.972585][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3264.998527][T25792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3265.007256][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3265.026937][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3265.047264][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3265.066426][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3265.137561][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3265.153645][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3265.179570][T25792] device veth0_vlan entered promiscuous mode [ 3265.194952][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3265.208807][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3265.232451][T25792] device veth1_vlan entered promiscuous mode [ 3265.240035][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3265.255900][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3265.266279][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3265.290958][T25792] device veth0_macvtap entered promiscuous mode [ 3265.307715][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3265.320118][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3265.338917][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3265.350229][T25792] device veth1_macvtap entered promiscuous mode [ 3265.365133][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3265.377964][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3265.399909][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3265.418478][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.437044][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3265.448383][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.464862][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3265.478284][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.492298][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 3265.498178][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3265.498700][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 3265.521419][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.539720][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3265.550824][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.567087][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3265.586846][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.597249][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3265.614281][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.627757][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3265.647999][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.660710][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3265.677639][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.689414][T25792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3265.705656][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3265.719549][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3265.731094][T19272] Bluetooth: hci4: command 0x0409 tx timeout [ 3265.747140][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3265.766250][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.780352][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3265.798264][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.809252][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3265.830726][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.848648][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3265.860402][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.877340][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3265.888379][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.907655][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3265.918988][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.938339][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3265.950147][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.966497][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3265.987183][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3265.998176][T25792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3266.015093][T25792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3266.027652][T25792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3266.046912][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3266.062230][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3266.190065][T13359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3266.245727][T13359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3266.288166][ T9077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3266.294284][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3266.300893][ T9077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3266.325662][T19272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3266.409114][T26136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3266.438304][T26136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3266.502582][T26136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3267.431581][T32525] device hsr_slave_0 left promiscuous mode [ 3267.441962][T32525] device hsr_slave_1 left promiscuous mode [ 3267.453355][T32525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3267.460768][T32525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3267.470299][T32525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3267.479481][T32525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3267.488636][T32525] device bridge_slave_1 left promiscuous mode [ 3267.496587][T32525] bridge0: port 2(bridge_slave_1) entered disabled state [ 3267.506293][T32525] device bridge_slave_0 left promiscuous mode [ 3267.513415][T32525] bridge0: port 1(bridge_slave_0) entered disabled state [ 3267.527425][T32525] device veth1_macvtap left promiscuous mode [ 3267.533914][T32525] device veth0_macvtap left promiscuous mode [ 3267.539931][T32525] device veth1_vlan left promiscuous mode [ 3267.546888][T32525] device veth0_vlan left promiscuous mode [ 3267.703352][T32525] team0 (unregistering): Port device team_slave_1 removed [ 3267.717168][T32525] team0 (unregistering): Port device team_slave_0 removed [ 3267.738339][T32525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3267.756665][T32525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3267.820632][T32525] bond0 (unregistering): Released all slaves [ 3269.960132][T26157] chnl_net:caif_netlink_parms(): no params data found [ 3270.074343][T26157] bridge0: port 1(bridge_slave_0) entered blocking state [ 3270.089247][T26157] bridge0: port 1(bridge_slave_0) entered disabled state [ 3270.098778][T26157] device bridge_slave_0 entered promiscuous mode [ 3270.113631][T26157] bridge0: port 2(bridge_slave_1) entered blocking state [ 3270.120791][T26157] bridge0: port 2(bridge_slave_1) entered disabled state [ 3270.140176][T26157] device bridge_slave_1 entered promiscuous mode [ 3270.188460][T26157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3270.207862][T26157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3270.259710][T26157] team0: Port device team_slave_0 added [ 3270.278772][T26157] team0: Port device team_slave_1 added [ 3270.327514][T26157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3270.338227][T26157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3270.374197][T26157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3270.393854][T26157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3270.405677][T26157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3270.438476][T26157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3270.487688][T26157] device hsr_slave_0 entered promiscuous mode [ 3270.503765][T26157] device hsr_slave_1 entered promiscuous mode [ 3270.510482][T26157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3270.526216][T26157] Cannot create hsr debugfs directory [ 3270.660777][T26157] bridge0: port 2(bridge_slave_1) entered blocking state [ 3270.668402][T26157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3270.675697][T26157] bridge0: port 1(bridge_slave_0) entered blocking state [ 3270.682743][T26157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3270.747186][T26157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3270.767544][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3270.783575][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3270.797633][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3270.806637][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3270.826065][T26157] 8021q: adding VLAN 0 to HW filter on device team0 [ 3270.843202][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3270.860214][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 3270.868170][T13979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3270.908891][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3270.918223][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 3270.925388][T21825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3270.941763][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3270.959184][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3270.982883][T26157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3270.999189][T26157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3271.024158][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3271.038069][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3271.046986][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3271.071424][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3271.094749][T26157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3271.108860][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3271.118553][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3271.208590][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3271.218919][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3271.239661][T26157] device veth0_vlan entered promiscuous mode [ 3271.250226][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3271.270463][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3271.284437][T26157] device veth1_vlan entered promiscuous mode [ 3271.297677][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3271.306096][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3271.320268][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3271.358328][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3271.370135][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3271.386360][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3271.398372][T26157] device veth0_macvtap entered promiscuous mode [ 3271.417789][T26157] device veth1_macvtap entered promiscuous mode [ 3271.438774][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3271.455876][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.470259][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3271.487112][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.499489][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3271.518964][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.529823][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3271.546825][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.557606][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3271.579097][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.590080][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3271.607582][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.617806][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3271.634254][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.646704][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3271.663590][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.678311][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3271.695278][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.708093][T26157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3271.724289][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3271.738596][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3271.748979][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3271.763879][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3271.779459][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3271.797327][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.808388][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3271.821085][ T8373] Bluetooth: hci4: command 0x0409 tx timeout [ 3271.827991][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.839263][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3271.855923][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.867373][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3271.885387][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.899183][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3271.917907][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.928921][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3271.945763][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.957059][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3271.974101][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3271.989561][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3272.006807][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3272.017602][T26157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3272.034898][T26157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3272.048335][T26157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3272.070201][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3272.088219][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3272.230808][T13359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3272.262389][T13359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3272.322422][ T9077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3272.337377][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3272.338060][ T9077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3272.355646][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3272.423862][T26501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3272.460321][T26501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3272.540710][T26501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3273.487009][T13359] device hsr_slave_0 left promiscuous mode [ 3273.507183][T13359] device hsr_slave_1 left promiscuous mode [ 3273.522992][T13359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3273.530741][T13359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3273.546139][T13359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3273.556953][T13359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3273.570290][T13359] device bridge_slave_1 left promiscuous mode [ 3273.579006][T13359] bridge0: port 2(bridge_slave_1) entered disabled state [ 3273.593980][T13359] device bridge_slave_0 left promiscuous mode [ 3273.600120][T13359] bridge0: port 1(bridge_slave_0) entered disabled state [ 3273.619503][T13359] device veth1_macvtap left promiscuous mode [ 3273.628711][T13359] device veth0_macvtap left promiscuous mode [ 3273.638650][T13359] device veth1_vlan left promiscuous mode [ 3273.647982][T13359] device veth0_vlan left promiscuous mode [ 3273.839207][T13359] team0 (unregistering): Port device team_slave_1 removed [ 3273.860621][T13359] team0 (unregistering): Port device team_slave_0 removed [ 3273.898874][T13359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3273.919369][T13359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3274.007755][T13359] bond0 (unregistering): Released all slaves [ 3276.050481][T26522] chnl_net:caif_netlink_parms(): no params data found [ 3276.147375][T26522] bridge0: port 1(bridge_slave_0) entered blocking state [ 3276.156546][T26522] bridge0: port 1(bridge_slave_0) entered disabled state [ 3276.172495][T26522] device bridge_slave_0 entered promiscuous mode [ 3276.188667][T26522] bridge0: port 2(bridge_slave_1) entered blocking state [ 3276.195862][T26522] bridge0: port 2(bridge_slave_1) entered disabled state [ 3276.210286][T26522] device bridge_slave_1 entered promiscuous mode [ 3276.254614][T26522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3276.275786][T26522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3276.336138][T26522] team0: Port device team_slave_0 added [ 3276.348462][T26522] team0: Port device team_slave_1 added [ 3276.395828][T26522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3276.410428][T26522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3276.443723][T26522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3276.465153][T26522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3276.475763][T26522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3276.510153][T26522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3276.570165][T26522] device hsr_slave_0 entered promiscuous mode [ 3276.580422][T26522] device hsr_slave_1 entered promiscuous mode [ 3276.595924][T26522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3276.607970][T26522] Cannot create hsr debugfs directory [ 3276.737948][T26522] bridge0: port 2(bridge_slave_1) entered blocking state [ 3276.745576][T26522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3276.753084][T26522] bridge0: port 1(bridge_slave_0) entered blocking state [ 3276.760295][T26522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3276.827420][T26522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3276.848732][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3276.863768][T10345] bridge0: port 1(bridge_slave_0) entered disabled state [ 3276.887312][T10345] bridge0: port 2(bridge_slave_1) entered disabled state [ 3276.903576][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3276.921607][T26522] 8021q: adding VLAN 0 to HW filter on device team0 [ 3276.940562][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3276.949432][T10345] bridge0: port 1(bridge_slave_0) entered blocking state [ 3276.956510][T10345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3276.989537][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3277.000825][T13979] bridge0: port 2(bridge_slave_1) entered blocking state [ 3277.007960][T13979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3277.025033][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3277.049718][T26522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3277.068274][T26522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3277.088714][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3277.108145][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3277.116703][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3277.131601][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3277.158423][T26522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3277.166640][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3277.181572][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3277.189188][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3277.269771][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3277.285720][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3277.315329][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3277.328686][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3277.342147][T26522] device veth0_vlan entered promiscuous mode [ 3277.357672][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3277.366517][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3277.383754][T26522] device veth1_vlan entered promiscuous mode [ 3277.420958][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3277.430214][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3277.445622][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3277.455074][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3277.470386][T26522] device veth0_macvtap entered promiscuous mode [ 3277.488341][T26522] device veth1_macvtap entered promiscuous mode [ 3277.516842][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3277.533682][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.547354][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3277.564182][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.586870][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3277.598374][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.616395][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3277.628801][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.645229][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3277.659537][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.676861][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3277.688915][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.706003][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3277.719671][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.736088][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3277.747582][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.764157][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3277.778495][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.795615][T26522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3277.807013][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3277.825646][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3277.838342][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3277.850696][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3277.867954][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3277.886509][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.898790][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3277.901119][ T8373] Bluetooth: hci4: command 0x0409 tx timeout [ 3277.919024][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.930202][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3277.947952][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.958568][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3277.976815][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3277.988492][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3278.005170][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3278.016630][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3278.035035][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3278.049169][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3278.066255][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3278.077854][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3278.094921][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3278.107297][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3278.126322][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3278.149731][T26522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3278.162416][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3278.178837][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3278.329774][T13361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3278.361846][T13361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3278.418449][T32519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3278.431786][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3278.457056][T32519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3278.481499][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3278.567982][T26866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3278.597248][T26866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3278.668442][T26866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3279.529650][T32519] device hsr_slave_0 left promiscuous mode [ 3279.554868][T32519] device hsr_slave_1 left promiscuous mode [ 3279.582111][T32519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3279.589536][T32519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3279.657136][T32519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3279.696939][T32519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3279.722357][T32519] device bridge_slave_1 left promiscuous mode [ 3279.729028][T32519] bridge0: port 2(bridge_slave_1) entered disabled state [ 3279.782191][T32519] device bridge_slave_0 left promiscuous mode [ 3279.789515][T32519] bridge0: port 1(bridge_slave_0) entered disabled state [ 3279.871657][T32519] device veth1_macvtap left promiscuous mode [ 3279.877728][T32519] device veth0_macvtap left promiscuous mode [ 3279.911326][T32519] device veth1_vlan left promiscuous mode [ 3279.917176][T32519] device veth0_vlan left promiscuous mode [ 3280.240333][T32519] team0 (unregistering): Port device team_slave_1 removed [ 3280.265418][T32519] team0 (unregistering): Port device team_slave_0 removed [ 3280.285435][T32519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3280.305245][T32519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3280.395784][T32519] bond0 (unregistering): Released all slaves [ 3282.786562][T26887] chnl_net:caif_netlink_parms(): no params data found [ 3282.900339][T26887] bridge0: port 1(bridge_slave_0) entered blocking state [ 3282.920019][T26887] bridge0: port 1(bridge_slave_0) entered disabled state [ 3282.928501][T26887] device bridge_slave_0 entered promiscuous mode [ 3282.948089][T26887] bridge0: port 2(bridge_slave_1) entered blocking state [ 3282.957567][T26887] bridge0: port 2(bridge_slave_1) entered disabled state [ 3282.969842][T26887] device bridge_slave_1 entered promiscuous mode [ 3283.014935][T26887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3283.035121][T26887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3283.090958][T26887] team0: Port device team_slave_0 added [ 3283.108044][T26887] team0: Port device team_slave_1 added [ 3283.148957][T26887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3283.164837][T26887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3283.202050][T26887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3283.220700][T26887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3283.229167][T26887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3283.263753][T26887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3283.309735][T26887] device hsr_slave_0 entered promiscuous mode [ 3283.326463][T26887] device hsr_slave_1 entered promiscuous mode [ 3283.339246][T26887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3283.356828][T26887] Cannot create hsr debugfs directory [ 3283.483590][T26887] bridge0: port 2(bridge_slave_1) entered blocking state [ 3283.490632][T26887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3283.498195][T26887] bridge0: port 1(bridge_slave_0) entered blocking state [ 3283.505299][T26887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3283.567523][T26887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3283.588154][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3283.602836][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 3283.610347][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 3283.625309][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3283.645070][T26887] 8021q: adding VLAN 0 to HW filter on device team0 [ 3283.661343][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3283.669589][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 3283.676686][ T5653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3283.708013][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3283.717953][T24191] bridge0: port 2(bridge_slave_1) entered blocking state [ 3283.725069][T24191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3283.763582][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3283.778104][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3283.787848][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3283.807152][T26887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3283.832009][T26887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3283.839608][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3283.854730][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3283.868075][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3283.898978][T26887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3283.908207][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3283.923205][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3283.997057][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3284.008291][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3284.037027][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3284.047830][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3284.066858][T26887] device veth0_vlan entered promiscuous mode [ 3284.078520][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3284.090346][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3284.107882][T26887] device veth1_vlan entered promiscuous mode [ 3284.140513][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3284.156175][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3284.168425][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3284.182941][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3284.197573][T26887] device veth0_macvtap entered promiscuous mode [ 3284.210891][T26887] device veth1_macvtap entered promiscuous mode [ 3284.235965][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3284.250817][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.269888][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3284.287760][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.299495][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3284.316772][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.327445][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3284.344481][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.357071][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3284.379290][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.396116][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3284.408428][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.424790][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3284.437934][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.455740][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3284.475468][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.489111][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3284.506467][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.518851][T26887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3284.537831][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3284.551600][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3284.559584][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3284.576942][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3284.589905][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3284.608276][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.619860][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3284.621133][ T8373] Bluetooth: hci4: command 0x0409 tx timeout [ 3284.638124][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.648608][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3284.665239][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.678619][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3284.697599][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.709159][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3284.725995][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.737109][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3284.754538][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.767752][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3284.792361][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.807601][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3284.820601][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.837270][T26887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3284.848938][T26887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3284.872560][T26887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3284.891749][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3284.900639][T24191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3285.058564][T13359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3285.109688][T13359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3285.144506][T32519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3285.185490][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3285.207644][T32519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3285.227857][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3285.308684][T27236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3285.348472][T27236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3285.429844][T27236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3286.366818][T13359] device hsr_slave_0 left promiscuous mode [ 3286.386790][T13359] device hsr_slave_1 left promiscuous mode [ 3286.399376][T13359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3286.408812][T13359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3286.426143][T13359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3286.437089][T13359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3286.449701][T13359] device bridge_slave_1 left promiscuous mode [ 3286.460919][T13359] bridge0: port 2(bridge_slave_1) entered disabled state [ 3286.476944][T13359] device bridge_slave_0 left promiscuous mode [ 3286.484665][T13359] bridge0: port 1(bridge_slave_0) entered disabled state [ 3286.502492][T13359] device veth1_macvtap left promiscuous mode [ 3286.508627][T13359] device veth0_macvtap left promiscuous mode [ 3286.523674][T13359] device veth1_vlan left promiscuous mode [ 3286.529567][T13359] device veth0_vlan left promiscuous mode [ 3286.727294][T13359] team0 (unregistering): Port device team_slave_1 removed [ 3286.748113][T13359] team0 (unregistering): Port device team_slave_0 removed [ 3286.767403][T13359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3286.788865][T13359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3286.874879][T13359] bond0 (unregistering): Released all slaves [ 3289.010546][T27257] chnl_net:caif_netlink_parms(): no params data found [ 3289.110945][T27257] bridge0: port 1(bridge_slave_0) entered blocking state [ 3289.125355][T27257] bridge0: port 1(bridge_slave_0) entered disabled state [ 3289.136988][T27257] device bridge_slave_0 entered promiscuous mode [ 3289.153862][T27257] bridge0: port 2(bridge_slave_1) entered blocking state [ 3289.165367][T27257] bridge0: port 2(bridge_slave_1) entered disabled state [ 3289.176835][T27257] device bridge_slave_1 entered promiscuous mode [ 3289.220149][T27257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3289.240334][T27257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3289.300430][T27257] team0: Port device team_slave_0 added [ 3289.310437][T27257] team0: Port device team_slave_1 added [ 3289.350789][T27257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3289.364695][T27257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3289.400650][T27257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3289.422408][T27257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3289.429373][T27257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3289.462739][T27257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3289.518356][T27257] device hsr_slave_0 entered promiscuous mode [ 3289.530176][T27257] device hsr_slave_1 entered promiscuous mode [ 3289.543963][T27257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3289.556057][T27257] Cannot create hsr debugfs directory [ 3289.683341][T27257] bridge0: port 2(bridge_slave_1) entered blocking state [ 3289.690699][T27257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3289.698069][T27257] bridge0: port 1(bridge_slave_0) entered blocking state [ 3289.705139][T27257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3289.770883][T27257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3289.789917][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3289.807858][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 3289.819951][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 3289.835853][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3289.852410][T27257] 8021q: adding VLAN 0 to HW filter on device team0 [ 3289.869659][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3289.878624][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 3289.885713][ T5653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3289.916458][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3289.926846][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 3289.933944][ T5653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3289.968536][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3289.987425][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3289.996420][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3290.013366][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3290.027809][T27257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3290.039696][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3290.077459][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3290.085779][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3290.106000][T27257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3290.181533][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3290.190879][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3290.217496][T27257] device veth0_vlan entered promiscuous mode [ 3290.232646][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3290.248615][T21825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3290.268483][T27257] device veth1_vlan entered promiscuous mode [ 3290.277687][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3290.293063][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3290.300956][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3290.329726][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3290.343982][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3290.356663][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3290.371466][T27257] device veth0_macvtap entered promiscuous mode [ 3290.380950][T27257] device veth1_macvtap entered promiscuous mode [ 3290.409293][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3290.427792][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.438502][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3290.459890][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.476998][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3290.487962][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.504697][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3290.524300][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.538055][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3290.554924][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.567248][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3290.584316][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.597055][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3290.620318][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.637629][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3290.648992][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.665366][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3290.677771][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.695556][T27257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3290.708538][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3290.726443][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3290.736821][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3290.749913][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3290.762977][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3290.786649][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.802889][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3290.817845][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.835500][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3290.848224][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.861115][T23465] Bluetooth: hci4: command 0x0409 tx timeout [ 3290.867470][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3290.879162][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.895211][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3290.907250][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.925352][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3290.944121][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.957754][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3290.974915][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3290.986993][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3291.003847][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3291.020656][T27257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3291.038960][T27257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3291.050486][T27257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3291.065921][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3291.078788][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3291.247278][T32519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3291.314253][T13359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3291.324808][T32519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3291.356065][T13359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3291.375731][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3291.394581][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3291.478164][T27600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3291.518971][T27600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3291.589701][T27600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 2021/11/29 18:14:14 executor 5 failed 11 times: executor 5: exit status 67 SYZFAIL: netlink_send_ext: bad netlink ack type type=41 (errno 22: Invalid argument) SYZFAIL: child failed (errno 0: Success) loop exited with status 67 [ 3293.821182][T13361] device hsr_slave_0 left promiscuous mode [ 3293.832628][T13361] device hsr_slave_1 left promiscuous mode [ 3293.842276][T13361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3293.849778][T13361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3293.869880][T13361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3293.888582][T13361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3293.913048][T13361] device bridge_slave_1 left promiscuous mode [ 3293.919295][T13361] bridge0: port 2(bridge_slave_1) entered disabled state [ 3293.940085][T13361] device bridge_slave_0 left promiscuous mode [ 3293.949652][T13361] bridge0: port 1(bridge_slave_0) entered disabled state [ 3293.977623][T13361] device veth1_macvtap left promiscuous mode [ 3293.992003][T13361] device veth0_macvtap left promiscuous mode [ 3294.010579][T13361] device veth1_vlan left promiscuous mode [ 3294.017819][T13361] device veth0_vlan left promiscuous mode [ 3294.482390][T13361] team0 (unregistering): Port device team_slave_1 removed [ 3294.522885][T13361] team0 (unregistering): Port device team_slave_0 removed [ 3294.558626][T13361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3294.589824][T13361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3294.769882][T13361] bond0 (unregistering): Released all slaves