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", 0x2000, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000042c0)="45b0316db0de461dc3d2750bb3d1bc39a4169cdef866774d5789b8d69f8197f14e8885bbeb5bf04c6ea78cd0c6d62007a916d82d34559531a145955f44ae0f1a6c2829b0e2087d348e73ddc60003bb770c8df95b3bca14200ada7dfaaf0a32e369262f60e508b94dd82b08f97a8b9730f9b41557e70ea93d7974af168c7be00ce228f535d1823d08981bf4c04a6b22d320c8aae8c425ae96248a5713c100b100636323566e99f1fc188a8aac4d58b564ecce2dd6f49704e38db16e7e2222538d29e27bcc8004ad248fb920c44f717900bd8c906017f7edeff3bebace561f498ade623b607ea3fbc37dcac9dd84e9839daa15bc32170da88a54b3ee52afc1753036cb344ca790a1be40aca1407697b2810107db2ca7673e3eb9b9c021b916e2b9b03069d6522efd0f1e5e09fd4dc8c95212e8e31e5bcc8bfa13b72b6aac0d273d0c5dbd816d46745c2b9c131e6428db81e4906840f76fd0801fa56417eb67b066432582c10beccc4c78e7b4d498229fe4907dbf8a09b8ef085af9676c69d5f820a922eba8922debb4c257e40f9e72c53295937355318cc6fa1c9089f4d84cacbd8c0e47292ae705c90ed59be348054d5ad33ebfe22ffd420bcc3ec9b1947cf052f5abde1e2864576ba8f65f3c146ad61010bccf27ae55758b9349db5e0afc520bea70e07adc2ab0d30988b883735d2f3c4d40ce32ea313397dda75c462af4002068d716631501dcfe2e3ebfe5f7f107034a628bf96a49f696c7b62ef5b2604e51e5a4a560271a27e897696102ebe9c86d9d05f3e18b570f19835ebad13ea230cd1af5e1631b7adb27c87b53c1a2dfb19039d3b3f98e38fd125d4590f5ce6b6e213215fe181f3e8c945395b017e8a8a0557cdf037a27833a23d530be54563013ee6c1639abe6f9045eb0e6ca2d438adda237815020fe285f8cf958b729bdad8c315bbe44565eaec0546dfa568af794c3b84b866a83f43f070fa38ccf4aee7ae9b781039ea5eae94b1b36d537443c2cadea070a02c62dd2a2d0e0570debb8f577b93806f2a0a9eb5d0da6870925ca2cd073d39558a59f8ac1d45e609c7983245d92a070973cccdb2d4c226754aa9ee058ecee95ae0afa19e56aaf9cbde2074a7f31e5c52f0bfd176d8650e77b7e662c600bde7505bc5715091aa75238b7213574a7cfd8667285861b8de34d3b3fbac23fdbe3d628f971c3042fdbb7cd03831810e85c6d1f5a892ff73dbeff85068c80ed70280e42a5805e7c454e14b6692ecb615186e6b556a825925882df2e0b1d1f8326d65035947771f41816db51763b6ac7eafff403bd6672858a290d771b51992f71c2c4ff3bc62f2fe0f9d21242f2a8fb06ddcd477670c08b7ff75860686c8e5e7934408ea75edaf2a5149e41a11a354c570cf2b295f418866428c566ab5e7d270c4dac5c242d6fe67a9d307be27176e95c821bbf838ca554cfa9f944e47ed17f31d06053c73a0ee6f98aec18e9268e324d98cdb4d76f52858d610fd9d24cde5b90edb4eddd6072a300cf2b45857ab9384a7cbfefe1e707e912a35fd5ab155171c1e89d0b50a3b81ef8353f936633bbe2a8b3fa3a3dfa4dc2326e9b9cc5f58a1b5b4be76689a380c6bef4edf43867dad2d214cd6e6abfa74714afb016a153f738ff5679c841aeb83e16b73db06cad4ded9d1bb8b3510e5299bc936a9df356ecfa00bdb2ed91f66384e3cfb9024587bfba6187c0dd1f7a52c38275aaeafbea93fe77e5e1476ffaaae461b0b5adb798807ccb906dec74a16339a28cdfcc852bf8d783d95d13b0be53a580bce0ee2359ebaf83cb9103bbd3edc45375f4bb7376342f34e3ed9fb3c294b4f85b7943335f688900356f063eb185291dcec2315515d47839589b93e1a9112366e46efa91c7c4989396e05597c9be804a88d95110b14a2d0cdfd5648f6ca8dc47733fd859d073e412327fdad72cd004415f89ea31468ca8d03d61053457dfb871cf2c7da40f74bb00217af264a1110616a6706b5b65c7e6b048198ac680c9c2ee66e76838d6c79e07d8bcec4dc8c9452264f37c6b2eed28d07444b1251513827473616d200b67d5576edc0d77c1eda143e255c08fc5752fe26fca665d7df69812972b1319c64ce4845e9b38f0958d036640dec1cad61ca6521cc50263e6967b4f7ddd5607eff3e2d678dc1a7a2343ddcf8e34fc3fbd885d7147cbcdcaea02cebd268736ad1c713b0d012b6310744e14ac51bce1b0c1bee2be41c3166419a32b3ebc10644b8a612b852c0b3087fa30764c2b4a1a590fefd0e640f3048207af391d7b04bbc2869ba7af289f59f134c1788641b824572a50a4b472864714e613ca8f2d787310c079da409df2397487dd6d1a80a9feca836a04a9b50e5853d74511d642ecf6e6149e12626f38fb72ce69dc654d3b937d89488886a5e40d8f06e6c27a62f759b0271096dccaae81ab73d746f10f102762ab26c2203ed566b0f787ac9630d68e276a984844b0de352605c50a47c2adcd6710fe4b3bfe26dce7a8d4a3baa4f14a6f18c4b9c20bd01711b67f520fb91ad0acf4eaf49f89656e11dda726ac89917983ff77eae43124ea471cae854468108320401ae921ef499b5eba58afc462fe737a303d8a722c2d38b8c75245b71d89958f4362e504e240bcefdba0b1332c196e7345be739c7844aed770cb03ae11377731f7b6cf8b9cc7521b85e9bad30085eb83bfb451da2378c4f89a0f3199525ece88e539b332dc31d4e385aa4351897b3bc68e1cfe9b8a0aa6211257909ab093fca73142aaf238d4c7681aaab050a5259464f06d5bbb067fbb3a600b2821044c299f3ccfe1d33dcfe3d98b2b49161d8db536d76727e39b313a08c1fe9e53069c32f3ef5049905e3ba4b5efc7b3702f2ae6a42eae0624f8eb73a4b0eef707ad205d795d41942d06bcf52c2439f4c671273bdb13ca41637c96dd2ffe7fea090249203ff92f5a59af9782683eb4c01c6f7c29496d249f47bc273931ebbdbff0a323c94996d790a6382e911f4e43a2c2947390848326385de1fdbadf32b86f3f6728592bfca22fba67460e99da3e89293647e494a332c3d1b700d7c76a99950b90e135ac42a172939e3adddd9cc54deda9b6aa59ea11bedf3d0db9ce13fcf66e9ca3d54ab65f023f8f8e8cadd14b740b9e6b568343d9f1d29191c5fc2a9331f208c97dbfb49522cd414e94a14e2b9a559a775de91816107ec677446ab7f845cabf1c5738a1db10dcf2f485114ed3d5e040fc82469101b3b8c95aad721ecc2d00abc2a770ecb735ac08057a7a8b736959ff07d18489f31d5fdb886868036a2a04d7988ae602d6eb8038e347d4b6ab151bdf90718bd741730b38e4bd872d48fc83ca3de33948b9609e6d980ee2058e7863e1ed93e10e50999b774f3f489fa1525cdd6420856f77c5c2c24f0e98875965f9d0e0ac59a3e68760df518d2b475f82f13ab96825ae8c53b21a525e921f1a5ef70a035c66eacc149ec1d6f3a430e17c6b773f46eebbcf16a020f9fc946fc42f22880a171a0829fb7a833e65fc78d4fa8642169d4e3a12658e9ae4ad4be6e4663177f34d3c73066f464605472eb17fc4ecb468004322cb49ecb09a5aca14fa4ace46fae3e5549f779ae698159769de6e85743ca4b4883cf4ec8c91c2c81dce1cd226402698de47723b2cc440db85b3946ea628a70d536bc75b2fbf61f3934c8147918cce614d29b986b273eb09d354fe1bb7118360dc20d2d246dd99ad4fe1b92badb1e111e84fdd5889e13cbfd0fd9626843f66f022a27d9f576c7b64819468c38318403350b0da42589f7f0c1771626742f120a588fe4036f861b9ccdf077cf26d6303d54a4dd410da53844950df0a011bd34df33e7a734ccc52f642e8d2a411de08c4c914f42cf79ddad92f4cdf04974be23613bd37e462c092d7403b01fe30cd27aa4080fde41c8e72ab17e57ceff613ada08fdee5990d8123e3e3f3ff6d6ea35fc1ea54e1ab86f969696dc60b69e6721b44994457df06297345e7e2deea0cf0cbc0e78d7a0e857d528ded5b4ec1259ca4ffdb2d0115b389c0668e0620092fe60412bf2464e98dd2732918ecd9164063e8c5703d5e05ac7a37843adda9353e183a5815618fd99b2cf34fb7797ce164ed5522cec81dfbe65d035cc8323956962d55c3f0e33f025928bfd47fcfab983f5b0dfe43093b3013259f7435b72c8d42f7b37cf7e6fc09781ab6e9e714db8a472f509d4c8eaaec42a8e8368ad8c842ecefaeb45b43d715ea9c0c9a95e33a2e8276fe8d3341dab6ef47ac726088b1d8d477f73bdafa4498c3b34ebd1e9fbdf338ea364c58cdd4b0fe6fed04cb324373f9fa6f148b5cf2835be475c813c4706ae4ade94e7cb96a81cb80f6fed932f62ef1f189364dc33fd262448f6fbebcdd642d228e19fafaf208a96a2a9d74d1c2803918e9e173e29d485cb9d0ee170ecb0dbe97e647358b6d519a282c3e3e1336a85c3a46ce1a0fb4f9ec4490ceee184b2eaa7bbdeee151567b662cefbc6d86964e08a514ed00163b5928aa9edfe27cc7a7fdbfd463175bab9a31188ab368cb50f22acb2a6f4c6cc3c2e28611a8488ab64844547b145818b8ce4f55b36338c8cd0738f81162859b6b027523e5a806876feec72b569ed6fec0776d5617711c294bfeb29ab632dee41b1d0f8fc6b889d2eb191bc5979cc3d83a7a91256d1a9d261cb0609ced0b97a6a1e48a52f33755aa3c458fcc47635205cf3f50addab7b0e6698149ec72b26370e6611fa659254bb8368d79d4279df385a7a293f51bcfabc0ba0d3254ccce9af8de0f971b154282f0c0b993e6b979bf597baac97f9db4e2177c39b01e58d19b1637f44a03929a04497c1d1a787fe01371efba22608978b1cc02571f753ba47c5c60dcf9b9b9dc17bb47bbebaca5ef1b012befe3e8112de60286f68e01d294877b45386ca541a3a042e2915613909aacaa726f3c1a0b4b85f1c0f4617eac9076e8f253fa43a56bddb4aa32f48e1bdf2ba39752607980adda40de061c1cef478216001a9f2d2b9641c7c28a5ac099fa3c19142f42af03fc70b65f2d10cf418f83c0e1b395470e552f79b063e0b13939994192e38d73887d101dec29343e81a3a62a1bbadb5d486f9beb15ebf7477aa5f43e27d5a9cb18baaefd910b05700f0298371d6b56e1b23a6f69b3f3f869a1259b6fa8dd7e8520e074c664bab303fb44d5b2dcd78f3f48b179538160e79a6cd58a0598037541016bcdfb776e0ea4afcca3524351ffb1d048348f312f79ad8f369e6e64094624562dadd93c80d4d48e18d1b84a88a9b4d7283bb110448d74480720f5ccdf6199e480b6d7ea3fcc9ce2aaaa60a35fb4cde9f964d1206a6f1e6c8ee2cc645880e9ff12f17303b3d8087c1bf566fcbffcfe58622aa2e8dbc5f07f06a22db132332ae1946291b9ec56842fe56700dbf7b554574c8627ffa3818ce399a83b8e310949aa461dfd80e95cf114bfd505430707721b8f05800cb4558adc58a167a28811f3ce6599e6e9c786ae7a58890f5b36646f84a28c9916acd09d0dd3dad3b2af91c4fc4f608b19148fe57438cb3d54333071bc758ab10bf387fb664e4aa5f12d856af6f998e2d5cb4d594ccf467167b8a9cf664c240388f1423641a2514bf5d6471b817b08ef9d6484467c292f7d7dfc255c66d91d6e92cf678d4e4d724d6313084668b940b7ebc162e645e31e57e917e3f433e9c933f404b84b7df51c991bc5bf3e469ac667283fe0abc2e8ea42a85d113ac516ce392fee5f7df8971d2156dfa80e2b3e65b09876dd97840782e8661ed874cd81d644231000e71fdb90da6f1812c1a0dd3d461b60222e1d59819a8f8974afb488fac830747877d03f626c57a4808720f6cfe38628d044d15f6ea28242b63c8a0f2c5b71448720a9b6719e3f9ee5686bf558ebc6277c122d9093bb8647f69f192cc911eff9c6c91f0e7a5e20e1a6b9efcd9377db4031089e0d78655fcd8acdd991e4adcecc13c8ff400d6d461084c1891449b50f8e625138dada6fb74bb8f955f0e4bbe395cd266b1798d85bfc82463cdba0822845d263d223004e24f25250f8e10dc218d25bcfbbd0e9b75a5f58e55f00e441a103a86718204860eb1b778f867a29f897a2ed70e261574f4cef81686873f00aba03c3ee96ca4f67a9ff947f3767f075f526eb259fa4fc4fc8c8b7bcf58359c184efade292ca3c343a24e6fbbb04ae5db18b7f8ebcff25e5f3107374c1a6fbfe7b087df493c6a55f2c54a3d9e94b98b8bf4b19504b748d1fd5b56c97d1eca1e647c8c9b60610b64d96f5f23db4f11c588e48b35facd5cc21ec9090a1e5372a49fa4cebda88f414be662854c248f44d9f2b31ca0e6040751bee71c158327378ce74557b8d21885068a4aa80096415ad6062e02b6f2512ad8c1e480fb549b57cfdd0737b415e3755ed0b8b6d3fbbc78cab75af4139b11cc9f27ba95c494990c3e28d662ca89e02415070042ebf3284046d32e43aea096a6c3d363236f80b8e6ac65c1be8699911dfd54b724be84286e182da2291113c0818b37bb146fc39771fdb36580c3009befce666abbceba5beb74ec63c3b2ad7af6358faf9622c95816bd79d92364177a642ce43054a388a90df2aecdb86768bb1e7fb3fd462cf184efb302e9ce39e57ce5df33ead2a3919a831c4f648b0e89296ea2665a8b6931bf13838b8b076d0b92e705cab613f4529e0ff5abe72c4bb19eb616c62e7af75b818d8d3c8fc769c6ecfe3f75da4ae4b685fceea12fc75244493278f078a13ebfebc007487def259ffb8ce34d415e728e112c76cf7963c9a50d89676ceb2445d0c4f3f68eca7b8df462a8229bf067736db2e3d92afa02e2be8ac708861f4c6b7d37c3a14fb943672c4e4da2388ef2c8ce9ef4a4d5c2941538132e93ad1ceb888c3e20809c8ad8563353c573da5ce023edd463937ae9127c801f2755745bf901cec890059516ea3534b1f0f4f737189e8a7bf7a02798a0219a3cff58ebdc56eb2ab7b9b9a2eb0c91d41db1891fbd353993608c4f05719c18243541d25bbf56a1fbd7269b6b3a32a42b3cfca244a4ba37197ca4feac3373f33d0de14646c1ed501eb25df7b633c675881bf4a8dc005c099c050d0971fe14cc111fbefb8acc93c7f38094516b2dcb37b35fbe0bd85fac8c7dd1b158fbd3b3e9e2fccd9bbc464b6cd600b5cc2b9e271c58f6496fc9e23748c5259ef6b99b6b51820bb45709a805eaaa953fdb2e72b2e50b339151533e1fd2acc81dc9cf427035b857270f96b97a4764266ec1bc1d76ba08bd61ff5c53f0d744f508e7db909e63780ff2ed3e702184ccfa129c79eda3ac6cb4343e55b747fc3a0f1f7323d8b59adbeb75c4582aa6a94771286d61e61f39c2a83a4410108adb0388dfe75bcbfc205255a8f944241cf8c1155e4fb48644acb413f3b84d177e00fde74c12ff2eecd02f21727c41ead7839f303a1ec7cfa79b7da12ad5769b6566092cb50cc56e9b2f30969bb8a6223d4d9e8bb81ff33027fa48f6eef2d65d60355276acd3b5e62c44511202246663b8de4b91653cd3f340cf7cd9f28851d04a9e0ae60661a357e9e8ab1f0d0f9e44e982ca42a2db7670f5324e803b3a31548ccc709783d10af5c4f72e3dbc91c9f46cdfbe7cdf6647be680031354a6440e52c0858809d2e4b1fd71bc79214ceea7099c19c38fb97a2472e92d620228eed95f39f37a0d33d867cd0522723bcba5da222b533fda05f3c774fe1e9199dae434ae365483c15fe20060b575cf14bd7610b99171924097c6224223f7427d9734624580acd34a8d928d6f2c4cbeb69780446294cd99dece129e9642182101669b36a8961ff96d051b767e131d87d0a16a1cd76802db2d657e7c2006f4cf22fab65db6bd0be2adacd819f585c2f8ac93ab23cff5c0c8912081de89a57815dc446c9109ad24ae080016057f67dcd5e10395a3f20695058ddbc9569cd6204afb7e91fea4e8587d75c14c99b4d1641fd7bb5f6d51c804d04f8ef0ec62d7856ec3984e16670daa17fc5cb49fb985afd0ed0f6ba9c5202091e5cb8cc622c300200f1eea111b96ef73b2fa5231da8b0ae9a872c36f380ae24778bf1b03961db95c8750fe87d74cf8d51c77f91acbcf83910292457cd92478ba70dc20ba6c00404bee0983b61d2de0c221bd50d0097aa3f770507f377a914f4efc112b6dc736f890029cf2f5c32534be90100b9ef84401cf7e47e845a13d0d318044247d6a1b3da02c11a273c988a18fd9a3223d3e262c4e5eb73df82c43ce61c6a8f43c64c0c6023331652204dfd33589c11370ab8b978f3da0631a0a43a02750f47c107f3641ee83386d4cfa539860555932b3098fe0890585e0b4d37ed014fe74f54e195860d20f05213670a7f06e9e8aed53b1a8e9a59009ff8aa34cc6c16aca9ce8abb0524ff9722c6f53a5ce80f8ff000a64ad74f1f1090239aa483b19a169626184ff730d9c4b880b3bff145b84886e785309009426a4ef4454d333c5cc80f3e09bcfe3d73747a1983c5fad818d548e1e2b28796298ddb08d5237f0707b9be2c3ba36dca51f5f29de706e0c5c82d479f872eaa8335ba776142016650fc384d8809c17d59aaa637c977bf5c1cf9163448432dfea515ea2225b043b1ae127a0c565603668a9e6921a8378d91619ee59356469b07e7d99b475c7b7d178b2039c60a9b2c4ad99f5d8d70cb0293c0e2d6c6afb239dbd118fed5445b5fc2ec6c6d3d652b9fd5e0284bce39672de607ec0d78dead4dc500d66ba28f12c3170818e206976f829bdc5eafd9b0937c8facec181cf1b4f878634538e151f75e8ab5c5cc1569de084f8706f8207a72102c6b1dbed031632e81f4bc9fcb8d9d340d063e97574d14fd877c42d75bb5752ffea2f228020ac664b9fd1e7a2f167b95df0934d191bb1e22c48898083efcc2342aba36acdcdbd4ec4208418e2ce62e852b5841c9dd810152b4630835a2f4e6119ec8187bc9ea34f20a8d82df0df55bcf4af31acb21db085732ad95be1583f89e5fd3c9f7870cfe0042dd8f965ca9514c728132b1ac6fc9a614080198ca938eceb8f09c20f3b58edb4932be0de1e7849bd5bbd5251e9d416613de92332611ecd568c0869e9111478e54bbcbac2b50fd9403f2726b414f2aa9ade843ecbdd2cd00067fa43a290140290b8fb664d17a54cd7f04bc33d924f529176096cc0db0f720e4800b58e755f2cc10efdf65037da25f217c525d03c1c6f93bb2e50ea322981c3ae6fedd7c82579397d07ce2cff5fa318c055f9be68cc5db99b98441412440c88dde9924d237f5f571d3a9282bc99155f5b4c0dcd2f51bcc1d2bcd0a0ee0a61fcae3a0c8b152b1916c06dd4739f832194dfb8027a9d3a7233f8df1fce891bb46a753d863ad148d8fed6c2b70b6fab777a5678d8813b2b05bcaa4d3823433a032124aae7a41339e643959c2890a1ca4f51fb528d9a8fd770c34e3e8e5c769a6e0a8cec2096d61cb301b39c8c458d6659e837b3a82f4e724be18f324fd4452de9f05a2e805c197ea229177839b39394fd49b26b96a34b43d9af2aaed33e59c7cf89e51db72e39b6ec10a306f7c105900ca1d40fd48ce12e5d8bc492bad9e6a9b88570d79cb3ba10f8bfa121e878db5e5af1453d8f564dc14e37fe6804693536279ee781d7c9dab853e3edee275934872db8e439abe9eb040457c78dbc9a2add9cdb10373910e4623adb0d9bb8887ac24a315f97af815c650490daede290cbf1830cc40138222703861104e08210354279a5fdc356a2ecb37521885646a6d893ed221dc146a53f89ef2641c23007852c8db8a64048c0b529652d7319f657df02e33bd3830f2c3edff7189b7b2e6db2328e1e3c399f3d475b8fdeda0e7ee585174c5724d62b19fe2e7679ba889719695af5110385484759b4e0e3aa3104e2ec7f808c52747ad1fc39f76dda0a8cf2b6a3852a46386fa00250172afac63859e0d2e699a93df8e6a15a14a9487e556fe9c0eaf8ac978cb1a565abd744dfedc5a4ac5ec2eb88df1f6b4f52063265b51b0f820e18e9aabf69192d49caed59af0269a79576b89ac8204817c51255bdddf4754fd0b3a03607762d53f6f5095d85ebb2fc86f9a14d6e78a6d59e8298a81ae1ef6f0a4362bec0a0ee84bc21aa48f4945542ca568e901179224c0a935c1bd90240edf2496e2a8e76f7fc4bc1e211631f11e7293bf2b2cb5eecce3f259a488d95db0197c2f3d5feac67b012f0f8ba4ab789669d045bc37370861f5a66a1911aed90fc91a2cffc58674404eb21c7f2acdb546c7b19bceb2a5c813ff7757fd3c2a6ac3bd17bdfe00f0aa96cfc45ab6967038c25ad121767ce46bcb651cbc6860cc6bf3aba1d4d526c4658ec3ba3db98529a9dd3b145262df3a52f488fc2507d938059a2f5102d822c2b6344ff7cb405a30fe3de0cf436a1d8f91f053decd0e51bb592764869858d26a94ea6a38aa50f97c49e2ed5408b3deac28725139717f2d661490dedcb3730a4bc39f50c9dea9c125018160ef1c539889a594268a910d2a2291c82faaf903979fc7e26a3d22018b503e0dcc80380a83b72d831d8585c9b9adee15c1989d2a23428c3f15f1a137dd858875e0d5bc42bf725afedc217d07acb7ffa020b9ac7b1656024fb41e2bce738f2807e1eaf6315a298f0342a2ce3f7f93208e125215a04abdf86e66d6a8e752ba1a89077a4ffee0d4de9a18498c1d9d719361b43ea4bb6a415a14c952bd9446b91dd0c91dff4796b6a75cf66f52c72b2bbf592e5b4ca6f754c590f2b3af455607f00d92e4785a85428655ab1da8741f85ab36809532ca641db49372f37b3093efb877910f2a77d73c704634feb08fa7f8084892681d817ee902832fd577705b77a0da8cfd9541750100c8cfb3e02a0b821d2262ff89c85a2a1c7a30c5602c0d50cd0b2f8b3495859c2144339f990fd0d2a53b0906939881e68c5cf26e2b6e2874dda6756bad7411adafd6273f7c22d5ec7c891a26f1a84cce6aa6b0f6c60c50f20c2c5599a2bd92b87ac2f8e9dfd96ea78df72c78ddaf28c99943cf50d3e47170b19311c18d4266398adc60c08b31b0b06a240526b7afd9a74fefc917d530b916180d3209eadbf272a35fcb237bdf331fc8d6fae61db4ce0b06f60f02de7d94e062871aca1a0f4cbf68c5185aa0db6fb0dbbd2550d2895b2fe9461a05d43ef44857f607a21bafbecfe929b03f5bebfcffe3542965d4414c4ccb43f072a835b951c5436ce4cafccbd1dd9b8f44dd50a85101c02b8fc5c8042b3550b08b044a6b09b00de1b6599757fc2a6058fdd3b1d756883181c7d417002a868b7cdde0927c1ab5828f11ca6244aa58ed8663dd48c44d15ac8338dea7bfe54cf0a005e93d57d76ded68368a8a21f26281314203f02ee2ba2bd74ead4a4d5a9ad5001afb6b39aca55a8764835156464ca6d9552a9d926f86733baefba084e26890ce01f858b749265b09b169771234a62c01462f71e8b8c648c6ee850121f4c2677de6f1ef5e6b27aab1e12777ee4d1e4998dd425e10b56e74d9306a64cd451ddfabb14203858a49d337754fb35e39c9f18fa61371a097ba1c24ac5d85e108e4a28c7dd3a2a50ac0ac7218a", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x6, 0x0, '.@-)/}'}}]}, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x0)

18:44:25 executing program 4:
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RREADLINK(r1, 0x0, 0x10)
fcntl$setpipe(r1, 0x407, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)

[ 2620.380194][T10600] usb 2-1: Using ep0 maxpacket: 8
[ 2620.502960][T10600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2620.513917][T10600] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2620.524296][T10600] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 38
[ 2620.534747][T10600] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 2620.544215][T10600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2620.623567][T28847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:44:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e00)=""/4096, 0x2024}, {&(0x7f0000002e00)=""/4100, 0x1004}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

[ 2620.782909][T10600] usb 2-1: config 0 descriptor??
18:44:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x9)
connect$netlink(r0, &(0x7f00000024c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002480)={&(0x7f0000000040), 0xc, &(0x7f0000002440)={&(0x7f0000005800)={0x4c}, 0x4c}, 0x8}, 0x0)

[ 2620.806562][T28847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:44:26 executing program 4:
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RREADLINK(r1, 0x0, 0x10)
fcntl$setpipe(r1, 0x407, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)

[ 2620.965138][T28847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2621.041233][T28216] Bluetooth: hci6: Opcode 0x c03 failed: -71
[ 2621.045536][T10600] usb 2-1: USB disconnect, device number 37
18:44:27 executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x2a6c3, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='=,'])

18:44:27 executing program 4:
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RREADLINK(r1, 0x0, 0x10)
fcntl$setpipe(r1, 0x407, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)

18:44:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x2f00000000000000}, 0x0)

18:44:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x9)
connect$netlink(r0, &(0x7f00000024c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002480)={&(0x7f0000000040), 0xc, &(0x7f0000002440)={&(0x7f0000005800)={0x4c}, 0x4c}, 0x8}, 0x0)

18:44:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = dup2(r4, r3) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x828, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x34c, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffff4cf}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x2, 0x3, 0x6, 0x2, 0xf442, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x401, 0x8cb, 0x1, 0x0, 0x7, 0xa4a4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x1, 0x6c, 0x24, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x9, 0x9, 0x101, 0x7, 0x5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x3, 0x9, 0x18, 0x30, 0xb, 0xb, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x40, 0x4, 0x1, 0x7, 0x8, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x5}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0x1c}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x4}, {0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x1}, {0x1}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x9, 0x60, 0x12, 0x60, 0x3, 0x6, 0x55, 0x1a, 0x18, 0x36, 0xc, 0x48, 0xb, 0xc9adccf375dc77ca, 0x39, 0x4, 0x2, 0x16, 0x2, 0x48, 0x1, 0x6, 0xc, 0xc, 0x3, 0x1, 0x4, 0x24, 0x4, 0x5, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x867, 0x9bce, 0x6, 0x0, 0x4, 0x56, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf35f, 0x933, 0x57f, 0xfff, 0x0, 0x2, 0x6, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x1, 0x80, 0x48c, 0x0, 0xcb, 0x8b2]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x16, 0x18, 0x9, 0x0, 0x6, 0x1b, 0x5, 0x5, 0x18, 0x48, 0x9, 0x9, 0xc, 0x16, 0x1b, 0xc, 0x2, 0x16, 0xb, 0x12, 0x1b, 0x6, 0x12, 0x60, 0x12, 0x36, 0x1, 0x10, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb45c, 0x2, 0x4, 0x5, 0x4, 0x9, 0x2, 0x69fa]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x36, 0x39, 0x16, 0x18, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb53, 0x1, 0x8, 0x7, 0x6, 0x2, 0x2]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x334, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x240, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x36f, 0x3f, 0xfffe, 0x400, 0x2, 0x1, 0xffff]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfc00, 0x81, 0x2, 0x40, 0x5, 0x4, 0x1000, 0x49]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6014763a612ae39a, 0x16, 0x60]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x6}, {0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x2}, {0x3, 0x8}, {0x7, 0x6}, {0x1, 0x6}, {0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x6}, {0x5, 0x5}, {0x4, 0x9}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x3}, {0x6, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x9}, {0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x6}, {0x2, 0x8}, {0x5}, {0x0, 0x4}, {}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x3}, {0x5, 0x6}, {0x5, 0x9}, {0x7, 0x4}, {0x2, 0x9}, {0x4, 0x6}, {0x6, 0x5}, {}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x0, 0x5, 0xd3, 0x7, 0x67, 0x7]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x7}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x4}, {0x6}, {0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x4}, {0x4}, {0x4, 0x8}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x6c, 0x13, 0x6, 0x1b, 0x6c, 0x6c, 0x6c, 0x2, 0x24, 0x1, 0x48, 0x60, 0x5, 0x1b, 0x12, 0x6, 0x18, 0x17, 0x1b, 0x18, 0x3, 0x0, 0x48, 0x12, 0x24, 0x48, 0x6c, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1faf, 0x8, 0x9, 0x401, 0x9, 0x9, 0x7]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x74, 0x8000, 0xa79a, 0x1000, 0x9, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5255, 0x1000, 0x5b, 0xfffe, 0x100, 0x3, 0x8521, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x24, 0xb, 0xb, 0x24, 0x4, 0x6, 0x3, 0x6, 0x30, 0x9, 0x2, 0x9, 0x36, 0x48, 0x3, 0x4, 0x60, 0x1b, 0x1b, 0x9, 0x12, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {0x2, 0x6}, {0x5}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x5}, {}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x5}, {0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x7}, {0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x9}, {0x5}, {0x1, 0x4}, {0x0, 0x9}, {}, {0x5, 0x6}, {0x1}, {0x3, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc6, 0x4, 0x6, 0x5, 0x55, 0x6, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe67}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a96}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x26e5}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff000000000000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x828}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000013c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000000e80)={0x4c8, r6, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9f}, @NL80211_ATTR_CSA_IES={0x47c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x3a0, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6532}, @device_b, @device_b, @from_mac=@broadcast, {0x2, 0xfe0}}, 0x80000001, @random=0x5, 0xc0, @void, @val, @void, @void, @void, @val={0x5, 0x92, {0x8, 0x76, 0x67, "6a20101c4c41ead7ea8d2922e70da6a24eed103e289a56c0f0733659b02600ad5bf3ae49a3ba175f8abec07040baef0f6abe39aaa29a2e8a65d153b3bec3c68c77c5d579f2aadba903cbb72a4221ecf118199153df9394bf183b1f1f127989a403cb7db76403721f6ce7fbb8d42c7a00439e0e6e1e767b430aab5aa4ca8e76b0c36433cf24dba5f9ba864f4175f49a"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x4, 0xaf, 0xf9}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x3, 0x10, 0x80}}, [{0xdd, 0x4e, "7e2ed136b5b5906eaed0c9576f0bca7b4a3807bd93cbec9ee4f1f5cf51cfb7602b3e36de4d1e44df27054ec9d5eb5ceb0b1211285d93aeb531a6036262c048b049757e8ad538a68e8b196e83eec6"}, {0xdd, 0xed, "b4b57b443798a8fb1276f43da97cd5c13ac2fa9ef9f9070ea6120601f05b8cd75d58eb86c88e29b2643ca9252c44bcd3ef63cfe74b9b2c26c177edca15a5d99bec9d8e4e987a02243541e90fce6db245499edf7dd7e63885fa787ec9cd6db33a05d763c870dd4b52dde57f3b7350330dad7c0aa132f134a20de6bd520612ef82b772a7f579f849e2415cbcf5f453133e168211450832855b806b30b0f1f87a8425f5f0df78d536c1d3049f04518122a3aa937817c2debc357d8071baa58d134f99bc89cd2fb7570e3ba529d397bd0ed856b02c1aefd078adf24ed0536e0525852c927ae3c4b725b1202664f977"}, {0xdd, 0x90, "06588821ec193e871028285934a054a61ef63c8da1502ee4bf0fe4f6785e043e95e7f4ddb42f781ee9288bf1a63654df0b518eb76420afa893f309e378cf9424c5d31a6ff1e99f46ffa6268010ba6ddebbfc0a723638ac6b4e5cceadba89db324b139e3ca98b284bc8ef5848998c2e2385048eeee8961fe32794a7082e9fc067f9c89ef03f35b2c44588c1293e3e085e"}, {0xdd, 0x7b, "fbb94b828782a07a7d6b41310f9430fc4cf84476004644cedc62dc4fcc1242fd1189a640f47af6e773bb9c531f4eb36ba1a2dc0806e6afaa98bfd8d064199f2ef0533191d9e093122ec2fbc0897ade1f61782a193b78f4916768312e3145897be7484d2b3e160d0fbc54f5efd82a446a6116cad52741457af39835"}, {0xdd, 0x62, "b904f2711fa3bdd236563a32bc1e837855acf11e10fefead167fefc0f3a93d45527ac0c952146914b9795aa807619216e99eacfb4347b5f65dc9f44064daa736ed30ae1da71a454a6208e6c9c103e35d45d24219c4c4c6d9d14b948181768fe8c657"}, {0xdd, 0x15, "863bc2bc2d02c56f4e68e680a287e8efa4c6f52e96"}]}}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x4, 0x1}}]}, @NL80211_ATTR_IE={0xc9, 0x2a, [@chsw_timing={0x68, 0x4, {0xd40}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x3ff, @void, @val="db7fee2fe6ec65ea1de9f2e57ee12341"}}, @tim={0x5, 0xa5, {0xe8, 0x2e, 0x0, "86bb7c7044b457cf831acea9abaa46bd00b4cf7a15cd1b23e2374d8ba92ce149cb75bbd98af133d1c6d02e54203e43f0fcc7450bb83f0122dba9761e3aa4d7ea16adcecbffee726c6a9042ff06b7e50ce860ce8c8e2590cd626420f567dc5a5641d0b710e0ffbf0f1cc75c2e2b6e72bb3d871d6721d99ad2749247a884d6bec8c3f385bf0b77dda40b054d7070634daed3381a4e5ab9753707a7989738bafe110f67"}}]}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24000814}, 0x79720f5c71d0c3b2)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:44:27 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

[ 2622.220597][T28902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:44:27 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c)
sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x10, 0x29, 0xb}], 0x18}], 0x1, 0x0)

18:44:27 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, "ad"}, @global=@item_4={0x3, 0x1, 0x2, "10d399fc"}]}}, 0x0}, 0x0)

18:44:27 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

18:44:27 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

18:44:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = dup2(r4, r3) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x828, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x34c, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffff4cf}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x2, 0x3, 0x6, 0x2, 0xf442, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x401, 0x8cb, 0x1, 0x0, 0x7, 0xa4a4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x1, 0x6c, 0x24, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x9, 0x9, 0x101, 0x7, 0x5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x3, 0x9, 0x18, 0x30, 0xb, 0xb, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x40, 0x4, 0x1, 0x7, 0x8, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x5}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0x1c}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x4}, {0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x1}, {0x1}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x9, 0x60, 0x12, 0x60, 0x3, 0x6, 0x55, 0x1a, 0x18, 0x36, 0xc, 0x48, 0xb, 0xc9adccf375dc77ca, 0x39, 0x4, 0x2, 0x16, 0x2, 0x48, 0x1, 0x6, 0xc, 0xc, 0x3, 0x1, 0x4, 0x24, 0x4, 0x5, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x867, 0x9bce, 0x6, 0x0, 0x4, 0x56, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf35f, 0x933, 0x57f, 0xfff, 0x0, 0x2, 0x6, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x1, 0x80, 0x48c, 0x0, 0xcb, 0x8b2]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x16, 0x18, 0x9, 0x0, 0x6, 0x1b, 0x5, 0x5, 0x18, 0x48, 0x9, 0x9, 0xc, 0x16, 0x1b, 0xc, 0x2, 0x16, 0xb, 0x12, 0x1b, 0x6, 0x12, 0x60, 0x12, 0x36, 0x1, 0x10, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb45c, 0x2, 0x4, 0x5, 0x4, 0x9, 0x2, 0x69fa]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x36, 0x39, 0x16, 0x18, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb53, 0x1, 0x8, 0x7, 0x6, 0x2, 0x2]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x334, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x240, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x36f, 0x3f, 0xfffe, 0x400, 0x2, 0x1, 0xffff]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfc00, 0x81, 0x2, 0x40, 0x5, 0x4, 0x1000, 0x49]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6014763a612ae39a, 0x16, 0x60]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x6}, {0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x2}, {0x3, 0x8}, {0x7, 0x6}, {0x1, 0x6}, {0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x6}, {0x5, 0x5}, {0x4, 0x9}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x3}, {0x6, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x9}, {0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x6}, {0x2, 0x8}, {0x5}, {0x0, 0x4}, {}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x3}, {0x5, 0x6}, {0x5, 0x9}, {0x7, 0x4}, {0x2, 0x9}, {0x4, 0x6}, {0x6, 0x5}, {}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x0, 0x5, 0xd3, 0x7, 0x67, 0x7]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x7}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x4}, {0x6}, {0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x4}, {0x4}, {0x4, 0x8}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x6c, 0x13, 0x6, 0x1b, 0x6c, 0x6c, 0x6c, 0x2, 0x24, 0x1, 0x48, 0x60, 0x5, 0x1b, 0x12, 0x6, 0x18, 0x17, 0x1b, 0x18, 0x3, 0x0, 0x48, 0x12, 0x24, 0x48, 0x6c, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1faf, 0x8, 0x9, 0x401, 0x9, 0x9, 0x7]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x74, 0x8000, 0xa79a, 0x1000, 0x9, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5255, 0x1000, 0x5b, 0xfffe, 0x100, 0x3, 0x8521, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x24, 0xb, 0xb, 0x24, 0x4, 0x6, 0x3, 0x6, 0x30, 0x9, 0x2, 0x9, 0x36, 0x48, 0x3, 0x4, 0x60, 0x1b, 0x1b, 0x9, 0x12, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {0x2, 0x6}, {0x5}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x5}, {}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x5}, {0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x7}, {0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x9}, {0x5}, {0x1, 0x4}, {0x0, 0x9}, {}, {0x5, 0x6}, {0x1}, {0x3, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc6, 0x4, 0x6, 0x5, 0x55, 0x6, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe67}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a96}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x26e5}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff000000000000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x828}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000013c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000000e80)={0x4c8, r6, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9f}, @NL80211_ATTR_CSA_IES={0x47c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x3a0, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6532}, @device_b, @device_b, @from_mac=@broadcast, {0x2, 0xfe0}}, 0x80000001, @random=0x5, 0xc0, @void, @val, @void, @void, @void, @val={0x5, 0x92, {0x8, 0x76, 0x67, "6a20101c4c41ead7ea8d2922e70da6a24eed103e289a56c0f0733659b02600ad5bf3ae49a3ba175f8abec07040baef0f6abe39aaa29a2e8a65d153b3bec3c68c77c5d579f2aadba903cbb72a4221ecf118199153df9394bf183b1f1f127989a403cb7db76403721f6ce7fbb8d42c7a00439e0e6e1e767b430aab5aa4ca8e76b0c36433cf24dba5f9ba864f4175f49a"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x4, 0xaf, 0xf9}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x3, 0x10, 0x80}}, [{0xdd, 0x4e, "7e2ed136b5b5906eaed0c9576f0bca7b4a3807bd93cbec9ee4f1f5cf51cfb7602b3e36de4d1e44df27054ec9d5eb5ceb0b1211285d93aeb531a6036262c048b049757e8ad538a68e8b196e83eec6"}, {0xdd, 0xed, "b4b57b443798a8fb1276f43da97cd5c13ac2fa9ef9f9070ea6120601f05b8cd75d58eb86c88e29b2643ca9252c44bcd3ef63cfe74b9b2c26c177edca15a5d99bec9d8e4e987a02243541e90fce6db245499edf7dd7e63885fa787ec9cd6db33a05d763c870dd4b52dde57f3b7350330dad7c0aa132f134a20de6bd520612ef82b772a7f579f849e2415cbcf5f453133e168211450832855b806b30b0f1f87a8425f5f0df78d536c1d3049f04518122a3aa937817c2debc357d8071baa58d134f99bc89cd2fb7570e3ba529d397bd0ed856b02c1aefd078adf24ed0536e0525852c927ae3c4b725b1202664f977"}, {0xdd, 0x90, "06588821ec193e871028285934a054a61ef63c8da1502ee4bf0fe4f6785e043e95e7f4ddb42f781ee9288bf1a63654df0b518eb76420afa893f309e378cf9424c5d31a6ff1e99f46ffa6268010ba6ddebbfc0a723638ac6b4e5cceadba89db324b139e3ca98b284bc8ef5848998c2e2385048eeee8961fe32794a7082e9fc067f9c89ef03f35b2c44588c1293e3e085e"}, {0xdd, 0x7b, "fbb94b828782a07a7d6b41310f9430fc4cf84476004644cedc62dc4fcc1242fd1189a640f47af6e773bb9c531f4eb36ba1a2dc0806e6afaa98bfd8d064199f2ef0533191d9e093122ec2fbc0897ade1f61782a193b78f4916768312e3145897be7484d2b3e160d0fbc54f5efd82a446a6116cad52741457af39835"}, {0xdd, 0x62, "b904f2711fa3bdd236563a32bc1e837855acf11e10fefead167fefc0f3a93d45527ac0c952146914b9795aa807619216e99eacfb4347b5f65dc9f44064daa736ed30ae1da71a454a6208e6c9c103e35d45d24219c4c4c6d9d14b948181768fe8c657"}, {0xdd, 0x15, "863bc2bc2d02c56f4e68e680a287e8efa4c6f52e96"}]}}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x4, 0x1}}]}, @NL80211_ATTR_IE={0xc9, 0x2a, [@chsw_timing={0x68, 0x4, {0xd40}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x3ff, @void, @val="db7fee2fe6ec65ea1de9f2e57ee12341"}}, @tim={0x5, 0xa5, {0xe8, 0x2e, 0x0, "86bb7c7044b457cf831acea9abaa46bd00b4cf7a15cd1b23e2374d8ba92ce149cb75bbd98af133d1c6d02e54203e43f0fcc7450bb83f0122dba9761e3aa4d7ea16adcecbffee726c6a9042ff06b7e50ce860ce8c8e2590cd626420f567dc5a5641d0b710e0ffbf0f1cc75c2e2b6e72bb3d871d6721d99ad2749247a884d6bec8c3f385bf0b77dda40b054d7070634daed3381a4e5ab9753707a7989738bafe110f67"}}]}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24000814}, 0x79720f5c71d0c3b2) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:44:27 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x6, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4}, @alu={0x7, 0x0, 0x6}, @alu={0x4, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:44:28 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

18:44:28 executing program 5:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
setpgid(0x0, r1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)

[ 2622.950816][T16190] usb 5-1: new high-speed USB device number 56 using dummy_hcd
18:44:28 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x28, @dev}]}, 0x40}}, 0x0)

[ 2623.047006][T28928] wlan1: authenticate with 08:02:11:00:00:00
[ 2623.058130][T28928] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
18:44:28 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)

[ 2623.168933][T10600] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2623.198708][T16190] usb 5-1: Using ep0 maxpacket: 8
[ 2623.319220][T16190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2623.330846][T16190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2623.341029][T16190] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[ 2623.350480][T16190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2623.468175][T28941] netlink: 'syz-executor.1': attribute type 40 has an invalid length.
18:44:28 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

[ 2623.604783][T28928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2623.611117][T16190] usb 5-1: config 0 descriptor??
18:44:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2b973d46af"}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x800)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="5000000008021100000108021100004008021100000000000000000800e2172443f3ceb3a50dcb9d4c06a43f995e50b43f97622b90a2019745037735800000000000ec160abedcbb74c790c05309b1719c371d662f73dabd09e3e65dd0e50d3172677d232a6f02455990de2bf57179f7d208d8ea362278ccf943bfb8df7b8aa1734dc82fa157448a0c7e645a56a8c57b5baaad9eccac542543f1e54f6ad6e1a346cea03135ba114d345a385a425ce6150443b0552d2772804c363ef2e0daee75d7f5"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x40, r5, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0xff}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c12182458295bc223a191ba799d08eec8c90eaab139bdc6bf40537158d67908a44620f22a1f2325f8620835b45172b3f788cf85975f629a05c2b1972e363f521188695ab5b7bb801513c7a161de50a6b6d28ff1e32d3a4836ac564eef77b015cb9a03b1813c6b1a0061c4aceef9a6a0e076858bf1849145569b55ae89b69cc2055df19d6e5e19b6842adda856db9aad644358ee4e8e9584f35173429f1629228871e76b63f949c60e000000"], 0x28)

[ 2623.939780][T10600] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 2624.049419][T10600] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2624.221660][T28954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2624.319550][T13436] usb 5-1: USB disconnect, device number 56
[ 2624.334857][T28954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2624.538932][T28954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:44:30 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

18:44:30 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x40045201, 0x0)

18:44:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x28, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)

18:44:30 executing program 5:
r0 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000480))
r2 = eventfd(0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r2, 0x1)
syz_io_uring_complete(r1)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)

18:44:30 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

18:44:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3) (async)
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2b973d46af"}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x800) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="5000000008021100000108021100004008021100000000000000000800e2172443f3ceb3a50dcb9d4c06a43f995e50b43f97622b90a2019745037735800000000000ec160abedcbb74c790c05309b1719c371d662f73dabd09e3e65dd0e50d3172677d232a6f02455990de2bf57179f7d208d8ea362278ccf943bfb8df7b8aa1734dc82fa157448a0c7e645a56a8c57b5baaad9eccac542543f1e54f6ad6e1a346cea03135ba114d345a385a425ce6150443b0552d2772804c363ef2e0daee75d7f5"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x40, r5, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0xff}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async, rerun: 64)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c12182458295bc223a191ba799d08eec8c90eaab139bdc6bf40537158d67908a44620f22a1f2325f8620835b45172b3f788cf85975f629a05c2b1972e363f521188695ab5b7bb801513c7a161de50a6b6d28ff1e32d3a4836ac564eef77b015cb9a03b1813c6b1a0061c4aceef9a6a0e076858bf1849145569b55ae89b69cc2055df19d6e5e19b6842adda856db9aad644358ee4e8e9584f35173429f1629228871e76b63f949c60e000000"], 0x28)

[ 2625.125741][T28984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2625.137967][T28984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
18:44:30 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/hwmon', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x0)

18:44:30 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x881, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0))
ioctl$TCXONC(r1, 0x540a, 0x3)

18:44:30 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$tun(r0, 0x0, 0x0)

18:44:30 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2b, 0x2, 0x0, "e0008e3d7f58d556ac759092b038cbbc800000f524f9f208fdff00"})

18:44:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000000)=@ethtool_channels={0x51}})

18:44:31 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$tipc(0x1e, 0x2, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

[ 2625.820619][T28993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:44:31 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x9, 0x0, "e5ae045c6219e3a474aa922206c5be49d3d7bbe09d642330203fb8a4c096ae5b"})

18:44:31 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}, @IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x44}}, 0x0)

18:44:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x4, 0x1, @multicast1}]}, 0x24}}, 0x0)

18:44:31 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x881, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0))
ioctl$TCXONC(r1, 0x540a, 0x3)

18:44:31 executing program 1:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x473})

[ 2626.504399][T29021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2626.954821][T12290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2627.100162][T12290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2627.386445][T12290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2627.570859][T12290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2629.514809][T12290] hsr_slave_0: left promiscuous mode
[ 2629.543462][T12290] hsr_slave_1: left promiscuous mode
[ 2629.567632][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2629.577924][T12290] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2629.602686][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2629.610566][T12290] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2629.633931][T12290] bridge_slave_1: left allmulticast mode
[ 2629.639881][T12290] bridge_slave_1: left promiscuous mode
[ 2629.646428][T12290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2629.667536][T12290] bridge_slave_0: left allmulticast mode
[ 2629.673650][T12290] bridge_slave_0: left promiscuous mode
[ 2629.680352][T12290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2629.734271][T12290] veth1_macvtap: left promiscuous mode
[ 2629.741708][T12290] veth0_macvtap: left promiscuous mode
[ 2629.747638][T12290] veth1_vlan: left promiscuous mode
[ 2629.755801][T12290] veth0_vlan: left promiscuous mode
[ 2630.608759][T17952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2630.619837][ T5008] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2630.636498][ T5008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2630.658710][T17952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2630.681446][T17952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2630.692462][T17952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2631.179202][T12290] team0 (unregistering): Port device team_slave_1 removed
[ 2631.215596][T12290] team0 (unregistering): Port device team_slave_0 removed
[ 2631.246053][T12290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2631.285595][T12290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2631.487030][T12290] bond0 (unregistering): Released all slaves
[ 2632.726062][T29075] chnl_net:caif_netlink_parms(): no params data found
[ 2632.808946][T28216] Bluetooth: hci3: command 0x0409 tx timeout
[ 2633.933902][T29075] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2633.942579][T29075] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2633.950508][T29075] bridge_slave_0: entered allmulticast mode
[ 2633.962261][T29075] bridge_slave_0: entered promiscuous mode
[ 2634.052081][T29075] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2634.060769][T29075] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2634.068705][T29075] bridge_slave_1: entered allmulticast mode
[ 2634.077814][T29075] bridge_slave_1: entered promiscuous mode
[ 2634.326559][T29075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2634.412371][T29075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2634.615839][T29075] team0: Port device team_slave_0 added
[ 2634.651236][T29075] team0: Port device team_slave_1 added
[ 2634.864871][T29075] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2634.872102][T29075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2634.898595][T29075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2634.901100][T28216] Bluetooth: hci3: command 0x041b tx timeout
[ 2634.977389][T29075] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2634.985018][T29075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2635.011386][T29075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2635.281485][T29075] hsr_slave_0: entered promiscuous mode
[ 2635.303358][T29075] hsr_slave_1: entered promiscuous mode
[ 2635.316811][T29075] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2635.324650][T29075] Cannot create hsr debugfs directory
[ 2636.584834][T29075] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2636.623289][T29075] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2636.686239][T29075] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2636.729912][T29075] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2636.968704][T17952] Bluetooth: hci3: command 0x040f tx timeout
[ 2637.316109][T29075] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2637.396798][T29075] 8021q: adding VLAN 0 to HW filter on device team0
[ 2637.433432][T26072] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2637.441146][T26072] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2637.486370][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2637.494082][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2637.842588][T29075] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2638.047332][T29075] veth0_vlan: entered promiscuous mode
[ 2638.144668][T29075] veth1_vlan: entered promiscuous mode
[ 2638.292042][T29075] veth0_macvtap: entered promiscuous mode
[ 2638.354841][T29075] veth1_macvtap: entered promiscuous mode
[ 2638.458343][T29075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2638.470036][T29075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.480248][T29075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2638.491033][T29075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.501125][T29075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2638.511923][T29075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.527379][T29075] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2638.580203][T29075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2638.591758][T29075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.601959][T29075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2638.612669][T29075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.622772][T29075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2638.633466][T29075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.651975][T29075] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2638.706666][T29075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2638.715927][T29075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2638.725127][T29075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2638.736131][T29075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2638.934045][ T6028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2638.943680][ T6028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2639.048760][T28216] Bluetooth: hci3: command 0x0419 tx timeout
[ 2639.075686][T10600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2639.084995][T10600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
18:44:44 executing program 2:
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000))
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
select(0x40, &(0x7f0000000180)={0x8}, 0x0, &(0x7f0000000200)={0xf9}, 0x0)

18:44:44 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0x30}}, 0x0)

18:44:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2b973d46af"}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x800)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="5000000008021100000108021100004008021100000000000000000800e2172443f3ceb3a50dcb9d4c06a43f995e50b43f97622b90a2019745037735800000000000ec160abedcbb74c790c05309b1719c371d662f73dabd09e3e65dd0e50d3172677d232a6f02455990de2bf57179f7d208d8ea362278ccf943bfb8df7b8aa1734dc82fa157448a0c7e645a56a8c57b5baaad9eccac542543f1e54f6ad6e1a346cea03135ba114d345a385a425ce6150443b0552d2772804c363ef2e0daee75d7f5"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x40, r5, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0xff}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c12182458295bc223a191ba799d08eec8c90eaab139bdc6bf40537158d67908a44620f22a1f2325f8620835b45172b3f788cf85975f629a05c2b1972e363f521188695ab5b7bb801513c7a161de50a6b6d28ff1e32d3a4836ac564eef77b015cb9a03b1813c6b1a0061c4aceef9a6a0e076858bf1849145569b55ae89b69cc2055df19d6e5e19b6842adda856db9aad644358ee4e8e9584f35173429f1629228871e76b63f949c60e000000"], 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
dup2(r4, r3) (async)
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2b973d46af"}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x800) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="5000000008021100000108021100004008021100000000000000000800e2172443f3ceb3a50dcb9d4c06a43f995e50b43f97622b90a2019745037735800000000000ec160abedcbb74c790c05309b1719c371d662f73dabd09e3e65dd0e50d3172677d232a6f02455990de2bf57179f7d208d8ea362278ccf943bfb8df7b8aa1734dc82fa157448a0c7e645a56a8c57b5baaad9eccac542543f1e54f6ad6e1a346cea03135ba114d345a385a425ce6150443b0552d2772804c363ef2e0daee75d7f5"], 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x40, r5, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0xff}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c12182458295bc223a191ba799d08eec8c90eaab139bdc6bf40537158d67908a44620f22a1f2325f8620835b45172b3f788cf85975f629a05c2b1972e363f521188695ab5b7bb801513c7a161de50a6b6d28ff1e32d3a4836ac564eef77b015cb9a03b1813c6b1a0061c4aceef9a6a0e076858bf1849145569b55ae89b69cc2055df19d6e5e19b6842adda856db9aad644358ee4e8e9584f35173429f1629228871e76b63f949c60e000000"], 0x28) (async)

18:44:44 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x881, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0))
ioctl$TCXONC(r1, 0x540a, 0x3)

18:44:44 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)="d6", 0x1)
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/19, &(0x7f00000000c0)=0x13)

18:44:44 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="9f8e0e73f9882e6972a3ec77655d4f4f99840627b89bffb8db265730e6d00bdfc3dfc01e36a93719f50403a811fcb9ee4672088aa9599fd1f08b0c1cba92", 0x3e}, {&(0x7f0000000040)="b85d7955c6f5e760adb8d94c8649f2fbb722123d396d4dd6877292032576a2ee24ae84a6e50e60ee319a9387fff8d166a89f15fdb4ad6d066ad30b7c8ce36e2fb13af7b8ab80f3fcfe7ada114263de1bac8f7ecadb6975df0db1c58e04eaaa287792a1174816a6b7ca57906adf67958b73f97a1c28244d65da310e349d8c6a759fed7f3da930c34964501fc743f73fa033247fca9eb45fa8c48aedd513f642e1c751125230ed6b18b5f59c5388cd0bd9e53c1cf7a242a87a4d3d4197410ba4a00d543c72ab", 0xc5}, {&(0x7f0000000300)='f', 0x1}], 0x3)

18:44:45 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000640), 0x0)

18:44:45 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMODE(r0, 0x4b3c, 0x0)

18:44:45 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x141a82, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040))
write$damon_schemes(r1, &(0x7f0000000080)={0x0, 0x10000}, 0x66)
ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

18:44:45 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x881, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0))
ioctl$TCXONC(r1, 0x540a, 0x3)

[ 2640.037536][T29483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2640.202830][T29483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2640.346094][T29483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:44:45 executing program 4:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
close(r0)
pselect6(0x40, &(0x7f0000000040), &(0x7f0000000100)={0xc}, 0x0, 0x0, 0x0)

18:44:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x5c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_DST={0x14, 0x2, @ipv4}]}}]}, 0x5c}}, 0x0)

18:44:46 executing program 2:
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000))
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
select(0x40, &(0x7f0000000180)={0x8}, 0x0, &(0x7f0000000200)={0xf9}, 0x0)

[ 2640.765400][T29493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:44:46 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x14, &(0x7f00000000c0)={r2}, 0x8)

18:44:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2640.877050][T29513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2640.939787][T10600] usb 2-1: new high-speed USB device number 38 using dummy_hcd
18:44:46 executing program 4:
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/4096)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000001000))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000001040)={0x0, 0x3, 0x1f, 0x3, '\x00', 0x2})
r0 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x2, 0x103400)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000010c0)={0x4, 0x3, 0xfffffc00, 0x3, '\x00', 0x7})
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000001140)={0x2, 0x18, [0x8000, 0x8, 0xeddb, 0x80000001, 0x5, 0x10001]})
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001200)={{0x6, 0x5, 0x8001, 0xffff}, 0x3, 0x10000000, 0x0, 0x0, 0x1, 0x1, 'syz0\x00', &(0x7f00000011c0)=['/dev/snd/controlC#\x00'], 0x13})
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001340))
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000001380)={{0x1, 0x3, 0xfff, 0x294, 'syz1\x00', 0x8}, 0x1, [0x6, 0x4, 0x7fffffffffffffff, 0x3, 0x800, 0x1, 0x0, 0x6, 0x2, 0x8000000000000001, 0x0, 0x5, 0x4, 0x2fc, 0x4, 0x2, 0x4, 0x5, 0xe3f, 0x3, 0xfffffffffffffff7, 0x7, 0x101, 0x3, 0xacd, 0x8, 0x3, 0x8, 0x8, 0xff, 0xff, 0x8, 0x100000001, 0x0, 0xfffffffffffffffd, 0x8b, 0x6, 0x101, 0x0, 0x800, 0x80, 0x7f, 0x0, 0x2, 0x7a7, 0xcc, 0xc30, 0x100000000, 0x4, 0x7, 0x7, 0x81, 0x7, 0x5, 0x8, 0x5, 0x2, 0x7fffffff, 0x3, 0x532b51b1, 0x8000000000000001, 0xff, 0x9, 0x4a78, 0x5, 0xfb10, 0x80, 0x6, 0x8000, 0x8000, 0x6, 0x9, 0x81, 0x5, 0x0, 0x6, 0x0, 0x8, 0x1, 0x7, 0x3, 0x7, 0x0, 0x7, 0x1ff, 0x2, 0x4, 0x7, 0x8, 0xffffffff, 0x0, 0x1, 0x0, 0x7, 0xffffffffffffff2a, 0x8, 0x74da, 0x9, 0xc8, 0x7fff, 0x1, 0x3, 0x400, 0x6, 0x8000000000000001, 0x8000000000000000, 0x2, 0x0, 0x8, 0x80000000, 0x9, 0x1, 0x5, 0xaa15, 0x445, 0xae1a, 0x8, 0x400, 0x0, 0x7, 0x5, 0x1, 0x994, 0x9, 0x3, 0x4, 0x7fffffffffffffff, 0x9]})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001ec0)={{0x8, 0x4, 0x3, 0x0, 'syz1\x00', 0x1}, 0x2, 0x2, 0x2, 0x0, 0x2, 0x64b5, 'syz1\x00', &(0x7f0000001e80)=['\x00', '\x00'], 0x2})

[ 2641.309026][T10600] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2641.329698][T29533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:44:46 executing program 0:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0xdb7}, 0x8, 0x0)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0)

18:44:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000380))

[ 2641.437873][T29533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2641.489363][T10600] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.40
[ 2641.499800][T10600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2641.508040][T10600] usb 2-1: Product: syz
[ 2641.513280][T10600] usb 2-1: Manufacturer: syz
[ 2641.518090][T10600] usb 2-1: SerialNumber: syz
[ 2641.738537][T10600] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
18:44:47 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000003c00)='tmpfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e')
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='mounts\x00')
read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020)

[ 2641.876655][T29533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:44:47 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x47}])

[ 2641.998894][T29495] PM: Enabling pm_trace changes system date and time during resume.
[ 2641.998894][T29495] PM: Correct system time has to be restored manually after resume.
[ 2642.138181][T10600] usb 2-1: USB disconnect, device number 38
[ 2642.224442][T29562] tmpfs: Bad value for 'gid'
[ 2642.909703][T12290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2643.079388][T12290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2643.225430][T12290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2643.390869][T12290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:44:49 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x141a82, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040))
write$damon_schemes(r1, &(0x7f0000000080)={0x0, 0x10000}, 0x66)
ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

18:44:49 executing program 0:
add_key$fscrypt_v1(0x0, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffb)
r0 = socket(0x2, 0x5, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8933, &(0x7f0000000040))

18:44:49 executing program 5:
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "905227c7899c99d51df9451741f7c3f356b66d8548a6a138435bcb545f4bfd57", <r1=>0xffffffffffffffff})
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"65298cce4509f96038acc86aa0133db1886dafb4bbb8ebade10f7a4fbb9d77e0", r2})

18:44:49 executing program 2:
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000))
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
select(0x40, &(0x7f0000000180)={0x8}, 0x0, &(0x7f0000000200)={0xf9}, 0x0)

18:44:49 executing program 4:
ppoll(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0x4f9d4, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r1, 0x0, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'})
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r3, 0x0, r2, 0x0, 0x402f408, 0x0)

18:44:49 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x20, 0x4, 0x20, 0xff, 0xf1, 0x2, 0xe, 0x20, 0xfb, 0x1, 0x80, 0x40, 0x94, 0xd5}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0)
quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0xee00, &(0x7f00000000c0)={0x7, 0x1, 0x0, 0x2})
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7f, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0x6a)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x20900, 0x0)
recvmmsg(r2, &(0x7f0000000f80), 0x3, 0x0, &(0x7f0000001040)={0x0, 0x989680})
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
r3 = socket(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
sendmmsg$inet_sctp(r3, &(0x7f0000009500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2300ff1d491dc6c14002b80000000000ddffff496d390000000000b2b9d68d9313c6efaa0181e823456a64b27275cd310636e4269c6fc65f8cec9b8cae", @ANYRES32=r5], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001d40)={r5}, &(0x7f0000001d80)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001080)={r5, 0x2d25, 0x3, 0x80}, &(0x7f00000010c0)=0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x141842, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_RESOLV_LIST={{}, 0x3}}}, 0x7)

[ 2644.602434][T29617] veth1_macvtap: left promiscuous mode
[ 2644.729020][T24889] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2645.090043][T24889] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2645.272411][T24889] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.40
[ 2645.282032][T24889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2645.290549][T24889] usb 2-1: Product: syz
[ 2645.294976][T24889] usb 2-1: Manufacturer: syz
[ 2645.302266][T24889] usb 2-1: SerialNumber: syz
[ 2645.477294][T24889] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[ 2645.725389][T29604] PM: Enabling pm_trace changes system date and time during resume.
[ 2645.725389][T29604] PM: Correct system time has to be restored manually after resume.
[ 2645.857609][ T5888] usb 2-1: USB disconnect, device number 39
[ 2646.507608][T12290] hsr_slave_0: left promiscuous mode
[ 2646.528001][T12290] hsr_slave_1: left promiscuous mode
[ 2646.557341][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2646.565691][T12290] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2646.596249][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2646.604267][T12290] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2646.636842][T12290] bridge_slave_1: left allmulticast mode
[ 2646.642957][T12290] bridge_slave_1: left promiscuous mode
[ 2646.649711][T12290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2646.694105][T12290] bridge_slave_0: left allmulticast mode
[ 2646.700491][T12290] bridge_slave_0: left promiscuous mode
[ 2646.707143][T12290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2646.808819][T12290] veth1_macvtap: left promiscuous mode
[ 2646.814573][T12290] veth0_macvtap: left promiscuous mode
[ 2646.820659][T12290] veth1_vlan: left promiscuous mode
[ 2646.826202][T12290] veth0_vlan: left promiscuous mode
[ 2647.634498][T17952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2647.647103][T17952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2647.660547][T17952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2647.673477][ T5008] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2647.688963][T17952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2647.699498][T17952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2648.174123][T12290] team0 (unregistering): Port device team_slave_1 removed
[ 2648.206781][T12290] team0 (unregistering): Port device team_slave_0 removed
[ 2648.243065][T12290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2648.278085][T12290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2648.514267][T12290] bond0 (unregistering): Released all slaves
[ 2649.673704][T29661] chnl_net:caif_netlink_parms(): no params data found
[ 2649.773415][T17952] Bluetooth: hci3: command 0x0409 tx timeout
[ 2651.071352][T29661] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2651.079336][T29661] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2651.087204][T29661] bridge_slave_0: entered allmulticast mode
[ 2651.097054][T29661] bridge_slave_0: entered promiscuous mode
[ 2651.177083][T29661] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2651.184840][T29661] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2651.192930][T29661] bridge_slave_1: entered allmulticast mode
[ 2651.202201][T29661] bridge_slave_1: entered promiscuous mode
[ 2651.334755][T29661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2651.417293][T29661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2651.592818][T29661] team0: Port device team_slave_0 added
[ 2651.625487][T29661] team0: Port device team_slave_1 added
[ 2651.766137][T29661] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2651.776824][T29661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2651.804883][T29661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2651.826642][T29661] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2651.834181][T29661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2651.861849][T29661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2651.883440][T17952] Bluetooth: hci3: command 0x041b tx timeout
[ 2652.054988][T29661] hsr_slave_0: entered promiscuous mode
[ 2652.081479][T29661] hsr_slave_1: entered promiscuous mode
[ 2652.117986][T29661] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2652.125944][T29661] Cannot create hsr debugfs directory
[ 2653.573319][T29661] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2653.604060][T29661] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2653.630130][T29661] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2653.661913][T29661] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2653.935778][T28216] Bluetooth: hci3: command 0x040f tx timeout
[ 2654.160231][T29661] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2654.242617][T29661] 8021q: adding VLAN 0 to HW filter on device team0
[ 2654.301722][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2654.309459][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2654.353779][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2654.361510][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2654.558121][T29661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2654.722909][T29661] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2655.014053][T29661] veth0_vlan: entered promiscuous mode
[ 2655.075103][T29661] veth1_vlan: entered promiscuous mode
[ 2655.209447][T29661] veth0_macvtap: entered promiscuous mode
[ 2655.243076][T29661] veth1_macvtap: entered promiscuous mode
[ 2655.341285][T29661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2655.352110][T29661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2655.362316][T29661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2655.374949][T29661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2655.385432][T29661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2655.396141][T29661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2655.411730][T29661] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2655.475425][T29661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2655.486249][T29661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2655.497859][T29661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2655.508610][T29661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2655.518875][T29661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2655.529711][T29661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2655.543619][T29661] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2655.609498][T29661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2655.618563][T29661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2655.627418][T29661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2655.636511][T29661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2655.840601][ T5888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2655.849294][ T5888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2655.968913][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2655.976964][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2656.009069][T17952] Bluetooth: hci3: command 0x0419 tx timeout
[ 2656.223367][T30048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2656.309188][T30050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2656.397959][T30048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:45:02 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_cmd={0x29}})

18:45:02 executing program 2:
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000))
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
select(0x40, &(0x7f0000000180)={0x8}, 0x0, &(0x7f0000000200)={0xf9}, 0x0)

18:45:02 executing program 4:
getpid()
r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x18}, 0x14)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map=r0, 0xffffffffffffffff, 0x18}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200), 0x10)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001780)={0xffffffffffffffff, &(0x7f0000001700)}, 0x20)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000017c0), 0x2, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001800), 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$cgroup_devices(r1, &(0x7f00000024c0)='devices.deny\x00', 0x2, 0x0)
syz_clone(0x0, &(0x7f0000002500), 0x0, &(0x7f0000002540), 0x0, &(0x7f00000025c0))
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
gettid()

18:45:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0)

18:45:02 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x141a82, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040))
write$damon_schemes(r1, &(0x7f0000000080)={0x0, 0x10000}, 0x66)
ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

18:45:02 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4000009, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x0, 0x0, 0x47425247}})

18:45:02 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8001, 0x0)

18:45:02 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socket$inet_udplite(0x2, 0x2, 0x88)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7f06)
getdents(0xffffffffffffffff, &(0x7f0000000500)=""/136, 0x88)
dup2(0xffffffffffffffff, r1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0x29, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @remote}, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'vlan1\x00'})
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=0x800, 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007140)={'batadv_slave_0\x00'})
sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000b40)="a47cbe20eddfb7db5aafd8ea46ce4cc614bcc5e64e5d868ee39b1f2e123ceffb03c0517fbda4de93ae54c901585a063d43b78c06a5a1219e2ab49107a8aa690b779492857634c8a3dc95137b982f2c94e711de926df8b59b0392290ab963ef2eea3120be3087c63fa65b600459327e9558f4befd9d9e42d3c2596301d484", 0x7e}], 0x1}}, {{0x0, 0x0, &(0x7f00000032c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
r4 = socket$inet(0x2, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f00000055c0), 0x0, 0x0)
getsockopt$MRT(r4, 0x0, 0xcf, &(0x7f0000000100), &(0x7f00000005c0)=0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/14, 0xe}, 0x100)

[ 2657.357350][T30081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.369487][ T5888] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 2657.504229][T30080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:03 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x0, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000100)="b4", 0x1, 0x44, &(0x7f0000000000)={0xa, 0x0, 0x9606, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

[ 2657.729806][ T5888] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
18:45:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

[ 2657.989243][ T5888] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.40
[ 2657.998692][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2658.006940][ T5888] usb 2-1: Product: syz
[ 2658.016740][ T5888] usb 2-1: Manufacturer: syz
[ 2658.021943][ T5888] usb 2-1: SerialNumber: syz
18:45:03 executing program 2:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080))

[ 2658.163081][ T5888] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
18:45:03 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8001, 0x0)

18:45:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}]}, 0x40}}, 0x0)

[ 2658.447523][T30061] PM: Enabling pm_trace changes system date and time during resume.
[ 2658.447523][T30061] PM: Correct system time has to be restored manually after resume.
18:45:03 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00')
fcntl$notify(r0, 0x402, 0xb1c661d318500c74)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

[ 2658.593440][T30108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2658.619844][ T5888] usb 2-1: USB disconnect, device number 40
18:45:04 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2658.754214][T30108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2658.861713][T30122] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 2658.873767][T30108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2659.022157][T30116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001b2c56e6ed5600e2fbe565cf8a3fda944000006"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200202c0}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x4c, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x84)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2659.653987][T30140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2659.884283][T30143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2660.350692][T12274] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:45:05 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x141a82, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040))
write$damon_schemes(r1, &(0x7f0000000080)={0x0, 0x10000}, 0x66)
ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 2660.531343][T12274] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:45:05 executing program 4:
process_vm_readv(0xffffffffffffffff, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0)

18:45:05 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$igmp(0x2, 0x3, 0x2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/config', 0x0, 0x0)
lseek(r1, 0x0, 0x1)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x800, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x490)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="180100001c0000000000000000000000858e5051d481cd4932385c4203b60acf8def"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000ac0)={@broadcast, @local, 0x0, "f48a53081773f4e059fcf0d237dea9f6d525d321c64f2a45cb6868b74259821a", 0x1ff, 0xaf7, 0x5, 0x3ff}, 0x3c)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180), 0x4)
r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x14000, 0x0)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000b40)={@rand_addr=0x64010100, @rand_addr=0x64010100, 0xffffffffffffffff, "ab342fd9847fc5018fa27ae0390c6d5d0f23927401057ca1d18ec80e8375d074", 0x0, 0x10001, 0x8000, 0xfff}, 0x3c)
sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6_vti0\x00', <r5=>0x0, 0x2f, 0x2, 0xb8, 0x15, 0x0, @private0, @private1, 0x1, 0x8000, 0x6, 0x7fff}})
r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001d552000000000000000000000a4c000000060a0b040000000000000004020000"], 0x74}}, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001380)={{}, "c073bbf81a834b1e2be7ac1a7487621ee2c8dafb9ac9ffde474d74bcdd1be66526bc9c96c92598f8a7fc1f39d2880da5e0442c2d0e246da6a30e56a710bac9c253e73befd8ac455933aab0c4e499bdfcbdbc0c9bb168df4bad95f6d0854e33497e3646ee1fa98626e4a370c2fc198586a7a71d02294cb5ebf307d2dc9fdf1d9d53a9d6c869bc221c1d670b8a6c663dfecaac541f82e7bd899700c61611d997ee79edeb81408e4c346de90e931f2407a51d2b0d60d18170ecc46fba06f9e09feaf8f00af0d333fce40b70fc15b6dababeb2f27db69dc374783e440ba128091ac32eceb8765b4c7f870f7b73f40ff48949772292546d0fe2b2caa77d1d7c9e5295dad0024ed11f77d2c2012be2f360d41e0897a6a6d8c27246ea9c5bf00b99f8c645d4d54b9123f713bb896f27e5be92369872c920448bc357d9b47732f20048fc9bdb7f0e603e586c77fb66331bf21bd757a779a8b60533cc97a089812c2d7eb889f15158f80e3664a64f64786572093296ffe38d3f7e401c6780a3d4a89226c2344131b633935b73121ff36c71452706ae5f140f821068666b36b19066513efe417712d9a1464a36d780c882ed4d4a9d43ebd6ac92e917d853c2179d3ea1c8485cd7b2daa5d12fff7dc43204c24283956de2f77cb2fa1759cf61edf0bab54f18ab4dcb46982719746184741b92d6f0d5675181f943f1c09b6f678569eff4b05260085d447d8ce187889d535804306a56e81ac929af651a35f7d75309e141ff238ae0c1e887bc607348f704981b0eb7d5bf79cd7f65c18f460a1fbd653c9ed7553db1179eb28dd4de26dad18645a5e2730da98fa7ee4418beeb38cc6bbcc584dc4b139f932b02245eb344bafe098f4c618164edeb22f7ec7db11a0b41944cd82fee3296adb2d777e71886ba765cb6380706616f3fdaa13afe8168c603263a077bedea4fedbcc7699b101cfa952a244dfcbb4e13c4428191f7ccce514dd12196c8d38ad9f5561910fb7cc48413b7c42870ef79d9db265abd22074fa1d2e4dfdfd63e43ab6039d41635c1dbec5a57f8b41ac4ff6c4d2e56b0b075289a86f529c469c353d3c18790262d857dfba48df69acd7e6d692fc6ee78a6f643a44c39a31a6246f30b9c5dac4925a6f4ec09e49b00b11508975eabfc349fb753982ca135d2e5a477f028cbe5499ec17d13cc5ac6e84f77cf0685ae943f9e85a3f74d25973bbc4310f760c66616dabf161bbfcb91e48d74f1b978569e480efb0f34c5970155913656af7e0f1a0aa8062041f100278270a1b853db38762f519b8fb8ad76a4b2d3e3866fd07e330db2fae89ce1f642125f22679206f2ef93013b9a9d26c3a9ddd7ee0ca60bd278e538463047b6c0da542dc7b71719749735777c20982da5de865cb221300d6f81cdcf42fabc12170ce58e3652532d71a13a826b726c53ab95f7f592d6d90e93788c88303dab88d33fc70855990066ab9f6979ef9c1b3a46563ef6a530480e01f6eef66a2848668fbc3988453e6fbd967406198793e5a7bf34b3abfee14e2f85c57096242c6f2a03910b3a372571331a8c81b80647e703c10a194857d5138411901cc73cd8fcfc7d90ee23d70c3aa7c6e09b0db21220fc01cab46e6e35da4134b711910500a750d44fd7150a03d615409f6014c7c3867e90d77cbf22b95605680c54552b6d16fd525917c07c722e5d1496f2f8eac65358a77a1e5d72c2fabe08174e4745f598a6b50f0a5e3cdbf8c902bff697525272db02980943605e64c9f0ec7e4efe3796f4e3dde58dbd21610baeaa804f3809fde24d1e87d37885400ff4da3c4b9e65089677f992b243a59a1b9025705956828b7caa6a079b922f8f567fbb9be53d74afd2fe6ec62e6f7e0c6e69be19f5460bfa2c456f9378cbf09fa992ada9c7f473ed3c9f734e77ab6b2e7d853675e6bebeb36454c8fbce8d0ae7f9c440ba063602eb75f95bd897b6c004da738a36120ae12536a098f23516e2a997530f0642029f1c0597017cca770593863d6956c9e49e2d4985a7357b8cfa2ca1fa893d2292db90e1447826f48e283f049aa8abd9f923ba3c958e155bd074d3f5c32a71b10f05861fe98c07924f2c3a515c512549567abb30a70ba040b5eb5a08e30c67fdb8934372038508abfbb33a9d3f203d1adeb6e40d9996b1c8142df1df3ebb5c7a37d4ebf3255f7eaa3a0a8b33fe87dc77e53b8ccb3f55d180bfeab06d93755db68a9e384b56fe97cf52a94803edb5331705d5a255b185cb794f9f8c7bef368e5bef021d11382bfdc9cb1e1d104acc2f153a60c799d29769e04e8479c2f512bfa623694787a31bd051688e7192982dbaaaa2523c31cb38527dc8fecf05d06180a03b5347b4f2d9203774869f3f0c5a298ed5e746dc394aac7aabc534194caeff7bf654c930da91e16ca0fe2e472e7c42436979de52eb5dc17ec9a2ad5094b670e8b2f61f38cc84b2ed680a1b99d65f3823c4300188e99efb75c82a6d6f086ee22b4afeca907f7e20ab448b019aa744212fc03e11d34a80452b6551b9a2aa94766987f4b43766b1572e3b428b057531b446418a2d936e44bcf06c35c8944a4ccf226d7ee242db4ab30d5bb7b3b32c8a0caf08fc793be45f41f82db77339ef6c03314e9cca86339612899ab0aa3a257086c665ede56b30c0fe754e0b2e11eb8618ce7a43f73e926449ac86e99f09e7656b1628aee5f2f1aab66280f7e5f04e3313f81e52253ba09266c1fcd46c38c3e956c7ab357f8d238551ec28133032ecb6221e02c223e64f87c158e5da42ba50c294be3aa9b81df8d65f6e7788f8f388e882784554eed8aec4f5773fce7c20dacbc97bc9d72cc0d1bfb9c9cf11a26fa9dca13ac2e13598896669727b5cb1aad95f38c7c977475037b4faada5712dfc24e466b30b511f554c7075d453a456544b566d6f8c42314ac57c0d27a20f384f30e7e3c44cc8aa161f76d60c1ca78625e56f96269c29ae894e7c8a68f9b5bf97c09487c5434c6f7dc1ed0a3dab6755b2592d87e1e833a9641ce45f27b68b90e9f682ebbd9b50e10bcaaf6a3980da3e2c99c8fefe0a070f369364e408963656337f451cf6b461fa3bf08979090bc8fbd2a5824b18cdc0a7d6c06b0bb66188505c6f514546cac947b7b8214e1c0b45247afe1ccb5c7ec95cf67db8680fdc5f9c38cc1069b82781305c39c827c8fde81a9020429225cb8286ba100042be750ed34d815b6b04ce108c1e99f1f72d506f51aecad26b772209bd6ee336e01438af75fd59d8da2f1b92a721e118219bacd4b85b786627cf2de9a30bb30def3e7600f4eb0bbb3e1f66ac7afdce77697532bea80eaf690aa7f44d5093b51aec9f368a168e93c79be02466b92e086f27cff4fa5066dbe1c448035420b9fd06186f8f650aff46cf960fd69d6a101673129a6a4291061babc82c48c8e3504f879fd66e496f887969ea6b7cec49ea80477140bf4aea83bd8cf525f32e9dde9b3281a7c17e02eb3fa9b39ab59846db6cd3f4a6670cc376cdf518aa33af347877b7969d283957100117ea46a07608ef5ac765eef87c69849e382692670c742207f02ba7c0e2d869c4333ab177f0bd264c77c23e92e2479636d823163a4d9eb0a4ebde1f4180a13e65ecf06d3a46f00cf5a48ec6ee7b6ac6bfed9614d9d4b0a0f840879823a4c74044fadf6d241bc252d0a9852e0cf321cfb6d43607f7926c4bbc88413887d52e52eb50a4cd8829e6d9f91e8d68fbe734efedcc8f64576bb6f1e3021dcd4021f6744b4195cf9923aa6c2a72da6b14e6ba5555b43f225107e8308c239bb4a9a291c2edfe6f14f4f3df02c72693bc7df46e54f8108f86952a7697660bb06bf67fe2aa174451387162ab5ecca5702d0f16315b18c78b9cce5efd63bfcbfaab31f7f6baf8b8b3b3fb15bbfe27e2f016786666f1d8ff15f44dafac9b533fcffc254fafe8c9ba2edaf3614864ac80f93670bbb57eeb104c08721fc67d92582e24c7e23fb6e87c1eede0810557d1f308e96565faa05a30496f36963c6dc55eb46b258ab436d628a6be960930ea681f0984813d35e782d61faaefaad6d2521267fa3de041a22b22d9041883b1063db3b591a7d984f82456c8c6d74698c910da33c51770e48ec8c8fbaaf7ff8c970a049dc9a1f97d6eda7310c2b93d2f5e7a19b1516c08d2c51094d4a5cecc05b6a7f599ce7352b0402bf8a663624486941db3c5c9469483021c93f1b3ec4e597e068ddba46546e6bd8bdb8d558d921ba965e415ff931915782baed7623a386e13d7d16665edc3fd1165c0e4fc7bde650a85c7b95f60e7efdf5ac26b92e0969a2de3c57f8f460fd26d75bfdf22089140e3972e28bab572a6f4289fab01a1b8fa325186fe96308b590dac0027529d14fa7d0e67903022bc76fcb74477e9e53e8596342a4cade78e0f526ffcba0dcb0a2c37da94c7c9675aa7fa1bbd87979aacd1234a1451fadd8477777a4e391352b63355f11cd2f6114817e9e515c3020cc7538d6e9fa021408237a47c5fdcd47fa89f85d8929dc06e6839c169bae034de7b8f0008ff48be458dd8889a479ccb383b18c13ee92e20a4a1a49b91cfc52e8d481e80b3aa1bc0b07b8471ceabf8481ea2403c81245a1bc65bba31ff21ab277938fe451b405029e54d6f6b2c6ad129692268fa3673860f077f86eb0fd5d5d9ef5ae12c3019833753ce3ce7f0ea4800bd562e01399330750e28b9eab2c6f85184b4ef0c89075c37d1e6cebfbcb33b79609e1cbafe4c31308e274551c560b422675813215fff7e099789ae4efbcd39c49992dad8d6042671fd9677d80d9ed7ae6e136fd9b8d4ca38851cd8920a68c6fab7602a637b783818dd1d3b5ff4993c1995570e0448fa06385c0ce9711a2e85fa98493418ec230ac6acf4b80ecc221d72deb09208a4e1171efea350bc988864d0dfb44de21270fa869e863004ab734bb44ee9415675f47ad5fa289ac9f259969c7525122f5be66f333194094c39ca56f048ab3a4a411fedfc1443ca95a410e36465a897795fcd91bd32b71380ff0010a0f56fd910f0cf41f962b8c0b1e3b539381e76efffe0f5e2cacbd7d1587ae19d354f16d5358f143795bbf5e645c63f1b85e3a05d54f19f07ef51e65ff96d931576b1cfb2f38b64b11ff48c39ab12aa5c2f01cd6299e9185edef086680910675f195a33c0be9d56936d80cf03ec97edc0e03faff70607e18f80aa2c110131b66967b3b2937cea7a0e69a4362ae7601bebd92e8fd41c6cd92b29f5d208a0b691186a391de0694338d1f155bb47280b872fe87c0be86c9c6cab7e78a59d6c7a2020ff7db1d797f6636bd80b15feab53e4869d6b823f337248eb8c1e11127fdeb65ba363c8b381cefb08b0b5683885ac169ed598e73012dcdee05b654e05334f8544c2dff5a89f78a88bd74b0b40adc79ccc48db0e3018f91ef0e59b06535281a9e4c6803df7a2a9fcb6924550489f04732abcd88f535759ea30fef17626e566716694bee2e6789442c9ec3dc1528b633ebc7f981ac9e8671174b89e7a774980e7834c8ae3f993b26d50b2ad2c6d59f359681c708935fa51cdcba2963abab6b38f3e44942fbc810e6319606679ebcdb46d2fca06cf6c91c81caa9c90e987f047143d533241b1341bebe3c2b2a321046eef55b2fd14f5b66d6aa9ce88cc9454c6e2359efcece4a14167a4309a5138a8d4401ad760a81553102f7c48f54675f3448ffe1bf57986882d7880489807832cae63b1f4ec98e09fa4d8c2b4a56e7605a8c9887d862af0d5f4f3fddfffb50a9dbcb45624"})
r7 = signalfd(r0, &(0x7f0000000b80)={[0xa03]}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000c80)=ANY=[@ANYRESOCT=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[r6, r7, r7, r1, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000010c0)=0x1, 0x4)
recvfrom$inet6(r3, &(0x7f0000001300)=""/29, 0x1d, 0x10020, &(0x7f0000001340)={0xa, 0x0, 0x1936e1a0, @empty, 0x3}, 0x1c)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x1)
poll(&(0x7f0000000040), 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
shutdown(r3, 0x1)

18:45:05 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v\x00\x00\x00d'], 0x0}, 0x0)

18:45:05 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8001, 0x0)

[ 2660.801552][T12274] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:45:06 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)

[ 2661.052374][T12274] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2661.168721][ T4694] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 2661.508581][T13436] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 2661.524849][T30184] input: syz1 as /devices/virtual/input/input135
[ 2661.551545][ T4694] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2661.563651][ T4694] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2661.574029][ T4694] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 2661.585845][ T4694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
18:45:07 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8001, 0x0)

18:45:07 executing program 0:
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x40000000})
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

[ 2661.969187][T13436] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2662.163777][T13436] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.40
[ 2662.176059][T13436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2662.184560][T13436] usb 2-1: Product: syz
[ 2662.188998][T13436] usb 2-1: Manufacturer: syz
[ 2662.193806][T13436] usb 2-1: SerialNumber: syz
18:45:07 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8931, &(0x7f00000003c0))

[ 2662.337708][ T4694] wacom 0003:056A:0331.006B: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0
[ 2662.445065][T13436] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
18:45:07 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)

[ 2662.572060][ T4694] usb 3-1: USB disconnect, device number 10
[ 2662.772785][T30171] PM: Enabling pm_trace changes system date and time during resume.
[ 2662.772785][T30171] PM: Correct system time has to be restored manually after resume.
[ 2662.993865][T16190] usb 2-1: USB disconnect, device number 41
18:45:08 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff, 0xfdfdffff})

[ 2664.657069][T12274] hsr_slave_0: left promiscuous mode
[ 2664.665948][T12274] hsr_slave_1: left promiscuous mode
[ 2664.681908][T12274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2664.689851][T12274] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2664.705077][T12274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2664.713053][T12274] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2664.756686][T12274] bridge_slave_1: left allmulticast mode
[ 2664.765053][T12274] bridge_slave_1: left promiscuous mode
[ 2664.771815][T12274] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2664.823175][T12274] bridge_slave_0: left allmulticast mode
[ 2664.833502][T12274] bridge_slave_0: left promiscuous mode
[ 2664.840253][T12274] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2664.993078][T12274] veth1_macvtap: left promiscuous mode
[ 2664.999305][T12274] veth0_macvtap: left promiscuous mode
[ 2665.005168][T12274] veth1_vlan: left promiscuous mode
[ 2665.010914][T12274] veth0_vlan: left promiscuous mode
[ 2666.161032][T17952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2666.171092][T17952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2666.183896][T12274] team0 (unregistering): Port device team_slave_1 removed
[ 2666.187586][ T5008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2666.210583][ T5008] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2666.222568][T17952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2666.231813][ T5008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2666.244247][T12274] team0 (unregistering): Port device team_slave_0 removed
[ 2666.352466][T12274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2666.389359][T12274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2666.619639][T12274] bond0 (unregistering): Released all slaves
[ 2667.552279][T30274] chnl_net:caif_netlink_parms(): no params data found
[ 2668.248500][ T5008] Bluetooth: hci3: command 0x0409 tx timeout
[ 2668.496091][T30274] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2668.504242][T30274] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2668.512326][T30274] bridge_slave_0: entered allmulticast mode
[ 2668.521600][T30274] bridge_slave_0: entered promiscuous mode
[ 2668.610903][T30274] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2668.621129][T30274] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2668.629203][T30274] bridge_slave_1: entered allmulticast mode
[ 2668.638682][T30274] bridge_slave_1: entered promiscuous mode
[ 2668.802094][T30274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2668.836518][T30274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2668.985993][T30274] team0: Port device team_slave_0 added
[ 2669.015014][T30274] team0: Port device team_slave_1 added
[ 2669.157697][T30274] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2669.167317][T30274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2669.196362][T30274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2669.226789][T30274] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2669.234132][T30274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2669.263096][T30274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2669.602506][T30274] hsr_slave_0: entered promiscuous mode
[ 2669.639829][T30274] hsr_slave_1: entered promiscuous mode
[ 2669.668560][T30274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2669.676319][T30274] Cannot create hsr debugfs directory
[ 2670.330342][ T5008] Bluetooth: hci3: command 0x041b tx timeout
[ 2670.909918][T30274] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2670.933881][T30274] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2670.960422][T30274] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2671.007741][T30274] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2671.462908][ T1210] ieee802154 phy0 wpan0: encryption failed: -22
[ 2671.470370][ T1210] ieee802154 phy1 wpan1: encryption failed: -22
[ 2671.672261][T30274] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2671.759932][T30274] 8021q: adding VLAN 0 to HW filter on device team0
[ 2671.801978][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2671.809716][ T4694] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2671.870039][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2671.877658][ T4694] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2672.198133][T30274] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2672.414009][ T5008] Bluetooth: hci3: command 0x040f tx timeout
[ 2672.481166][T30274] veth0_vlan: entered promiscuous mode
[ 2672.565321][T30274] veth1_vlan: entered promiscuous mode
[ 2672.729379][T30274] veth0_macvtap: entered promiscuous mode
[ 2672.760856][T30274] veth1_macvtap: entered promiscuous mode
[ 2672.844779][T30274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2672.855723][T30274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2672.865985][T30274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2672.876845][T30274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2672.886966][T30274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2672.897729][T30274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2672.913529][T30274] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2673.031910][T30274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2673.042787][T30274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2673.053252][T30274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2673.066372][T30274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2673.076524][T30274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2673.087243][T30274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2673.104883][T30274] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2673.144991][T30274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2673.155454][T30274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2673.165790][T30274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2673.175026][T30274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2673.428709][ T5888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2673.436743][ T5888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2673.581724][ T4694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2673.592344][ T4694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2673.793346][T30646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2673.886335][T30646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2673.957112][T30647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001b2c56e6ed5600e2fbe565cf8a3fda944000006"], 0x36) (async, rerun: 64)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200202c0}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x4c, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x84)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:45:19 executing program 2:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x3683, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x1)

18:45:19 executing program 0:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210100, @local, {[@generic={0x7, 0x7, "04030e0000"}, @timestamp_addr={0x44, 0x14, 0x6, 0x3, 0x0, [{@private}, {@broadcast}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

18:45:19 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x7, &(0x7f0000000280)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
io_setup(0x5ff, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="100000000600"/16, 0x10}])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.stat\x00', 0x275a, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1, 0x0, 0x2bf, 0x80000, 0x65, 0xfffffffc, 0x4}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x20, 0x1, 0x1000009}, &(0x7f0000000400)=0x10)
sendto$inet6(r6, &(0x7f0000000680)="6050ec66010021fe52bfe21202c67041ac4bb407d7640800000000000000e907db5ac026efece0eb02bf932fa4f35526496266ce355f768927f648d52fd6b0d24c447b5152d17c4a7a48a49934df4d1a3810559ef952669c5bd16b45a2ff1b020000000000000070ff998afc8f4fd41cd9157414124e568100a27571efa2a599351c4bdc277c17a79fdda7cf91033a0200000020c9af0f6a508c7153e6708bf7be17107e846df2728831008a9cadbca49ff1cf787ef0a72348136813b8a42bc0350ca6374afe8e251336571bf1183d19a934f0c77775e063b70b5c81f0f5d017d2361bfa4d4141219ee5b3acf5921f5749af15a317bc10cccc414373f16e253183dd5545ba5a7b5f346f951f77b5", 0x10e, 0x40080c4, &(0x7f0000000140)={0xa, 0x4e22, 0x8000, @private0, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x1, 0x40, 0x2, 0x5, 0xc3, 0x74, 0x7, 0x3, 0x6, 0x5, 0xd, 0xfc}, 0xe)
sendfile(r6, r5, &(0x7f00000000c0)=0x5, 0x2)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xffff)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

18:45:19 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)={{}, 0x1})

18:45:19 executing program 1:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x6, @pix_mp}})

[ 2674.489043][ T5008] Bluetooth: hci3: command 0x0419 tx timeout
18:45:19 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000)

18:45:19 executing program 1:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getsockopt$inet_int(r0, 0x10d, 0xe6, 0x0, &(0x7f00000000c0)=0xffffffb2)

18:45:20 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x79, &(0x7f0000000080)={r2}, 0x8)

18:45:20 executing program 2:
r0 = openat$vim2m(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "b35606c07c65b88b04f481a588fb53f9ac697b88306754b1b8d0760932f76474"})

18:45:20 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x7fffffffffffffff, 0x4})

18:45:20 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001b2c56e6ed5600e2fbe565cf8a3fda944000006"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200202c0}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x4c, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x84)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:45:20 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x4, @raw_data="0d8768ef4db9fc5e5f30880f2ece390f0b1e31cfd9aeac3eeb518b62039a61c332c56c0e8462e579b71573492f9600394eb9d70069b97d151b74caa18449bd346c4a26f999c791323218c32101847178a3c132bd8b1ee8d7b31b5cfc84a287fd9c0400d940b232e312c5f4f0a1c763c7abaedee8bf627d42adbe9d9228c6b91a95fda034a8b862237fbc09ea09e669129c116a011b21253a923f3a0000000027de34b9a9923fddb7cd5919da6300000000000000000000000000000000000000ffffffffffffffe8"})

18:45:20 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x10}}]}, 0x20}}, 0x0)

18:45:20 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0xa, 0x0, @private}}]}, 0x28}}, 0x0)

[ 2675.581594][T30679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2675.625076][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2675.736485][T30681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2675.877581][T30679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:21 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local, 0x1, 0x2, [@multicast1, @multicast2]}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0)

18:45:21 executing program 1:
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0)
memfd_secret(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1})
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x6})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

18:45:21 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="219cca181c87f80f08c837a1a9f5fea7406d82c864bcbb3b411be89e554bfd889e9c40f9af85443a87b644a7cd410c2b9cb595facc248b84c43a4aa7433558943112435a2b47a6beeca4d7eee76baedb277a2d227090b7f71d32a5b82c3e53297f577ba893eb16793a947f7838213941", 0x70}], 0x1}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000140)=@dstopts={0x0, 0xa, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x6000002000000000, 0x0, 0x0]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0xbf6]}}]}, 0x60)

18:45:21 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ad", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180), 0x8)

18:45:21 executing program 0:
r0 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000100)="39000000140081ae00002c000500015601546fabcae5e57e0592618575e285af71583c7d06a6580e883795c04a31ba377a1becf213d4ef671d", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

18:45:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000008c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@device_b, {0x7, 0x1}}, {0x1, 0x0, 0x3, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7f0}, @random="825928f44a81", @broadcast, @initial, {0xe, 0x80}}, {0x3, 0x0, 0x2, 0x1, 0x7}}}, @random="1ae327be69c8f4bf64f9c8413b3569be48efb5c79586930ab66fb68923ec8d0f4dd44de52d60570b15ef49ac8c68415b3e87040b784cf4c384fac32a8dee24173f145ccfd259287ca23e6cbc5430064fbe9fa269fd1f5560f119d0aa4b31be08afdc06585ec98b2aafd40b658f02eeb80bd8ffb2264d502068b16986b90c126fd592c1bccbdc6ea0961eafd180062883bf05ddeaa65443e718765b1612fafd668e4e33ce0432381c6bf624fa481aec58d0dd7a79e4c4e75897ad35279d0f2e95cc6135f9ca8b7b3b366285ab2198f5f9b05c0b9f473c89cd41181193db10b468414da84598d1f698c2574d0958e983d79aff18719c36f102a2a201f364b9f8e0198ebae3baea724bdb60bdac82dd48754be84d69d830c58afe8df699250fca86a3a56a09e898057339c592148b6c12da66df13cc06eb9c2a02a448e4e2d356f73d3ae0db8f7db9ec8e2c75beb9886baf3c541bc5237d4280c6eb06baf13d178533d0404ffde6b39daa0c6135db4ead1c804ef2b313b9eef9e54d38853d70ab6becc9e24c6d84043a5c5065351b936a384b9fd1bc158f734259d5442c701ed3f4573f9617b1584b7be98543569f9bc45ebbd785a2b8e3a70529c7b58f5f28f83cab17170e3abb97beb9bd3d6ad0be9ce1d654a9daeb7862a6d37726548ffddab46b49777c13260b70f39301a115923fc062f9f2eda1520e00aaaf0c7a4e9ebac790a8d2af91658cc38bd705b99d350db04c198a5d2d0b7ead7aaac14ddb5cfd55ae283542027c691d126fe31003732e1509fdcd5f5369411be2bc23c72d80dbdbcdfb6fd46471f797b550b624a3bd91d1e63076673f5f65ba602451f974304b85936413858e183ca6798e2c41ef5afc5f74e897d6d591f1690c60968522685efbf1ce3420146ac504e82ef9c4ed7ecbe9f2f0d55b98614888341f7bf3233faba94da76ea4153d0c1680c691995c766e9194faa8933607b83c94ba308e875ea4743ac22fe46b430d56d9342c44914de00414abc93e5b8adcff702343f776e32d7173981074b75a18f8c48349a75ab78199ba48331ed0560e23e64eaa149b13f9cd0f96c7f71fd96e7af6cfa954943bf78ba40b21b67379bd2370c1ffa2c8cccbd911811354e9a947b50f0055e3e5d055adb2bac77c7e8b4aab362402bf20b8dc6f62b14266304a01037330c67cb0b15875dae66d0c0b5674993ab6431bde9b9eaa5fa1143051b2aa401b1ed1d3d7bca6976ee0cdecb553a23a3470275251bae1a004def180"}, 0x3b8)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:45:21 executing program 0:
creat(&(0x7f00000009c0)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffee0, 0x0)

18:45:21 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_UIE_OFF(r0, 0x7001)
ioctl$RTC_AIE_OFF(r0, 0x7002)

18:45:21 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b)

[ 2676.661680][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
18:45:22 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x65}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

[ 2676.832960][T30715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0)

[ 2676.942359][T30721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:22 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c, 0x0}, 0x0)

[ 2677.063374][T30719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:22 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

18:45:22 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x17)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000005b00)={r3, 0x0, 0x0, 0xffffffff}, 0x10)

18:45:22 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="219cca181c87f80f08c837a1a9f5fea7406d82c864bcbb3b411be89e554bfd889e9c40f9af85443a87b644a7cd410c2b9cb595facc248b84c43a4aa7433558943112435a2b47a6beeca4d7eee76baedb277a2d227090b7f71d32a5b82c3e53297f577ba893eb16793a947f7838213941", 0x70}], 0x1}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000140)=@dstopts={0x0, 0xa, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x6000002000000000, 0x0, 0x0]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0xbf6]}}]}, 0x60)

18:45:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000008c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@device_b, {0x7, 0x1}}, {0x1, 0x0, 0x3, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7f0}, @random="825928f44a81", @broadcast, @initial, {0xe, 0x80}}, {0x3, 0x0, 0x2, 0x1, 0x7}}}, @random="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"}, 0x3b8)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000008c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@device_b, {0x7, 0x1}}, {0x1, 0x0, 0x3, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7f0}, @random="825928f44a81", @broadcast, @initial, {0xe, 0x80}}, {0x3, 0x0, 0x2, 0x1, 0x7}}}, @random="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"}, 0x3b8) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

18:45:22 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c, 0x0}, 0x0)

18:45:22 executing program 1:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1})

18:45:23 executing program 4:
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
getrandom(&(0x7f00000016c0)=""/4097, 0x1001, 0x0)

[ 2677.896380][T30741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:23 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c, 0x0}, 0x0)

[ 2678.204173][T30744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:23 executing program 0:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f000000000008000a"], 0x44}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

18:45:23 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x4)
sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c, 0x0}, 0x0)

18:45:23 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x0, 0x4, 0x0, "3378dc3c31b8efacbcb018b3561e9357a369e0ee8199e9d57eb9ae8065042c9c"})

18:45:24 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="219cca181c87f80f08c837a1a9f5fea7406d82c864bcbb3b411be89e554bfd889e9c40f9af85443a87b644a7cd410c2b9cb595facc248b84c43a4aa7433558943112435a2b47a6beeca4d7eee76baedb277a2d227090b7f71d32a5b82c3e53297f577ba893eb16793a947f7838213941", 0x70}], 0x1}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000140)=@dstopts={0x0, 0xa, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x6000002000000000, 0x0, 0x0]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0xbf6]}}]}, 0x60)

18:45:24 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "24991d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001f40)={0x84, &(0x7f0000001ac0)={0x0, 0x0, 0x3, "ab82b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x3, "12faed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2678.963074][T12282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:45:24 executing program 4:
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
getrandom(&(0x7f00000016c0)=""/4097, 0x1001, 0x0)

[ 2679.117165][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2679.126958][T30763] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
[ 2679.262725][T12282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:45:24 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
shutdown(r0, 0x1)

[ 2679.492173][T12282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2679.709765][T12282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2679.778702][T10600] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 2680.160520][T10600] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2680.172325][T10600] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2680.182658][T10600] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 2680.192697][T10600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2681.693710][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 2682.339578][T12282] hsr_slave_0: left promiscuous mode
[ 2682.378010][T12282] hsr_slave_1: left promiscuous mode
[ 2682.399634][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2682.407388][T12282] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2682.462254][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2682.472460][T12282] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2682.523690][T12282] bridge_slave_1: left allmulticast mode
[ 2682.532222][T12282] bridge_slave_1: left promiscuous mode
[ 2682.538971][T12282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2682.615826][T12282] bridge_slave_0: left allmulticast mode
[ 2682.624177][T12282] bridge_slave_0: left promiscuous mode
[ 2682.630917][T12282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2682.686531][T12282] veth1_macvtap: left promiscuous mode
[ 2682.692978][T12282] veth0_macvtap: left promiscuous mode
[ 2682.698938][T12282] veth1_vlan: left promiscuous mode
[ 2682.704491][T12282] veth0_vlan: left promiscuous mode
[ 2682.730242][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 2682.730791][T10600] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[ 2682.753444][T10600] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input139
[ 2682.830150][T10600] input: failed to attach handler kbd to device input139, error: -5
[ 2682.900546][T10600] usb 2-1: USB disconnect, device number 42
[ 2683.777351][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 2684.166229][T28216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2684.180320][T28216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2684.192951][T28216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2684.242451][T28216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2684.253141][T28216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2684.264668][T17952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2684.756188][T12282] team0 (unregistering): Port device team_slave_1 removed
[ 2684.816494][T12282] team0 (unregistering): Port device team_slave_0 removed
[ 2684.854448][T12282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2684.892927][T12282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2685.118149][T12282] bond0 (unregistering): Released all slaves
[ 2686.328702][T17952] Bluetooth: hci3: command 0x0409 tx timeout
[ 2686.439484][T30844] chnl_net:caif_netlink_parms(): no params data found
[ 2687.609005][T30844] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2687.616635][T30844] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2687.625233][T30844] bridge_slave_0: entered allmulticast mode
[ 2687.634407][T30844] bridge_slave_0: entered promiscuous mode
[ 2687.690790][T30844] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2687.699061][T30844] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2687.706866][T30844] bridge_slave_1: entered allmulticast mode
[ 2687.716189][T30844] bridge_slave_1: entered promiscuous mode
[ 2688.013605][T30844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2688.074058][T30844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2688.224260][T30844] team0: Port device team_slave_0 added
[ 2688.266749][T30844] team0: Port device team_slave_1 added
[ 2688.409618][T17952] Bluetooth: hci3: command 0x041b tx timeout
[ 2688.455214][T30844] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2688.464105][T30844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2688.491049][T30844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2688.512138][T30844] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2688.520996][T30844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2688.548374][T30844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2688.799390][T30844] hsr_slave_0: entered promiscuous mode
[ 2688.824905][T30844] hsr_slave_1: entered promiscuous mode
[ 2688.836138][T30844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2688.845406][T30844] Cannot create hsr debugfs directory
[ 2690.405001][T30844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2690.455623][T30844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2690.489213][T17952] Bluetooth: hci3: command 0x040f tx timeout
[ 2690.511693][T30844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2690.546895][T30844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2691.122585][T30844] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2691.224311][T30844] 8021q: adding VLAN 0 to HW filter on device team0
[ 2691.285357][T16190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2691.293114][T16190] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2691.352422][T16190] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2691.360157][T16190] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2691.654792][T30844] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2691.968332][T30844] veth0_vlan: entered promiscuous mode
[ 2692.027425][T30844] veth1_vlan: entered promiscuous mode
[ 2692.190509][T30844] veth0_macvtap: entered promiscuous mode
[ 2692.247496][T30844] veth1_macvtap: entered promiscuous mode
[ 2692.323377][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2692.334317][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2692.344539][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2692.355983][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2692.366178][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2692.376882][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2692.391872][T30844] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2692.449177][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2692.461412][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2692.471563][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2692.482194][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2692.494041][T30844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2692.505137][T30844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2692.521688][T30844] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2692.569317][ T5008] Bluetooth: hci3: command 0x0419 tx timeout
[ 2692.575685][T30844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2692.585569][T30844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2692.594737][T30844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2692.603754][T30844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2692.935349][T16190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2692.943564][T16190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2693.074956][T16190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2693.083185][T16190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2693.416096][T31248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2693.573653][T31250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2695.831475][T12282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2696.741337][T12282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2696.878159][T12282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2697.080346][T12282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2698.995603][T12282] hsr_slave_0: left promiscuous mode
[ 2699.020993][T12282] hsr_slave_1: left promiscuous mode
[ 2699.159504][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2699.167263][T12282] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2699.213094][T12282] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2699.220996][T12282] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2699.285696][T12282] bridge_slave_1: left allmulticast mode
[ 2699.293529][T12282] bridge_slave_1: left promiscuous mode
[ 2699.300237][T12282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2699.330383][T12282] bridge_slave_0: left allmulticast mode
[ 2699.336238][T12282] bridge_slave_0: left promiscuous mode
[ 2699.343038][T12282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2699.444476][T12282] veth1_macvtap: left promiscuous mode
[ 2699.450656][T12282] veth0_macvtap: left promiscuous mode
[ 2699.456521][T12282] veth1_vlan: left promiscuous mode
[ 2699.462267][T12282] veth0_vlan: left promiscuous mode
[ 2699.509552][ T5008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2699.518863][ T5008] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2699.527581][ T5008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2699.543131][ T5008] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2699.553708][ T5008] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2699.565993][T28216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2700.706886][T12282] team0 (unregistering): Port device team_slave_1 removed
[ 2700.765061][T12282] team0 (unregistering): Port device team_slave_0 removed
[ 2700.830390][T12282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2700.886301][T12282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2701.207322][T12282] bond0 (unregistering): Released all slaves
[ 2701.618700][T28216] Bluetooth: hci3: command 0x0409 tx timeout
[ 2702.121811][T31328] chnl_net:caif_netlink_parms(): no params data found
[ 2703.357141][T31328] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2703.364891][T31328] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2703.375244][T31328] bridge_slave_0: entered allmulticast mode
[ 2703.384480][T31328] bridge_slave_0: entered promiscuous mode
[ 2703.452333][T31328] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2703.460091][T31328] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2703.467935][T31328] bridge_slave_1: entered allmulticast mode
[ 2703.479695][T31328] bridge_slave_1: entered promiscuous mode
[ 2703.689649][T28216] Bluetooth: hci3: command 0x041b tx timeout
[ 2703.778564][T31328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2703.827288][T31328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2704.061353][T31328] team0: Port device team_slave_0 added
[ 2704.112503][T31328] team0: Port device team_slave_1 added
[ 2704.369123][T31328] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2704.376267][T31328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2704.405456][T31328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2704.438280][T31328] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2704.445420][T31328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2704.474136][T31328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2704.663910][T31328] hsr_slave_0: entered promiscuous mode
[ 2704.708442][T31328] hsr_slave_1: entered promiscuous mode
[ 2704.728688][T31328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2704.736445][T31328] Cannot create hsr debugfs directory
[ 2705.773356][T28216] Bluetooth: hci3: command 0x040f tx timeout
[ 2706.054965][T31328] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2706.100286][T31328] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2706.145751][T31328] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2706.172353][T31328] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2706.674421][T31328] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2706.765636][T31328] 8021q: adding VLAN 0 to HW filter on device team0
[ 2706.802766][T26072] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2706.810497][T26072] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2706.861063][T26072] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2706.868806][T26072] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2707.332398][T31328] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2707.572791][T31328] veth0_vlan: entered promiscuous mode
[ 2707.616837][T31328] veth1_vlan: entered promiscuous mode
[ 2707.778080][T31328] veth0_macvtap: entered promiscuous mode
[ 2707.810974][T31328] veth1_macvtap: entered promiscuous mode
[ 2707.854519][T28216] Bluetooth: hci3: command 0x0419 tx timeout
[ 2707.885776][T31328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2707.898768][T31328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2707.909075][T31328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2707.919793][T31328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2707.931863][T31328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2707.943382][T31328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2707.958952][T31328] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2708.050974][T31328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2708.061835][T31328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2708.072105][T31328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2708.082853][T31328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2708.093050][T31328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2708.103795][T31328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2708.119215][T31328] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2708.217118][T31328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2708.226383][T31328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2708.236770][T31328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2708.245958][T31328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2708.473720][T10600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2708.482772][T10600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2708.624115][T16190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2708.632349][T16190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2708.871704][T31717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2708.944972][T31719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2709.027501][T31719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000008c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@device_b, {0x7, 0x1}}, {0x1, 0x0, 0x3, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7f0}, @random="825928f44a81", @broadcast, @initial, {0xe, 0x80}}, {0x3, 0x0, 0x2, 0x1, 0x7}}}, @random="1ae327be69c8f4bf64f9c8413b3569be48efb5c79586930ab66fb68923ec8d0f4dd44de52d60570b15ef49ac8c68415b3e87040b784cf4c384fac32a8dee24173f145ccfd259287ca23e6cbc5430064fbe9fa269fd1f5560f119d0aa4b31be08afdc06585ec98b2aafd40b658f02eeb80bd8ffb2264d502068b16986b90c126fd592c1bccbdc6ea0961eafd180062883bf05ddeaa65443e718765b1612fafd668e4e33ce0432381c6bf624fa481aec58d0dd7a79e4c4e75897ad35279d0f2e95cc6135f9ca8b7b3b366285ab2198f5f9b05c0b9f473c89cd41181193db10b468414da84598d1f698c2574d0958e983d79aff18719c36f102a2a201f364b9f8e0198ebae3baea724bdb60bdac82dd48754be84d69d830c58afe8df699250fca86a3a56a09e898057339c592148b6c12da66df13cc06eb9c2a02a448e4e2d356f73d3ae0db8f7db9ec8e2c75beb9886baf3c541bc5237d4280c6eb06baf13d178533d0404ffde6b39daa0c6135db4ead1c804ef2b313b9eef9e54d38853d70ab6becc9e24c6d84043a5c5065351b936a384b9fd1bc158f734259d5442c701ed3f4573f9617b1584b7be98543569f9bc45ebbd785a2b8e3a70529c7b58f5f28f83cab17170e3abb97beb9bd3d6ad0be9ce1d654a9daeb7862a6d37726548ffddab46b49777c13260b70f39301a115923fc062f9f2eda1520e00aaaf0c7a4e9ebac790a8d2af91658cc38bd705b99d350db04c198a5d2d0b7ead7aaac14ddb5cfd55ae283542027c691d126fe31003732e1509fdcd5f5369411be2bc23c72d80dbdbcdfb6fd46471f797b550b624a3bd91d1e63076673f5f65ba602451f974304b85936413858e183ca6798e2c41ef5afc5f74e897d6d591f1690c60968522685efbf1ce3420146ac504e82ef9c4ed7ecbe9f2f0d55b98614888341f7bf3233faba94da76ea4153d0c1680c691995c766e9194faa8933607b83c94ba308e875ea4743ac22fe46b430d56d9342c44914de00414abc93e5b8adcff702343f776e32d7173981074b75a18f8c48349a75ab78199ba48331ed0560e23e64eaa149b13f9cd0f96c7f71fd96e7af6cfa954943bf78ba40b21b67379bd2370c1ffa2c8cccbd911811354e9a947b50f0055e3e5d055adb2bac77c7e8b4aab362402bf20b8dc6f62b14266304a01037330c67cb0b15875dae66d0c0b5674993ab6431bde9b9eaa5fa1143051b2aa401b1ed1d3d7bca6976ee0cdecb553a23a3470275251bae1a004def180"}, 0x3b8)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000008c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@device_b, {0x7, 0x1}}, {0x1, 0x0, 0x3, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7f0}, @random="825928f44a81", @broadcast, @initial, {0xe, 0x80}}, {0x3, 0x0, 0x2, 0x1, 0x7}}}, @random="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"}, 0x3b8) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

18:45:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x81000000}}]}]}]}, 0x38}}, 0x0)

18:45:54 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@FILEID_NILFS_WITH_PARENT={0x8}, &(0x7f0000000180), 0x0)

18:45:54 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="219cca181c87f80f08c837a1a9f5fea7406d82c864bcbb3b411be89e554bfd889e9c40f9af85443a87b644a7cd410c2b9cb595facc248b84c43a4aa7433558943112435a2b47a6beeca4d7eee76baedb277a2d227090b7f71d32a5b82c3e53297f577ba893eb16793a947f7838213941", 0x70}], 0x1}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000140)=@dstopts={0x0, 0xa, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x6000002000000000, 0x0, 0x0]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0xbf6]}}]}, 0x60)

18:45:54 executing program 4:
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
getrandom(&(0x7f00000016c0)=""/4097, 0x1001, 0x0)

18:45:54 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "24991d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001f40)={0x84, &(0x7f0000001ac0)={0x0, 0x0, 0x3, "ab82b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x3, "12faed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2709.150443][T31722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:54 executing program 5:
set_mempolicy(0x3, &(0x7f00000000c0)=0x9, 0x4)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0)

18:45:54 executing program 0:
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d52f91b234b0e87f70e43d038e7ff7fc6e5539b324d078b089b070a384c090890e0878f061ac6e7049b3367959b4b9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b2909070d07300936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231f090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2f1371623868534f4b0dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa170933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff6dbfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f16679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591978deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ef6dbca1d8257a74accfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa70e73a5e69bdc28495903f06572e1e007ba55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a29c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78779a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2df91e4b1cc0ae4aebe45f55957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75fdf336fd1a040c13c1806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88dde63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e14502be6fd21490b825d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b865939dde3d4a3339a65d507dc59c51097b40517705da56e9ebff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938057ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43bcc5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f09e1d5b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5478de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce1b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1400000008f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c6701005d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c50468cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780dd71a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60ef93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f39402000000000004000d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd500000000000000000000000000000000000000000000007300", 0x1000}}, 0x1006)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000080)={r2}, 0x8)

[ 2709.583156][T31739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2709.588983][T16190] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 2709.716179][T31739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2709.824419][T31739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:55 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0xcd3fe3b140b3c4e3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

[ 2709.998098][T16190] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2710.011114][T16190] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2710.021705][T16190] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 2710.031202][T16190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
18:45:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x400, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1fcc9e5d2f09"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x44, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8b0}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xa2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7f}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x44}}, 0x44041)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002000000a8f359fd1b4120f6b99e7ba910506acb86743073f49bba91afb71138148e99a2b4aefb90211ce53270c0a09a0c7f31"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:45:55 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})

18:45:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc09}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26db}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0)

[ 2710.632229][T31758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2710.756178][T31758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2710.854786][T31766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:56 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0xa, &(0x7f00000001c0)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:45:56 executing program 0:
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

18:45:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x400, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1fcc9e5d2f09"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x44, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8b0}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xa2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7f}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x44}}, 0x44041)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002000000a8f359fd1b4120f6b99e7ba910506acb86743073f49bba91afb71138148e99a2b4aefb90211ce53270c0a09a0c7f31"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x400, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1fcc9e5d2f09"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x40}}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x44, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8b0}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xa2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7f}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x44}}, 0x44041) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002000000a8f359fd1b4120f6b99e7ba910506acb86743073f49bba91afb71138148e99a2b4aefb90211ce53270c0a09a0c7f31"], 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

18:45:56 executing program 2:
syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7d98e5", 0x18, 0x21, 0x0, @dev, @mcast2, {[@fragment], {{0x4e22, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "85e08c", 0x0, "034ebc"}}}}}}}, 0x0)

[ 2711.755849][T31779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.827884][T31782] dccp_invalid_packet: P.Data Offset(0) too small
[ 2711.922531][T31779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2712.065393][T31779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:57 executing program 4:
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
getrandom(&(0x7f00000016c0)=""/4097, 0x1001, 0x0)

[ 2712.469952][T16190] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[ 2712.480939][T16190] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input140
[ 2712.516277][T16190] input: failed to attach handler kbd to device input140, error: -5
[ 2712.595676][T16190] usb 2-1: USB disconnect, device number 43
18:45:58 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
flistxattr(r0, 0x0, 0x0)

18:45:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfeedcafe, 0x0, 0x0, 0x0, 0x2}}})

18:45:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x400, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1fcc9e5d2f09"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x44, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8b0}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xa2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7f}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x44}}, 0x44041)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002000000a8f359fd1b4120f6b99e7ba910506acb86743073f49bba91afb71138148e99a2b4aefb90211ce53270c0a09a0c7f31"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:45:58 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet6(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000000)=""/60, 0x3c, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0)

18:45:58 executing program 5:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040))

18:45:58 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "24991d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001f40)={0x84, &(0x7f0000001ac0)={0x0, 0x0, 0x3, "ab82b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x3, "12faed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2713.305340][T31830] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.4'.
18:45:58 executing program 5:
r0 = io_uring_setup(0x3399, &(0x7f0000000000))
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000280), 0xc)
read(r1, &(0x7f0000000180)=""/52, 0x34)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x2, &(0x7f0000000080), 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

18:45:58 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x9})

18:45:58 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x8, 0x3c, 0x0, @private0, @mcast2, {[], @ndisc_ra}}}}, 0xfdef)

18:45:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)

[ 2713.588925][T10600] usb 2-1: new high-speed USB device number 44 using dummy_hcd
18:45:59 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="8500000008000000560000000000000044000000000000009500000000000000f92557d3f8a0ab28b9a3bf0519eaaf61db39c194ea1a1e531def98cc0eb61c5997627bfe302b6df61b261c4e462d9554bcc22214e82be0d4ad6c085116a56601a8c7afa31c4851ad1228bf039a7f519e4e1e5d0513d7580dfd93e181e1c51afd2a5af49d9f561ee54bffce9930ac8c6d8eb4c0787c27b1e7f356dfd11f4f4ef9768d2b5339bf4842cfc64d213f787aeae4ae069778"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)

[ 2713.959432][T10600] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2713.970916][T10600] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2713.981220][T10600] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 2713.991550][T10600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2714.031623][T16190] wlan1: authenticate with 08:02:11:00:00:00
[ 2714.041961][T16190] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2714.067496][T31848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:59 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x141301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="82"])

18:45:59 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet6(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000000)=""/60, 0x3c, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0)

[ 2714.241700][T31851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2714.257517][ T5890] wlan1: authenticated
18:45:59 executing program 0:
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)

[ 2714.284185][ T5890] mac80211_hwsim hwsim33 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2714.296164][T24889] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2714.306949][T24889] wlan1: associated
[ 2714.347158][T31849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:45:59 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCFLSH(r0, 0x5419, 0x300000000000000)

18:45:59 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x141301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="82"])

[ 2714.617382][T31864] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.4'.
18:46:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
dup2(r4, r3) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (async)

[ 2715.187387][T31872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2715.301531][T31872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2715.371890][T31874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2716.509112][T10600] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[ 2716.520335][T10600] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input141
[ 2716.541248][T10600] input: failed to attach handler kbd to device input141, error: -5
[ 2716.587123][T10600] usb 2-1: USB disconnect, device number 44
18:46:02 executing program 0:
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f0000002280)=[{&(0x7f0000000140)="14580cee7e4f9e1e286857268b037395e7fe5d1dd9c93d051641ec4ab7d5f92ff12a14887116fece7fda", 0x2a}, {0x0}], 0x2)

18:46:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xb)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x856dce437995f705, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="02000000000000000c1445000800010075333200c807020008000100f34a1800440705"], 0x7f4}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

18:46:02 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x141301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="82"])

18:46:02 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet6(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000000)=""/60, 0x3c, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0)

18:46:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
dup2(r4, r3) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (async)

18:46:02 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "24991d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001f40)={0x84, &(0x7f0000001ac0)={0x0, 0x0, 0x3, "ab82b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x3, "12faed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2717.206703][T31899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
18:46:02 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@empty, @dev, 0xffffffffffffffff, "a8bb2ca4728746a4273b4833b3ca83a507814fc12fe613406523a6b9d12c3b0e"}, 0x3c)

18:46:02 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x141301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="82"])

[ 2717.368160][T31917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2717.614411][T31913] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2717.670156][T16190] usb 2-1: new high-speed USB device number 45 using dummy_hcd
18:46:03 executing program 0:
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$search(0x12, 0x0, 0x0, 0x0, 0x0)

[ 2717.711622][T31917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2717.717051][T31913] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'.
18:46:03 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

18:46:03 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
unlinkat(0xffffffffffffffff, 0x0, 0x0)

[ 2718.048876][T16190] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2718.060528][T16190] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2718.070859][T16190] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 2718.081024][T16190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
18:46:03 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
sched_getscheduler(0x0)
ioprio_get$pid(0x0, 0x0)
ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000e80))
getpid()
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

18:46:03 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet6(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000000)=""/60, 0x3c, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0)

18:46:03 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x2002, 0x81, 0x5}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38)

[ 2718.531143][T12288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:46:03 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

[ 2718.662157][   T26] audit: type=1326 audit(1693248363.990:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
[ 2718.781808][T12288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2718.828797][   T26] audit: type=1326 audit(1693248364.020:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
[ 2718.854652][   T26] audit: type=1326 audit(1693248364.030:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
[ 2718.878152][   T26] audit: type=1326 audit(1693248364.040:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
[ 2718.904230][   T26] audit: type=1326 audit(1693248364.040:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
[ 2718.930096][   T26] audit: type=1326 audit(1693248364.040:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
[ 2718.954062][   T26] audit: type=1326 audit(1693248364.040:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
[ 2718.980048][   T26] audit: type=1326 audit(1693248364.040:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
[ 2719.003424][   T26] audit: type=1326 audit(1693248364.080:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
[ 2719.029349][   T26] audit: type=1326 audit(1693248364.080:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee687cae9 code=0x7ffc0000
18:46:04 executing program 2:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x80003, 0x0)

[ 2719.172746][T12288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2719.414808][T12288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2720.689491][T16190] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[ 2720.701648][T16190] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input142
[ 2720.777877][T16190] input: failed to attach handler kbd to device input142, error: -5
[ 2720.873046][T16190] usb 2-1: USB disconnect, device number 45
[ 2721.671600][T12288] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 2722.059221][T12288] hsr_slave_0: left promiscuous mode
[ 2722.074285][T12288] hsr_slave_1: left promiscuous mode
[ 2722.099016][T12288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2722.106760][T12288] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2722.137027][T12288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2722.147563][T12288] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2722.163857][T12288] bridge_slave_1: left allmulticast mode
[ 2722.172258][T12288] bridge_slave_1: left promiscuous mode
[ 2722.178974][T12288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2722.203820][T12288] bridge_slave_0: left allmulticast mode
[ 2722.209836][T12288] bridge_slave_0: left promiscuous mode
[ 2722.216375][T12288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2722.256557][T12288] veth1_macvtap: left promiscuous mode
[ 2722.265332][T12288] veth0_macvtap: left promiscuous mode
[ 2722.271407][T12288] veth1_vlan: left promiscuous mode
[ 2722.276935][T12288] veth0_vlan: left promiscuous mode
[ 2723.551995][T17952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2723.574245][T17952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2723.590467][T17952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2723.617655][T17952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2723.649284][T17952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2723.659287][T17952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2723.841652][T12288] team0 (unregistering): Port device team_slave_1 removed
[ 2723.876947][T12288] team0 (unregistering): Port device team_slave_0 removed
[ 2723.915871][T12288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2723.957588][T12288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2724.165523][T12288] bond0 (unregistering): Released all slaves
[ 2725.347243][T32035] chnl_net:caif_netlink_parms(): no params data found
[ 2725.769488][T17952] Bluetooth: hci3: command 0x0409 tx timeout
[ 2726.491919][T32035] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2726.501439][T32035] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2726.511790][T32035] bridge_slave_0: entered allmulticast mode
[ 2726.520909][T32035] bridge_slave_0: entered promiscuous mode
[ 2726.543135][T32035] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2726.553887][T32035] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2726.561817][T32035] bridge_slave_1: entered allmulticast mode
[ 2726.570991][T32035] bridge_slave_1: entered promiscuous mode
[ 2726.869553][T32035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2726.913095][T32035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2727.102252][T32035] team0: Port device team_slave_0 added
[ 2727.130079][T32035] team0: Port device team_slave_1 added
[ 2727.239749][T32035] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2727.246899][T32035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2727.274735][T32035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2727.307924][T32035] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2727.315305][T32035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2727.341765][T32035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2727.588438][T32035] hsr_slave_0: entered promiscuous mode
[ 2727.629946][T32035] hsr_slave_1: entered promiscuous mode
[ 2727.653580][T32035] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2727.661682][T32035] Cannot create hsr debugfs directory
[ 2727.859309][T17952] Bluetooth: hci3: command 0x041b tx timeout
[ 2729.023032][T32035] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2729.054023][T32035] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2729.076815][T32035] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2729.106564][T32035] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2729.614213][T32035] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2729.724318][T32035] 8021q: adding VLAN 0 to HW filter on device team0
[ 2729.781017][T10600] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2729.789159][T10600] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2729.876433][T10600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2729.884196][T10600] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2729.930612][T17952] Bluetooth: hci3: command 0x040f tx timeout
[ 2730.294153][T32035] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2730.555531][T32035] veth0_vlan: entered promiscuous mode
[ 2730.600312][T32035] veth1_vlan: entered promiscuous mode
[ 2730.745278][T32035] veth0_macvtap: entered promiscuous mode
[ 2730.780132][T32035] veth1_macvtap: entered promiscuous mode
[ 2730.885191][T32035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2730.896343][T32035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2730.906556][T32035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2730.917419][T32035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2730.927505][T32035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2730.938416][T32035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2730.953736][T32035] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2731.019720][T32035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2731.030599][T32035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2731.040837][T32035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2731.051633][T32035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2731.061798][T32035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2731.072537][T32035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2731.088015][T32035] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2731.149312][T32035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2731.160211][T32035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2731.169453][T32035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2731.178547][T32035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2731.386022][T26077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2731.394721][T26077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2731.580252][T26077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2731.590948][T26077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2731.937932][T32434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2731.954809][T13436] wlan1: authenticate with 08:02:11:00:00:00
[ 2731.967413][T13436] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2732.021840][T17952] Bluetooth: hci3: command 0x0419 tx timeout
[ 2732.023218][T10600] wlan1: authenticated
[ 2732.034074][ T5888] mac80211_hwsim hwsim35 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2732.046545][T32432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2732.079583][T10600] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2732.144685][T10600] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2732.154085][T10600] wlan1: associated
[ 2732.180514][T32432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:17 executing program 2:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x80003, 0x0)

18:46:17 executing program 0:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

18:46:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0)

18:46:17 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

18:46:17 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x187}}, &(0x7f00000008c0)='GPL\x00', 0x1, 0x86, &(0x7f0000000900)=""/134, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2732.349333][T32431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:17 executing program 3:
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
dup2(r4, r3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400))
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="b000f42ed80000080400000000000000160201cc00"/37], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

18:46:18 executing program 4:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0x28257e9e, 0x0, "8f6d34a97fa3b496515f0f5d5205bf2cc688ada32241796c0912830c6e978931"})

18:46:18 executing program 2:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x80003, 0x0)

18:46:18 executing program 0:
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)='}^.}@')
madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb)

[ 2732.905320][ T1210] ieee802154 phy0 wpan0: encryption failed: -22
[ 2732.912683][ T1210] ieee802154 phy1 wpan1: encryption failed: -22
[ 2732.970206][T32458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:18 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

[ 2733.164896][T32462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:18 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r2 = dup(r1)
write$cgroup_pid(r2, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
sendfile(r1, r2, &(0x7f0000000100), 0x6c03)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

[ 2733.296624][T32458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2d0, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2b3, 0x33, @probe_request={@with_ht={{{}, {}, @broadcast}}, @val, @void, @val={0x3, 0x1}, @void, @val={0x72, 0x6}, [{0xdd, 0x5b, "1a26c0d85b3e5538bdd3e0313b4a61dde8f671d5b4ea189a65962fe283f574567b2f9d6e99544b03298f82db75ab0ada98c35ac909af4de9cc85450ad50b5239059e0ac6523de8d6a7de805690da3c2836c8b067c675b394d9de86"}, {0xdd, 0x15, "c51a5792d0f87a787784585e4b2ba4e35316353120"}, {0xdd, 0xab, "5739138d0c22aedcd15c9064fe299bd2ec88d22a30447ce926216e37794217af37adbd987c8b90399447dca9e0de376df027ad27daf3729b84d7fd582cac56b55ef80af01c013bf213f297a1aee99c7ef8a1cf0292b36bd7c58485c952e465b8dae12ddc04a0b8199501842013a950f8b86e6254e8554994c4fa5b44541d58fe22cdbccb3bb9138662447d7841dd0b17659e7406931dc5b05621c5e2815a2a9d41343198aaff542ac3d6b4"}, {0xdd, 0x64, "19b4b1573e225cbae1559fc2af17a0086fd84ca86b439b46c47ff22931de624a50bafe4dc90bfcf57f8522c40914f0f3d8914e4fd97e4f1f1a8134e109f8d9262d5414c47fee3376c3caa80268d1e73ab28cda880a8dc726418975805966b621cb8ccedf"}, {0xdd, 0x25, "3adf51c293e133b59e7d36b5ffceafb7fb862933953e69c000c1ca54fa999063901bea4280"}, {0xdd, 0xa9, "03f284c8c81e0204d7c72eadfa1e216647b7c0f578e8b9688769d4d9d25a803b19d0796531ea88307d5ae4f73cebcaec4b322dca0c23baaf8b697c5e1dd87bce8e1145ee7a5baed1b66c38212431053f808ffe8f04188d693cd14b640d44b330c0d119759b6484953af185b3c6f2e371f40dd6fc5227c4609bb589ef0f5ee32843df2c966af82361309e6a145d74b5fb246b448a85126bdd4bb8917f4b57a52b1259d8885c36c4a4b9"}, {0xdd, 0x2b, "a6f4d4e28808db7b7ac56603e8205053607382036c9486c1c6981e1275151cabaee22d685e29518ebaf821"}]}}]}, 0x2d0}}, 0x0)

18:46:18 executing program 0:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x6000, 0x0)

18:46:18 executing program 2:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x80003, 0x0)

18:46:19 executing program 3:
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64)
dup2(r4, r3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400))
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="b000f42ed80000080400000000000000160201cc00"/37], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xc}]]}, 0x2c}}, 0x0)

18:46:19 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/69, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000500)=""/73, &(0x7f00000002c0)=""/86})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x9)

18:46:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x2c}}, 0x0)

18:46:19 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x33, 0x31c07})
readv(r0, &(0x7f0000001880)=[{&(0x7f0000001600)=""/155, 0x9b}, {0x0}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

18:46:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

18:46:19 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x33, 0x31c07})
readv(r0, &(0x7f0000001880)=[{&(0x7f0000001600)=""/155, 0x9b}, {0x0}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

18:46:19 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r2 = dup(r1)
write$cgroup_pid(r2, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
sendfile(r1, r2, &(0x7f0000000100), 0x6c03)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

18:46:19 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x33, 0x31c07})
readv(r0, &(0x7f0000001880)=[{&(0x7f0000001600)=""/155, 0x9b}, {0x0}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

18:46:20 executing program 3:
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
dup2(r4, r3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400))
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="b000f42ed80000080400000000000000160201cc00"/37], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async)
socket$netlink(0x10, 0x3, 0x10) (async)
dup2(r4, r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400)) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="b000f42ed80000080400000000000000160201cc00"/37], 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

18:46:20 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

18:46:20 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x33, 0x31c07})
readv(r0, &(0x7f0000001880)=[{&(0x7f0000001600)=""/155, 0x9b}, {0x0}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

[ 2735.244250][T32533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2735.424638][T32533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2735.524079][T32539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:21 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000000)=[{0x3}, {0x44}, {0x6, 0x0, 0x0, 0x7ffffdc0}]})
creat(&(0x7f0000000080)='./file0\x00', 0x0)

18:46:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

18:46:21 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x33, 0x31c07})
readv(r0, &(0x7f0000001880)=[{&(0x7f0000001600)=""/155, 0x9b}, {0x0}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

18:46:21 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x33, 0x31c07})
readv(r0, &(0x7f0000001880)=[{&(0x7f0000001600)=""/155, 0x9b}, {0x0}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

18:46:21 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r2 = dup(r1)
write$cgroup_pid(r2, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
sendfile(r1, r2, &(0x7f0000000100), 0x6c03)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

18:46:21 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

18:46:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000088211000001080211007c5302f2899f1a4e4c62eb151e54000008021100000000000000000000000000640001000006020202020202010882848b960c021824db811268cf0d2dc004caa72bf0c00a8e4d702f1010971e87c9cb3ae358bdd18c5ecdf5715f01ae54b6e507877cc72f57b3214c95e9e7ed8db7cf697ae83a0f5cdff6a65746da460867e4e6c056502e943b7de453fec59465"], 0x36)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r3, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005b80)={'gre0\x00', &(0x7f0000005b00)={'syztnl2\x00', <r6=>0x0, 0x8, 0x7, 0xfffffffd, 0x6, {{0xa, 0x4, 0x2, 0x3a, 0x28, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x69, [@private=0xa010102, @broadcast, @loopback, @private=0xa010101]}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r9=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x581, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, 0x442}}, 0x20}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000005d40)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x124, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "339c21c5bf4e0d0321eb627c00b756b70bf8a7faef5d7c0c450841776330adf2712acadd8c8aa3269a5d81"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x5}, 0x10)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r11 = socket$bt_bnep(0x1f, 0x3, 0x4)
recvmmsg(r11, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/104, 0x68}], 0x1, &(0x7f0000000700)=""/176, 0xb0}, 0x4e}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/88, 0x58}, {&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/251, 0xfb}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/102, 0x66}, {&(0x7f0000001c80)=""/49, 0x31}], 0x8, &(0x7f0000001d40)=""/232, 0xe8}, 0x7}, {{&(0x7f0000001e40)=@nfc_llcp, 0x80, &(0x7f0000003240)=[{&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/74, 0x4a}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/193, 0xc1}, {&(0x7f0000003200)=""/10, 0xa}], 0x6, &(0x7f00000032c0)=""/127, 0x7f}, 0x3}, {{&(0x7f0000003340)=@generic, 0x80, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/194, 0xc2}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/122, 0x7a}, {&(0x7f00000035c0)=""/55, 0x37}, {&(0x7f0000003600)=""/67, 0x43}], 0x5, &(0x7f0000003700)=""/50, 0x32}, 0x7}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/15, 0xf}], 0x1}, 0x2}, {{&(0x7f00000037c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/246, 0xfe32}, {&(0x7f0000003940)=""/7, 0x7}, {&(0x7f0000003980)=""/100, 0x64}], 0x3, &(0x7f0000003a40)=""/19, 0x13}, 0x200}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003a80)=""/153, 0x99}, {&(0x7f0000003b40)=""/68, 0x44}, {&(0x7f0000003bc0)=""/231, 0xe7}, {&(0x7f0000003cc0)=""/200, 0xc8}, {&(0x7f0000003dc0)=""/95, 0x5f}, {&(0x7f0000003e40)=""/210, 0xd2}, {&(0x7f0000003f40)=""/222, 0xde}], 0x7, &(0x7f00000040c0)=""/66, 0x42}, 0x42fc}, {{&(0x7f0000004140)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000055c0)=[{&(0x7f00000041c0)=""/87, 0x57}, {&(0x7f0000004240)=""/71, 0x47}, {&(0x7f00000042c0)=""/254, 0xfe}, {&(0x7f00000043c0)=""/75, 0x4b}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/74, 0x4a}, {&(0x7f00000054c0)=""/233, 0xe9}], 0x7, &(0x7f0000005640)=""/179, 0xb3}, 0x9}], 0x8, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000005900)=@broadcast, &(0x7f0000005940)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @random="6b091a055658", {0x3, 0xbd4}}, @ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x102, 0xb3b8, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12}, {0x4, 0x1}]}, @void, [{0xdd, 0xbf, "2b9c94b0116a72a9cefa26da69bb143fca14dc67fa839e2d91445cb14a2d89b071a7f28aee4ad2f2f117395260d2fd2959a4b60c30afc40ad238292d6ef20492320047be45f110cd4ef7d6418179d4e67b682d9a865589720e50a2a6de2fae98159950e04c1c6dc3613b91a605062b12f387ba3237c01f6563fca26d6344e24d6804dfb55ba23e217f43cb26ad17eef09b2713bdc8222daea4d69a91377293bc22e5b598e8e680fc675f426d7ff62eff696d25aef352b9b96f19547944747d"}]}, 0xf3)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
futex(&(0x7f0000000000)=0x2, 0x100, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000300), 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000600)={0x6, 'wg1\x00', {0x7}, 0x8})

18:46:22 executing program 2:
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000003070000000049c40c240000e9fffff5ffffffff092403f3ff0000050245240505"], 0x0)

[ 2736.887013][T32571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2737.083713][T32575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:22 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

[ 2737.240567][T32575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:22 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x33, 0x31c07})
readv(r0, &(0x7f0000001880)=[{&(0x7f0000001600)=""/155, 0x9b}, {0x0}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

[ 2737.338836][T32571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2737.439353][T16190] usb 3-1: new high-speed USB device number 11 using dummy_hcd
18:46:22 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r2 = dup(r1)
write$cgroup_pid(r2, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
sendfile(r1, r2, &(0x7f0000000100), 0x6c03)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

18:46:23 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

[ 2737.799882][T16190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2737.810557][T16190] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
18:46:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000088211000001080211007c5302f2899f1a4e4c62eb151e54000008021100000000000000000000000000640001000006020202020202010882848b960c021824db811268cf0d2dc004caa72bf0c00a8e4d702f1010971e87c9cb3ae358bdd18c5ecdf5715f01ae54b6e507877cc72f57b3214c95e9e7ed8db7cf697ae83a0f5cdff6a65746da460867e4e6c056502e943b7de453fec59465"], 0x36)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r3, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005b80)={'gre0\x00', &(0x7f0000005b00)={'syztnl2\x00', <r6=>0x0, 0x8, 0x7, 0xfffffffd, 0x6, {{0xa, 0x4, 0x2, 0x3a, 0x28, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x69, [@private=0xa010102, @broadcast, @loopback, @private=0xa010101]}]}}}}}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) (async)
getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r9=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x581, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, 0x442}}, 0x20}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000005d40)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x124, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "339c21c5bf4e0d0321eb627c00b756b70bf8a7faef5d7c0c450841776330adf2712acadd8c8aa3269a5d81"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r11 = socket$bt_bnep(0x1f, 0x3, 0x4)
recvmmsg(r11, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/104, 0x68}], 0x1, &(0x7f0000000700)=""/176, 0xb0}, 0x4e}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/88, 0x58}, {&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/251, 0xfb}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/102, 0x66}, {&(0x7f0000001c80)=""/49, 0x31}], 0x8, &(0x7f0000001d40)=""/232, 0xe8}, 0x7}, {{&(0x7f0000001e40)=@nfc_llcp, 0x80, &(0x7f0000003240)=[{&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/74, 0x4a}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/193, 0xc1}, {&(0x7f0000003200)=""/10, 0xa}], 0x6, &(0x7f00000032c0)=""/127, 0x7f}, 0x3}, {{&(0x7f0000003340)=@generic, 0x80, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/194, 0xc2}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/122, 0x7a}, {&(0x7f00000035c0)=""/55, 0x37}, {&(0x7f0000003600)=""/67, 0x43}], 0x5, &(0x7f0000003700)=""/50, 0x32}, 0x7}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/15, 0xf}], 0x1}, 0x2}, {{&(0x7f00000037c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/246, 0xfe32}, {&(0x7f0000003940)=""/7, 0x7}, {&(0x7f0000003980)=""/100, 0x64}], 0x3, &(0x7f0000003a40)=""/19, 0x13}, 0x200}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003a80)=""/153, 0x99}, {&(0x7f0000003b40)=""/68, 0x44}, {&(0x7f0000003bc0)=""/231, 0xe7}, {&(0x7f0000003cc0)=""/200, 0xc8}, {&(0x7f0000003dc0)=""/95, 0x5f}, {&(0x7f0000003e40)=""/210, 0xd2}, {&(0x7f0000003f40)=""/222, 0xde}], 0x7, &(0x7f00000040c0)=""/66, 0x42}, 0x42fc}, {{&(0x7f0000004140)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000055c0)=[{&(0x7f00000041c0)=""/87, 0x57}, {&(0x7f0000004240)=""/71, 0x47}, {&(0x7f00000042c0)=""/254, 0xfe}, {&(0x7f00000043c0)=""/75, 0x4b}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/74, 0x4a}, {&(0x7f00000054c0)=""/233, 0xe9}], 0x7, &(0x7f0000005640)=""/179, 0xb3}, 0x9}], 0x8, 0x0, 0x0) (async)
syz_80211_inject_frame(&(0x7f0000005900)=@broadcast, &(0x7f0000005940)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @random="6b091a055658", {0x3, 0xbd4}}, @ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x102, 0xb3b8, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12}, {0x4, 0x1}]}, @void, [{0xdd, 0xbf, "2b9c94b0116a72a9cefa26da69bb143fca14dc67fa839e2d91445cb14a2d89b071a7f28aee4ad2f2f117395260d2fd2959a4b60c30afc40ad238292d6ef20492320047be45f110cd4ef7d6418179d4e67b682d9a865589720e50a2a6de2fae98159950e04c1c6dc3613b91a605062b12f387ba3237c01f6563fca26d6344e24d6804dfb55ba23e217f43cb26ad17eef09b2713bdc8222daea4d69a91377293bc22e5b598e8e680fc675f426d7ff62eff696d25aef352b9b96f19547944747d"}]}, 0xf3)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
futex(&(0x7f0000000000)=0x2, 0x100, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000300), 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000600)={0x6, 'wg1\x00', {0x7}, 0x8})

[ 2737.951381][T16190] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2737.960966][T16190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2737.969506][T16190] usb 3-1: SerialNumber: syz
18:46:23 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
ftruncate(r0, 0xf2d)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2059)
r2 = dup(r0)
sendfile(r1, r2, 0x0, 0xe0000000)
utimensat(r2, 0x0, &(0x7f0000002180), 0x0)

[ 2738.389663][T16190] usb 3-1: 0:2 : does not exist
18:46:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

[ 2738.621947][T16190] usb 3-1: USB disconnect, device number 11
[ 2738.664418][T32615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2738.859925][T32613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:24 executing program 2:
r0 = semget$private(0x0, 0x4000000009, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0)
semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffb1}], 0x1, &(0x7f0000000240)={0x77359400})
r2 = gettid()
tkill(r2, 0x14)

[ 2739.077969][T31664] udevd[31664]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
18:46:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000088211000001080211007c5302f2899f1a4e4c62eb151e54000008021100000000000000000000000000640001000006020202020202010882848b960c021824db811268cf0d2dc004caa72bf0c00a8e4d702f1010971e87c9cb3ae358bdd18c5ecdf5715f01ae54b6e507877cc72f57b3214c95e9e7ed8db7cf697ae83a0f5cdff6a65746da460867e4e6c056502e943b7de453fec59465"], 0x36) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r3, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005b80)={'gre0\x00', &(0x7f0000005b00)={'syztnl2\x00', <r6=>0x0, 0x8, 0x7, 0xfffffffd, 0x6, {{0xa, 0x4, 0x2, 0x3a, 0x28, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x69, [@private=0xa010102, @broadcast, @loopback, @private=0xa010101]}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) (async)
getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r9=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x581, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, 0x442}}, 0x20}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000005d40)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x124, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "339c21c5bf4e0d0321eb627c00b756b70bf8a7faef5d7c0c450841776330adf2712acadd8c8aa3269a5d81"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
r11 = socket$bt_bnep(0x1f, 0x3, 0x4)
recvmmsg(r11, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/104, 0x68}], 0x1, &(0x7f0000000700)=""/176, 0xb0}, 0x4e}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/88, 0x58}, {&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/251, 0xfb}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/102, 0x66}, {&(0x7f0000001c80)=""/49, 0x31}], 0x8, &(0x7f0000001d40)=""/232, 0xe8}, 0x7}, {{&(0x7f0000001e40)=@nfc_llcp, 0x80, &(0x7f0000003240)=[{&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/74, 0x4a}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/193, 0xc1}, {&(0x7f0000003200)=""/10, 0xa}], 0x6, &(0x7f00000032c0)=""/127, 0x7f}, 0x3}, {{&(0x7f0000003340)=@generic, 0x80, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/194, 0xc2}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/122, 0x7a}, {&(0x7f00000035c0)=""/55, 0x37}, {&(0x7f0000003600)=""/67, 0x43}], 0x5, &(0x7f0000003700)=""/50, 0x32}, 0x7}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/15, 0xf}], 0x1}, 0x2}, {{&(0x7f00000037c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/246, 0xfe32}, {&(0x7f0000003940)=""/7, 0x7}, {&(0x7f0000003980)=""/100, 0x64}], 0x3, &(0x7f0000003a40)=""/19, 0x13}, 0x200}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003a80)=""/153, 0x99}, {&(0x7f0000003b40)=""/68, 0x44}, {&(0x7f0000003bc0)=""/231, 0xe7}, {&(0x7f0000003cc0)=""/200, 0xc8}, {&(0x7f0000003dc0)=""/95, 0x5f}, {&(0x7f0000003e40)=""/210, 0xd2}, {&(0x7f0000003f40)=""/222, 0xde}], 0x7, &(0x7f00000040c0)=""/66, 0x42}, 0x42fc}, {{&(0x7f0000004140)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000055c0)=[{&(0x7f00000041c0)=""/87, 0x57}, {&(0x7f0000004240)=""/71, 0x47}, {&(0x7f00000042c0)=""/254, 0xfe}, {&(0x7f00000043c0)=""/75, 0x4b}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/74, 0x4a}, {&(0x7f00000054c0)=""/233, 0xe9}], 0x7, &(0x7f0000005640)=""/179, 0xb3}, 0x9}], 0x8, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000005900)=@broadcast, &(0x7f0000005940)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @random="6b091a055658", {0x3, 0xbd4}}, @ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x102, 0xb3b8, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12}, {0x4, 0x1}]}, @void, [{0xdd, 0xbf, "2b9c94b0116a72a9cefa26da69bb143fca14dc67fa839e2d91445cb14a2d89b071a7f28aee4ad2f2f117395260d2fd2959a4b60c30afc40ad238292d6ef20492320047be45f110cd4ef7d6418179d4e67b682d9a865589720e50a2a6de2fae98159950e04c1c6dc3613b91a605062b12f387ba3237c01f6563fca26d6344e24d6804dfb55ba23e217f43cb26ad17eef09b2713bdc8222daea4d69a91377293bc22e5b598e8e680fc675f426d7ff62eff696d25aef352b9b96f19547944747d"}]}, 0xf3) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
futex(&(0x7f0000000000)=0x2, 0x100, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000300), 0x2) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000600)={0x6, 'wg1\x00', {0x7}, 0x8})

18:46:24 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt(r0, 0x0, 0x82, 0x0, 0x0)

18:46:24 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

18:46:24 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
ftruncate(r0, 0xf2d)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2059)
r2 = dup(r0)
sendfile(r1, r2, 0x0, 0xe0000000)
utimensat(r2, 0x0, &(0x7f0000002180), 0x0)

[ 2739.645464][T32646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:25 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

18:46:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r2, 0xe19, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "828bde21f4e278e6030b09ce14eda10fbf3a97b61b6d6298"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x88}}, 0x8804)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r5, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r6=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r9, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r10=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000006c0)="97a3e8da6d807a719501550c2c90521b836b5b2f0d", 0x15}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="08e3cd9ea9637196d4a95cde7bddffa2abd2b4c3e00b84083780c55fc86418d815e1bb5881ce34ed5d99b90ee7e100672b44c42cd944de1990db01b53d7ecb344c9b18f8a860cfa966f59808cc4358f50e6b8877e9116190b23d8a162c463593a00abd405d59ef1f353cb0237e9fb7a585a5b4b17102c82e74d2d985484621c9098141d396acef5a95c64c03", 0x8c}, {&(0x7f00000008c0)="9dac9bf3eb62c4f7ffdce1c6a7f6fe3bb9eb0501ad6b5c349bc5fe142dc1c42561fadade8a38aa2c7f3727d430dea58ac102112789941452da7e023764634d9131ea6db0a5496e89037e29", 0x4b}, {&(0x7f0000000940)="39056f78534d7192380a1a8e8c63373e5aaa72ca7a3b9bfc330d83733fba91defd05c632a9daa9a425b537421f17a33be171239548ce3735bb894de61ffe29b2f28cda238372ed69b816470893359406f2b1d10ffe58f2d947bffabcb8bb2038c3863721cc642f4271e8c6f4fd5b7c27d37f2041782b6b132bcb2ad974f27a081eabe892563a098221f57849ee1bebe8cd63fe513e6aa98e4902e927eee44830b5a2ce1810973f2d6eed3cd1b8ddc054fae1e384949735fcc264e8433f", 0xbd}, {&(0x7f0000000a00)="2c49aaed491f40697616a97b4a53c82529b92bd8a5c90671519d0436f9b1e696fcef200679a41dd7e4a250c86c2212b6f04887bf43de20b34d757b41ea7b7bccc816d62480ff198ef82790031d1629be3e9f3241d2dedc2a288f780aa92feb5b80f665eb1c6f83b06e783667b411633c7dc6ad6a2f60cd069c2bd16b9a7996207e2acf14fffa86a5cbd81a86f0762e40ef3d1537bcaf41a552ebaafbaf4ceadab8fea3f5c3c636ad832b95ea5779147b20b88597462189c2d80e40d8e8c9df23305f88040f16d4ce85c2a0d436526e5707c057bb4619", 0xd6}, {&(0x7f0000000b00)="2a2df90f4ee4", 0x6}, {&(0x7f0000000b40)="78e00d96ec78c3365f82e0fdcc2a311dce13dc3c71840c887d17d26d1a3e1f2f2d7e9d8d3f96cb6bcbdedc480d4d2e21571575c10851cb06c8e705617f0e5abd593595e527606070d241e61c30854da174c5bb2a16209f121723a1f16a59d8ba5209011775cca3a80b428deebd101866c272176b62de86f70372cac40c28faf88a3843804a385ec354771ed7f0af80e1f040caa6a72edcedaf5d3ce5ef08c73fc9bf92b9f5", 0xa5}, {&(0x7f0000000c00)="aad3a2fedce4b2af143dc5a544f42ece5744031b3367455eb569842d427aaf6c7a365ee78b45842bc81d305ec26abb069fd4a5e8571181e6ea2f71f0c6ae780f5060ef8c04c19554f5d0d3474b9057d3a8bfd3600560e4e2e4da2d3483d32b4e32c02ea354d601d2b57739ff703438bdf2183e01358fb0", 0x77}], 0x9, &(0x7f0000000d40)=[@ip_ttl={{0x14}}], 0x18}}, {{&(0x7f0000000d80)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="f916b4ad507f432a474350b702f14a4d71590e98a03f7470624998c0262e4ce5281cba845dfa58840ddbe4cf", 0x2c}, {&(0x7f0000000e00)="653bbb3fe7a1371337318ceb4b8398c4e959c2530b9158d5d8f430724ec692ea36e126d12f014af19bd562f94d28046ded9ea1e869e4e87d8cd02db61c7f4e9ce0514eff0c", 0x45}, {&(0x7f0000000e80)="4257d4b9944e1ecba4fa88d3943ddf343c1cbfd2745a2dda720778a0884760576a092777236649420b3bea17e58cb40f31e3f16e54e50825d4d82e511a8f3ef763da497bebd986ac83ec6569f5cb59ec17687259983501a0f49efa19a0896fd9d6bfd649e20d187e0dd5a4c778", 0x6d}, {&(0x7f0000000f00)="f35fcda84a91527c5548360086bd01ce56f1adab64445272c54d464480bc7fd7262d02ca7c923fae58ed50d2fac76b944954743c6005e6404bf3ea3a1b2f8db837a6c2cb79bdf2587d03f62f96c1ce7e640d8bf2b73d1ba16595683adc74e0cddfa3fc6ac79391e5f20ab1d7c9cd99aaa0debd1778af46a044f33b5c661528aa510ca7a4e06a588abb8e1366a394fa081c9ee851580deaa8759aa3580023137e10eb631747820c2ee30bbcfbeb", 0xad}], 0x4, &(0x7f0000001000)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xbe, [@private=0xa010101, @loopback]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x6, 0x10, "e2eb1e924eaa39d511ec14a1eee3"}, {0x6, 0x7, "1eeab56a5e"}, {0x6, 0xf, "1ae5bfb65db46969e65353639e"}, {0x6, 0x3, "a7"}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x47}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}], 0x110}}, {{&(0x7f0000001140)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001180)="fbed385683ed092c41d30bdb53dd5ef99224c056d32531cb1ccf639ec85006b866d1847042b2627027d3fe7c0cd20f4891e6ff593e0ac16b99364d92f64aa37f1d6b8cf00991fe1a47a56ed986900bd6b4115fa340922030de7e35624be024dd0abef47649e43e460e220a00a6ec437f24d3c5bafefd31e9e16c4852807c05dae1e025ce7cf012218c88663205fed2e105da9cba9de57ccb658dd728f722f04d707d2d44788675e0dfa8e0cd115770a5a9ad962cc3053e1e60ed55ef3b85", 0xbe}], 0x1, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001280)="a4fa78d3a82ac2a4385237bae817eb5572f788a4bfa31467441c217ea6f1ab780028f5c7cc35a31d61c53090a210d687f46adc2250692d00ca6a5061e573db7bd67fe21a67e2a5f287998b71a0e9ab7dbd4e9069172d8d75c648821472ef483b0b6c503f28ee4c13762825bd9435934f3183f7f88afc6cb7eb0839387f9203dfed89f9d0c6d0e673f7fe40616f5322bfc0a36f55fbaa179a0db0079950dac0871a23751b6883", 0xa6}, {&(0x7f0000001340)="dbe6a6921206d33ead56c462b7e61a146a54fe02c587b8dad391285544c50b4f6de069ca656f729d8ff2017e272ce773bfdf00487688f7313429b2f2f1384f6b768ef8e73696db4af6b8e5c0d7cd01f153d34fd43cc5db78dcd52fa9dfcab199c293b4568a", 0x65}, {&(0x7f00000013c0)="08d34bbbbc9b6279608777675649ef9bed756e3f6d922efc5aef61b063de7cfaf122ec3351ff06730ebf2c93b3493c4536506604046f16e016dc6eabb5074c9305ab917561b79701941a22340732c08d2d54c8110340c0d0c5ea5db1f04379bba0f8dc5dce68c9a8ef47cd62a5cd9ea60a42f1f5cb1b2212a5237416de1f1ac6b5554755abfda46fe43797e45c5d4f0194ae4ba9d908102d32705e6d760b8ba4e98713e4b98a919a365f57e8457577", 0xaf}], 0x3, &(0x7f00000014c0)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x9, [0x61b5a1bd, 0x7, 0x0, 0xd455]}, @end, @ssrr={0x89, 0x23, 0xa2, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @remote, @multicast1]}]}}}, @ip_retopts={{0x10}}], 0x60}}], 0x4, 0x20000000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:25 executing program 4:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0x29, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001740)={0x28, 0x5, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r1, 0x0, &(0x7f00000000c0)='B', 0x1})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, r1, r1, 0x2})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001700)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x0, r2, r4, 0x1000, 0x0, 0x2})

18:46:25 executing program 4:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0x29, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001740)={0x28, 0x5, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r1, 0x0, &(0x7f00000000c0)='B', 0x1})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, r1, r1, 0x2})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001700)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x0, r2, r4, 0x1000, 0x0, 0x2})

18:46:25 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})

18:46:25 executing program 2:
io_setup(0x1, &(0x7f0000000080)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
io_submit(r0, 0x1, &(0x7f0000001640)=[&(0x7f0000001340)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000340)="5627623150948e1bd1", 0x9, 0xfffffffffffffff8}])

[ 2740.585964][T32665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2740.791191][T32667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2740.911285][T32665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:26 executing program 5:
r0 = syz_io_uring_setup(0xe80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

18:46:26 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)={0x7eff, 0x1, [{0x1, 0x1}]})

18:46:26 executing program 4:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0x29, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001740)={0x28, 0x5, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r1, 0x0, &(0x7f00000000c0)='B', 0x1})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, r1, r1, 0x2})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001700)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x0, r2, r4, 0x1000, 0x0, 0x2})

18:46:26 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
ftruncate(r0, 0xf2d)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2059)
r2 = dup(r0)
sendfile(r1, r2, 0x0, 0xe0000000)
utimensat(r2, 0x0, &(0x7f0000002180), 0x0)

18:46:26 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"/1844], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})

[ 2741.413794][T32684] usb usb8: usbfs: process 32684 (syz-executor.2) did not claim interface 0 before use
18:46:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r2, 0xe19, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "828bde21f4e278e6030b09ce14eda10fbf3a97b61b6d6298"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x88}}, 0x8804)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r5, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r6=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r9, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r10=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000006c0)="97a3e8da6d807a719501550c2c90521b836b5b2f0d", 0x15}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="08e3cd9ea9637196d4a95cde7bddffa2abd2b4c3e00b84083780c55fc86418d815e1bb5881ce34ed5d99b90ee7e100672b44c42cd944de1990db01b53d7ecb344c9b18f8a860cfa966f59808cc4358f50e6b8877e9116190b23d8a162c463593a00abd405d59ef1f353cb0237e9fb7a585a5b4b17102c82e74d2d985484621c9098141d396acef5a95c64c03", 0x8c}, {&(0x7f00000008c0)="9dac9bf3eb62c4f7ffdce1c6a7f6fe3bb9eb0501ad6b5c349bc5fe142dc1c42561fadade8a38aa2c7f3727d430dea58ac102112789941452da7e023764634d9131ea6db0a5496e89037e29", 0x4b}, {&(0x7f0000000940)="39056f78534d7192380a1a8e8c63373e5aaa72ca7a3b9bfc330d83733fba91defd05c632a9daa9a425b537421f17a33be171239548ce3735bb894de61ffe29b2f28cda238372ed69b816470893359406f2b1d10ffe58f2d947bffabcb8bb2038c3863721cc642f4271e8c6f4fd5b7c27d37f2041782b6b132bcb2ad974f27a081eabe892563a098221f57849ee1bebe8cd63fe513e6aa98e4902e927eee44830b5a2ce1810973f2d6eed3cd1b8ddc054fae1e384949735fcc264e8433f", 0xbd}, {&(0x7f0000000a00)="2c49aaed491f40697616a97b4a53c82529b92bd8a5c90671519d0436f9b1e696fcef200679a41dd7e4a250c86c2212b6f04887bf43de20b34d757b41ea7b7bccc816d62480ff198ef82790031d1629be3e9f3241d2dedc2a288f780aa92feb5b80f665eb1c6f83b06e783667b411633c7dc6ad6a2f60cd069c2bd16b9a7996207e2acf14fffa86a5cbd81a86f0762e40ef3d1537bcaf41a552ebaafbaf4ceadab8fea3f5c3c636ad832b95ea5779147b20b88597462189c2d80e40d8e8c9df23305f88040f16d4ce85c2a0d436526e5707c057bb4619", 0xd6}, {&(0x7f0000000b00)="2a2df90f4ee4", 0x6}, {&(0x7f0000000b40)="78e00d96ec78c3365f82e0fdcc2a311dce13dc3c71840c887d17d26d1a3e1f2f2d7e9d8d3f96cb6bcbdedc480d4d2e21571575c10851cb06c8e705617f0e5abd593595e527606070d241e61c30854da174c5bb2a16209f121723a1f16a59d8ba5209011775cca3a80b428deebd101866c272176b62de86f70372cac40c28faf88a3843804a385ec354771ed7f0af80e1f040caa6a72edcedaf5d3ce5ef08c73fc9bf92b9f5", 0xa5}, {&(0x7f0000000c00)="aad3a2fedce4b2af143dc5a544f42ece5744031b3367455eb569842d427aaf6c7a365ee78b45842bc81d305ec26abb069fd4a5e8571181e6ea2f71f0c6ae780f5060ef8c04c19554f5d0d3474b9057d3a8bfd3600560e4e2e4da2d3483d32b4e32c02ea354d601d2b57739ff703438bdf2183e01358fb0", 0x77}], 0x9, &(0x7f0000000d40)=[@ip_ttl={{0x14}}], 0x18}}, {{&(0x7f0000000d80)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="f916b4ad507f432a474350b702f14a4d71590e98a03f7470624998c0262e4ce5281cba845dfa58840ddbe4cf", 0x2c}, {&(0x7f0000000e00)="653bbb3fe7a1371337318ceb4b8398c4e959c2530b9158d5d8f430724ec692ea36e126d12f014af19bd562f94d28046ded9ea1e869e4e87d8cd02db61c7f4e9ce0514eff0c", 0x45}, {&(0x7f0000000e80)="4257d4b9944e1ecba4fa88d3943ddf343c1cbfd2745a2dda720778a0884760576a092777236649420b3bea17e58cb40f31e3f16e54e50825d4d82e511a8f3ef763da497bebd986ac83ec6569f5cb59ec17687259983501a0f49efa19a0896fd9d6bfd649e20d187e0dd5a4c778", 0x6d}, {&(0x7f0000000f00)="f35fcda84a91527c5548360086bd01ce56f1adab64445272c54d464480bc7fd7262d02ca7c923fae58ed50d2fac76b944954743c6005e6404bf3ea3a1b2f8db837a6c2cb79bdf2587d03f62f96c1ce7e640d8bf2b73d1ba16595683adc74e0cddfa3fc6ac79391e5f20ab1d7c9cd99aaa0debd1778af46a044f33b5c661528aa510ca7a4e06a588abb8e1366a394fa081c9ee851580deaa8759aa3580023137e10eb631747820c2ee30bbcfbeb", 0xad}], 0x4, &(0x7f0000001000)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xbe, [@private=0xa010101, @loopback]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x6, 0x10, "e2eb1e924eaa39d511ec14a1eee3"}, {0x6, 0x7, "1eeab56a5e"}, {0x6, 0xf, "1ae5bfb65db46969e65353639e"}, {0x6, 0x3, "a7"}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x47}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}], 0x110}}, {{&(0x7f0000001140)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001180)="fbed385683ed092c41d30bdb53dd5ef99224c056d32531cb1ccf639ec85006b866d1847042b2627027d3fe7c0cd20f4891e6ff593e0ac16b99364d92f64aa37f1d6b8cf00991fe1a47a56ed986900bd6b4115fa340922030de7e35624be024dd0abef47649e43e460e220a00a6ec437f24d3c5bafefd31e9e16c4852807c05dae1e025ce7cf012218c88663205fed2e105da9cba9de57ccb658dd728f722f04d707d2d44788675e0dfa8e0cd115770a5a9ad962cc3053e1e60ed55ef3b85", 0xbe}], 0x1, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001280)="a4fa78d3a82ac2a4385237bae817eb5572f788a4bfa31467441c217ea6f1ab780028f5c7cc35a31d61c53090a210d687f46adc2250692d00ca6a5061e573db7bd67fe21a67e2a5f287998b71a0e9ab7dbd4e9069172d8d75c648821472ef483b0b6c503f28ee4c13762825bd9435934f3183f7f88afc6cb7eb0839387f9203dfed89f9d0c6d0e673f7fe40616f5322bfc0a36f55fbaa179a0db0079950dac0871a23751b6883", 0xa6}, {&(0x7f0000001340)="dbe6a6921206d33ead56c462b7e61a146a54fe02c587b8dad391285544c50b4f6de069ca656f729d8ff2017e272ce773bfdf00487688f7313429b2f2f1384f6b768ef8e73696db4af6b8e5c0d7cd01f153d34fd43cc5db78dcd52fa9dfcab199c293b4568a", 0x65}, {&(0x7f00000013c0)="08d34bbbbc9b6279608777675649ef9bed756e3f6d922efc5aef61b063de7cfaf122ec3351ff06730ebf2c93b3493c4536506604046f16e016dc6eabb5074c9305ab917561b79701941a22340732c08d2d54c8110340c0d0c5ea5db1f04379bba0f8dc5dce68c9a8ef47cd62a5cd9ea60a42f1f5cb1b2212a5237416de1f1ac6b5554755abfda46fe43797e45c5d4f0194ae4ba9d908102d32705e6d760b8ba4e98713e4b98a919a365f57e8457577", 0xaf}], 0x3, &(0x7f00000014c0)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x9, [0x61b5a1bd, 0x7, 0x0, 0xd455]}, @end, @ssrr={0x89, 0x23, 0xa2, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @remote, @multicast1]}]}}}, @ip_retopts={{0x10}}], 0x60}}], 0x4, 0x20000000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:26 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff)

18:46:27 executing program 4:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0x29, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001740)={0x28, 0x5, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r1, 0x0, &(0x7f00000000c0)='B', 0x1})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, r1, r1, 0x2})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001700)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x0, r2, r4, 0x1000, 0x0, 0x2})

18:46:27 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)={0x7eff, 0x1, [{0x1, 0x1}]})

18:46:27 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683626e00dcff7f0000ca6b78ad833488cfe4109eaf009edd0d69613d3cd62f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7fb21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933b06759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6db9d661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b864f983d745f5865aad41d2915aae7602a0000d415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4cd5faae176a69b745eda2967199cc936859a538100000000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb7aa3804b9f2a8f2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916a39d3057d55183612b39e73aeeb6eaf14652dda68c98e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dcaab2ab8b63f476b97419a3b7660df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d906551ca85ffa4add5647489b3960127696cf2f16625c0c10200000000c7a5ca60fdad159f2e44171f3963841086e3797a4825d081f2d987f05c534187738655d7dc958fd235d6071619a6554b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb1cfa2638f56daee57ed15bc74de0fd87a9ce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76f822278d124638fec58faeb44158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1d5b7f2fd7252e9322abe2a2c33445d443a67467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b907bddd5e328661f4c06e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000000000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164e3f2491e4793e590dcc71de10da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60870fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe555318014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646aef651cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489eb66fd5db1c053d9c2c7861552381646365066ef9a36a449c96485c22ad1a8423b7b89efbc6cd54db0bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8c6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde00"/1844], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})

[ 2742.081181][T32705] usb usb8: usbfs: process 32705 (syz-executor.2) did not claim interface 0 before use
18:46:27 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)={0x7eff, 0x1, [{0x1, 0x1}]})

18:46:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r2, 0xe19, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "828bde21f4e278e6030b09ce14eda10fbf3a97b61b6d6298"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x88}}, 0x8804)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r5, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r6=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r9, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r10=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000006c0)="97a3e8da6d807a719501550c2c90521b836b5b2f0d", 0x15}, {&(0x7f0000000700)="5268909d48cf810a38e417b93bdd60d2a11dc9bd9e60ec4eeba8f907b9a8980d360216728af28a7bfdeb74a3430ae7cfb29ac1bb8b15f4282bb8f8e8aa7abdd2ebb45e4f9d834d7e1451b27b6d71017d33baef1fbac305c3e541d09a33b2d2683b2bfaa57eca3f4cabf8244935fa3e8512a3fcfd41cdf82ab86128666b79446865c845f3969268e9afb807009eecac9281652dd25a8b8eb896566ef01aa38723419bbb7951f44815724528e340d1a9ab9fc9a8a4fdb6f35df7061b3358597e7c43485ef06ab2b76d951c91380a572f163c4b885c982ccfb7e83294b3a7b9b546b20bf223b4c7ddbba9e4d5f09bc0595be7f4fe5f25552493959d5811f4cc84", 0xff}, {&(0x7f0000000800)="08e3cd9ea9637196d4a95cde7bddffa2abd2b4c3e00b84083780c55fc86418d815e1bb5881ce34ed5d99b90ee7e100672b44c42cd944de1990db01b53d7ecb344c9b18f8a860cfa966f59808cc4358f50e6b8877e9116190b23d8a162c463593a00abd405d59ef1f353cb0237e9fb7a585a5b4b17102c82e74d2d985484621c9098141d396acef5a95c64c03", 0x8c}, {&(0x7f00000008c0)="9dac9bf3eb62c4f7ffdce1c6a7f6fe3bb9eb0501ad6b5c349bc5fe142dc1c42561fadade8a38aa2c7f3727d430dea58ac102112789941452da7e023764634d9131ea6db0a5496e89037e29", 0x4b}, {&(0x7f0000000940)="39056f78534d7192380a1a8e8c63373e5aaa72ca7a3b9bfc330d83733fba91defd05c632a9daa9a425b537421f17a33be171239548ce3735bb894de61ffe29b2f28cda238372ed69b816470893359406f2b1d10ffe58f2d947bffabcb8bb2038c3863721cc642f4271e8c6f4fd5b7c27d37f2041782b6b132bcb2ad974f27a081eabe892563a098221f57849ee1bebe8cd63fe513e6aa98e4902e927eee44830b5a2ce1810973f2d6eed3cd1b8ddc054fae1e384949735fcc264e8433f", 0xbd}, {&(0x7f0000000a00)="2c49aaed491f40697616a97b4a53c82529b92bd8a5c90671519d0436f9b1e696fcef200679a41dd7e4a250c86c2212b6f04887bf43de20b34d757b41ea7b7bccc816d62480ff198ef82790031d1629be3e9f3241d2dedc2a288f780aa92feb5b80f665eb1c6f83b06e783667b411633c7dc6ad6a2f60cd069c2bd16b9a7996207e2acf14fffa86a5cbd81a86f0762e40ef3d1537bcaf41a552ebaafbaf4ceadab8fea3f5c3c636ad832b95ea5779147b20b88597462189c2d80e40d8e8c9df23305f88040f16d4ce85c2a0d436526e5707c057bb4619", 0xd6}, {&(0x7f0000000b00)="2a2df90f4ee4", 0x6}, {&(0x7f0000000b40)="78e00d96ec78c3365f82e0fdcc2a311dce13dc3c71840c887d17d26d1a3e1f2f2d7e9d8d3f96cb6bcbdedc480d4d2e21571575c10851cb06c8e705617f0e5abd593595e527606070d241e61c30854da174c5bb2a16209f121723a1f16a59d8ba5209011775cca3a80b428deebd101866c272176b62de86f70372cac40c28faf88a3843804a385ec354771ed7f0af80e1f040caa6a72edcedaf5d3ce5ef08c73fc9bf92b9f5", 0xa5}, {&(0x7f0000000c00)="aad3a2fedce4b2af143dc5a544f42ece5744031b3367455eb569842d427aaf6c7a365ee78b45842bc81d305ec26abb069fd4a5e8571181e6ea2f71f0c6ae780f5060ef8c04c19554f5d0d3474b9057d3a8bfd3600560e4e2e4da2d3483d32b4e32c02ea354d601d2b57739ff703438bdf2183e01358fb0", 0x77}], 0x9, &(0x7f0000000d40)=[@ip_ttl={{0x14}}], 0x18}}, {{&(0x7f0000000d80)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="f916b4ad507f432a474350b702f14a4d71590e98a03f7470624998c0262e4ce5281cba845dfa58840ddbe4cf", 0x2c}, {&(0x7f0000000e00)="653bbb3fe7a1371337318ceb4b8398c4e959c2530b9158d5d8f430724ec692ea36e126d12f014af19bd562f94d28046ded9ea1e869e4e87d8cd02db61c7f4e9ce0514eff0c", 0x45}, {&(0x7f0000000e80)="4257d4b9944e1ecba4fa88d3943ddf343c1cbfd2745a2dda720778a0884760576a092777236649420b3bea17e58cb40f31e3f16e54e50825d4d82e511a8f3ef763da497bebd986ac83ec6569f5cb59ec17687259983501a0f49efa19a0896fd9d6bfd649e20d187e0dd5a4c778", 0x6d}, {&(0x7f0000000f00)="f35fcda84a91527c5548360086bd01ce56f1adab64445272c54d464480bc7fd7262d02ca7c923fae58ed50d2fac76b944954743c6005e6404bf3ea3a1b2f8db837a6c2cb79bdf2587d03f62f96c1ce7e640d8bf2b73d1ba16595683adc74e0cddfa3fc6ac79391e5f20ab1d7c9cd99aaa0debd1778af46a044f33b5c661528aa510ca7a4e06a588abb8e1366a394fa081c9ee851580deaa8759aa3580023137e10eb631747820c2ee30bbcfbeb", 0xad}], 0x4, &(0x7f0000001000)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xbe, [@private=0xa010101, @loopback]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x6, 0x10, "e2eb1e924eaa39d511ec14a1eee3"}, {0x6, 0x7, "1eeab56a5e"}, {0x6, 0xf, "1ae5bfb65db46969e65353639e"}, {0x6, 0x3, "a7"}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x47}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}], 0x110}}, {{&(0x7f0000001140)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001180)="fbed385683ed092c41d30bdb53dd5ef99224c056d32531cb1ccf639ec85006b866d1847042b2627027d3fe7c0cd20f4891e6ff593e0ac16b99364d92f64aa37f1d6b8cf00991fe1a47a56ed986900bd6b4115fa340922030de7e35624be024dd0abef47649e43e460e220a00a6ec437f24d3c5bafefd31e9e16c4852807c05dae1e025ce7cf012218c88663205fed2e105da9cba9de57ccb658dd728f722f04d707d2d44788675e0dfa8e0cd115770a5a9ad962cc3053e1e60ed55ef3b85", 0xbe}], 0x1, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001280)="a4fa78d3a82ac2a4385237bae817eb5572f788a4bfa31467441c217ea6f1ab780028f5c7cc35a31d61c53090a210d687f46adc2250692d00ca6a5061e573db7bd67fe21a67e2a5f287998b71a0e9ab7dbd4e9069172d8d75c648821472ef483b0b6c503f28ee4c13762825bd9435934f3183f7f88afc6cb7eb0839387f9203dfed89f9d0c6d0e673f7fe40616f5322bfc0a36f55fbaa179a0db0079950dac0871a23751b6883", 0xa6}, {&(0x7f0000001340)="dbe6a6921206d33ead56c462b7e61a146a54fe02c587b8dad391285544c50b4f6de069ca656f729d8ff2017e272ce773bfdf00487688f7313429b2f2f1384f6b768ef8e73696db4af6b8e5c0d7cd01f153d34fd43cc5db78dcd52fa9dfcab199c293b4568a", 0x65}, {&(0x7f00000013c0)="08d34bbbbc9b6279608777675649ef9bed756e3f6d922efc5aef61b063de7cfaf122ec3351ff06730ebf2c93b3493c4536506604046f16e016dc6eabb5074c9305ab917561b79701941a22340732c08d2d54c8110340c0d0c5ea5db1f04379bba0f8dc5dce68c9a8ef47cd62a5cd9ea60a42f1f5cb1b2212a5237416de1f1ac6b5554755abfda46fe43797e45c5d4f0194ae4ba9d908102d32705e6d760b8ba4e98713e4b98a919a365f57e8457577", 0xaf}], 0x3, &(0x7f00000014c0)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x9, [0x61b5a1bd, 0x7, 0x0, 0xd455]}, @end, @ssrr={0x89, 0x23, 0xa2, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @remote, @multicast1]}]}}}, @ip_retopts={{0x10}}], 0x60}}], 0x4, 0x20000000) (async)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000006c0)="97a3e8da6d807a719501550c2c90521b836b5b2f0d", 0x15}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="08e3cd9ea9637196d4a95cde7bddffa2abd2b4c3e00b84083780c55fc86418d815e1bb5881ce34ed5d99b90ee7e100672b44c42cd944de1990db01b53d7ecb344c9b18f8a860cfa966f59808cc4358f50e6b8877e9116190b23d8a162c463593a00abd405d59ef1f353cb0237e9fb7a585a5b4b17102c82e74d2d985484621c9098141d396acef5a95c64c03", 0x8c}, {&(0x7f00000008c0)="9dac9bf3eb62c4f7ffdce1c6a7f6fe3bb9eb0501ad6b5c349bc5fe142dc1c42561fadade8a38aa2c7f3727d430dea58ac102112789941452da7e023764634d9131ea6db0a5496e89037e29", 0x4b}, {&(0x7f0000000940)="39056f78534d7192380a1a8e8c63373e5aaa72ca7a3b9bfc330d83733fba91defd05c632a9daa9a425b537421f17a33be171239548ce3735bb894de61ffe29b2f28cda238372ed69b816470893359406f2b1d10ffe58f2d947bffabcb8bb2038c3863721cc642f4271e8c6f4fd5b7c27d37f2041782b6b132bcb2ad974f27a081eabe892563a098221f57849ee1bebe8cd63fe513e6aa98e4902e927eee44830b5a2ce1810973f2d6eed3cd1b8ddc054fae1e384949735fcc264e8433f", 0xbd}, {&(0x7f0000000a00)="2c49aaed491f40697616a97b4a53c82529b92bd8a5c90671519d0436f9b1e696fcef200679a41dd7e4a250c86c2212b6f04887bf43de20b34d757b41ea7b7bccc816d62480ff198ef82790031d1629be3e9f3241d2dedc2a288f780aa92feb5b80f665eb1c6f83b06e783667b411633c7dc6ad6a2f60cd069c2bd16b9a7996207e2acf14fffa86a5cbd81a86f0762e40ef3d1537bcaf41a552ebaafbaf4ceadab8fea3f5c3c636ad832b95ea5779147b20b88597462189c2d80e40d8e8c9df23305f88040f16d4ce85c2a0d436526e5707c057bb4619", 0xd6}, {&(0x7f0000000b00)="2a2df90f4ee4", 0x6}, {&(0x7f0000000b40)="78e00d96ec78c3365f82e0fdcc2a311dce13dc3c71840c887d17d26d1a3e1f2f2d7e9d8d3f96cb6bcbdedc480d4d2e21571575c10851cb06c8e705617f0e5abd593595e527606070d241e61c30854da174c5bb2a16209f121723a1f16a59d8ba5209011775cca3a80b428deebd101866c272176b62de86f70372cac40c28faf88a3843804a385ec354771ed7f0af80e1f040caa6a72edcedaf5d3ce5ef08c73fc9bf92b9f5", 0xa5}, {&(0x7f0000000c00)="aad3a2fedce4b2af143dc5a544f42ece5744031b3367455eb569842d427aaf6c7a365ee78b45842bc81d305ec26abb069fd4a5e8571181e6ea2f71f0c6ae780f5060ef8c04c19554f5d0d3474b9057d3a8bfd3600560e4e2e4da2d3483d32b4e32c02ea354d601d2b57739ff703438bdf2183e01358fb0", 0x77}], 0x9, &(0x7f0000000d40)=[@ip_ttl={{0x14}}], 0x18}}, {{&(0x7f0000000d80)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="f916b4ad507f432a474350b702f14a4d71590e98a03f7470624998c0262e4ce5281cba845dfa58840ddbe4cf", 0x2c}, {&(0x7f0000000e00)="653bbb3fe7a1371337318ceb4b8398c4e959c2530b9158d5d8f430724ec692ea36e126d12f014af19bd562f94d28046ded9ea1e869e4e87d8cd02db61c7f4e9ce0514eff0c", 0x45}, {&(0x7f0000000e80)="4257d4b9944e1ecba4fa88d3943ddf343c1cbfd2745a2dda720778a0884760576a092777236649420b3bea17e58cb40f31e3f16e54e50825d4d82e511a8f3ef763da497bebd986ac83ec6569f5cb59ec17687259983501a0f49efa19a0896fd9d6bfd649e20d187e0dd5a4c778", 0x6d}, {&(0x7f0000000f00)="f35fcda84a91527c5548360086bd01ce56f1adab64445272c54d464480bc7fd7262d02ca7c923fae58ed50d2fac76b944954743c6005e6404bf3ea3a1b2f8db837a6c2cb79bdf2587d03f62f96c1ce7e640d8bf2b73d1ba16595683adc74e0cddfa3fc6ac79391e5f20ab1d7c9cd99aaa0debd1778af46a044f33b5c661528aa510ca7a4e06a588abb8e1366a394fa081c9ee851580deaa8759aa3580023137e10eb631747820c2ee30bbcfbeb", 0xad}], 0x4, &(0x7f0000001000)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xbe, [@private=0xa010101, @loopback]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x6, 0x10, "e2eb1e924eaa39d511ec14a1eee3"}, {0x6, 0x7, "1eeab56a5e"}, {0x6, 0xf, "1ae5bfb65db46969e65353639e"}, {0x6, 0x3, "a7"}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x47}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}], 0x110}}, {{&(0x7f0000001140)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001180)="fbed385683ed092c41d30bdb53dd5ef99224c056d32531cb1ccf639ec85006b866d1847042b2627027d3fe7c0cd20f4891e6ff593e0ac16b99364d92f64aa37f1d6b8cf00991fe1a47a56ed986900bd6b4115fa340922030de7e35624be024dd0abef47649e43e460e220a00a6ec437f24d3c5bafefd31e9e16c4852807c05dae1e025ce7cf012218c88663205fed2e105da9cba9de57ccb658dd728f722f04d707d2d44788675e0dfa8e0cd115770a5a9ad962cc3053e1e60ed55ef3b85", 0xbe}], 0x1, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001280)="a4fa78d3a82ac2a4385237bae817eb5572f788a4bfa31467441c217ea6f1ab780028f5c7cc35a31d61c53090a210d687f46adc2250692d00ca6a5061e573db7bd67fe21a67e2a5f287998b71a0e9ab7dbd4e9069172d8d75c648821472ef483b0b6c503f28ee4c13762825bd9435934f3183f7f88afc6cb7eb0839387f9203dfed89f9d0c6d0e673f7fe40616f5322bfc0a36f55fbaa179a0db0079950dac0871a23751b6883", 0xa6}, {&(0x7f0000001340)="dbe6a6921206d33ead56c462b7e61a146a54fe02c587b8dad391285544c50b4f6de069ca656f729d8ff2017e272ce773bfdf00487688f7313429b2f2f1384f6b768ef8e73696db4af6b8e5c0d7cd01f153d34fd43cc5db78dcd52fa9dfcab199c293b4568a", 0x65}, {&(0x7f00000013c0)="08d34bbbbc9b6279608777675649ef9bed756e3f6d922efc5aef61b063de7cfaf122ec3351ff06730ebf2c93b3493c4536506604046f16e016dc6eabb5074c9305ab917561b79701941a22340732c08d2d54c8110340c0d0c5ea5db1f04379bba0f8dc5dce68c9a8ef47cd62a5cd9ea60a42f1f5cb1b2212a5237416de1f1ac6b5554755abfda46fe43797e45c5d4f0194ae4ba9d908102d32705e6d760b8ba4e98713e4b98a919a365f57e8457577", 0xaf}], 0x3, &(0x7f00000014c0)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x9, [0x61b5a1bd, 0x7, 0x0, 0xd455]}, @end, @ssrr={0x89, 0x23, 0xa2, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @remote, @multicast1]}]}}}, @ip_retopts={{0x10}}], 0x60}}], 0x4, 0x20000000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:27 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x7fff, 0x50, 0x11}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

18:46:27 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683626e00dcff7f0000ca6b78ad833488cfe4109eaf009edd0d69613d3cd62f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7fb21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933b06759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6db9d661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b864f983d745f5865aad41d2915aae7602a0000d415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4cd5faae176a69b745eda2967199cc936859a538100000000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb7aa3804b9f2a8f2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916a39d3057d55183612b39e73aeeb6eaf14652dda68c98e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dcaab2ab8b63f476b97419a3b7660df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d906551ca85ffa4add5647489b3960127696cf2f16625c0c10200000000c7a5ca60fdad159f2e44171f3963841086e3797a4825d081f2d987f05c534187738655d7dc958fd235d6071619a6554b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb1cfa2638f56daee57ed15bc74de0fd87a9ce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76f822278d124638fec58faeb44158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1d5b7f2fd7252e9322abe2a2c33445d443a67467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b907bddd5e328661f4c06e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000000000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164e3f2491e4793e590dcc71de10da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60870fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe555318014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646aef651cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489eb66fd5db1c053d9c2c7861552381646365066ef9a36a449c96485c22ad1a8423b7b89efbc6cd54db0bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8c6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde00"/1844], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})

18:46:28 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
ftruncate(r0, 0xf2d)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2059)
r2 = dup(r0)
sendfile(r1, r2, 0x0, 0xe0000000)
utimensat(r2, 0x0, &(0x7f0000002180), 0x0)

[ 2742.664957][T32717] usb usb8: usbfs: process 32717 (syz-executor.2) did not claim interface 0 before use
18:46:28 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)={0x7eff, 0x1, [{0x1, 0x1}]})

18:46:28 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"/1844], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})

18:46:28 executing program 5:
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2}, &(0x7f0000000200)=0x14)

[ 2743.000507][T32724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2743.137942][T32733] usb usb8: usbfs: process 32733 (syz-executor.2) did not claim interface 0 before use
[ 2743.341675][T32724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:28 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0)
readv(r0, &(0x7f0000002500)=[{&(0x7f0000002180)=""/242, 0xf2}, {&(0x7f0000002280)=""/237, 0xed}, {&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000002380)=""/98, 0x62}, {&(0x7f0000002440)=""/154, 0x9a}], 0x5)
read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="00e8ff00", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:28 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x0, 0x0, 0x2, 0x1}, 0x2e)

[ 2743.902207][T32747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:29 executing program 5:
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3ff})

[ 2744.084331][T32747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2744.153016][T32747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:29 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bb8}}, [@policy_type={0xa}, @mark={0xc}]}, 0xd8}}, 0x0)

18:46:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r2, 0xe19, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "828bde21f4e278e6030b09ce14eda10fbf3a97b61b6d6298"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x88}}, 0x8804)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r5, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r6=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r9, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r10=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000006c0)="97a3e8da6d807a719501550c2c90521b836b5b2f0d", 0x15}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="08e3cd9ea9637196d4a95cde7bddffa2abd2b4c3e00b84083780c55fc86418d815e1bb5881ce34ed5d99b90ee7e100672b44c42cd944de1990db01b53d7ecb344c9b18f8a860cfa966f59808cc4358f50e6b8877e9116190b23d8a162c463593a00abd405d59ef1f353cb0237e9fb7a585a5b4b17102c82e74d2d985484621c9098141d396acef5a95c64c03", 0x8c}, {&(0x7f00000008c0)="9dac9bf3eb62c4f7ffdce1c6a7f6fe3bb9eb0501ad6b5c349bc5fe142dc1c42561fadade8a38aa2c7f3727d430dea58ac102112789941452da7e023764634d9131ea6db0a5496e89037e29", 0x4b}, {&(0x7f0000000940)="39056f78534d7192380a1a8e8c63373e5aaa72ca7a3b9bfc330d83733fba91defd05c632a9daa9a425b537421f17a33be171239548ce3735bb894de61ffe29b2f28cda238372ed69b816470893359406f2b1d10ffe58f2d947bffabcb8bb2038c3863721cc642f4271e8c6f4fd5b7c27d37f2041782b6b132bcb2ad974f27a081eabe892563a098221f57849ee1bebe8cd63fe513e6aa98e4902e927eee44830b5a2ce1810973f2d6eed3cd1b8ddc054fae1e384949735fcc264e8433f", 0xbd}, {&(0x7f0000000a00)="2c49aaed491f40697616a97b4a53c82529b92bd8a5c90671519d0436f9b1e696fcef200679a41dd7e4a250c86c2212b6f04887bf43de20b34d757b41ea7b7bccc816d62480ff198ef82790031d1629be3e9f3241d2dedc2a288f780aa92feb5b80f665eb1c6f83b06e783667b411633c7dc6ad6a2f60cd069c2bd16b9a7996207e2acf14fffa86a5cbd81a86f0762e40ef3d1537bcaf41a552ebaafbaf4ceadab8fea3f5c3c636ad832b95ea5779147b20b88597462189c2d80e40d8e8c9df23305f88040f16d4ce85c2a0d436526e5707c057bb4619", 0xd6}, {&(0x7f0000000b00)="2a2df90f4ee4", 0x6}, {&(0x7f0000000b40)="78e00d96ec78c3365f82e0fdcc2a311dce13dc3c71840c887d17d26d1a3e1f2f2d7e9d8d3f96cb6bcbdedc480d4d2e21571575c10851cb06c8e705617f0e5abd593595e527606070d241e61c30854da174c5bb2a16209f121723a1f16a59d8ba5209011775cca3a80b428deebd101866c272176b62de86f70372cac40c28faf88a3843804a385ec354771ed7f0af80e1f040caa6a72edcedaf5d3ce5ef08c73fc9bf92b9f5", 0xa5}, {&(0x7f0000000c00)="aad3a2fedce4b2af143dc5a544f42ece5744031b3367455eb569842d427aaf6c7a365ee78b45842bc81d305ec26abb069fd4a5e8571181e6ea2f71f0c6ae780f5060ef8c04c19554f5d0d3474b9057d3a8bfd3600560e4e2e4da2d3483d32b4e32c02ea354d601d2b57739ff703438bdf2183e01358fb0", 0x77}], 0x9, &(0x7f0000000d40)=[@ip_ttl={{0x14}}], 0x18}}, {{&(0x7f0000000d80)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="f916b4ad507f432a474350b702f14a4d71590e98a03f7470624998c0262e4ce5281cba845dfa58840ddbe4cf", 0x2c}, {&(0x7f0000000e00)="653bbb3fe7a1371337318ceb4b8398c4e959c2530b9158d5d8f430724ec692ea36e126d12f014af19bd562f94d28046ded9ea1e869e4e87d8cd02db61c7f4e9ce0514eff0c", 0x45}, {&(0x7f0000000e80)="4257d4b9944e1ecba4fa88d3943ddf343c1cbfd2745a2dda720778a0884760576a092777236649420b3bea17e58cb40f31e3f16e54e50825d4d82e511a8f3ef763da497bebd986ac83ec6569f5cb59ec17687259983501a0f49efa19a0896fd9d6bfd649e20d187e0dd5a4c778", 0x6d}, {&(0x7f0000000f00)="f35fcda84a91527c5548360086bd01ce56f1adab64445272c54d464480bc7fd7262d02ca7c923fae58ed50d2fac76b944954743c6005e6404bf3ea3a1b2f8db837a6c2cb79bdf2587d03f62f96c1ce7e640d8bf2b73d1ba16595683adc74e0cddfa3fc6ac79391e5f20ab1d7c9cd99aaa0debd1778af46a044f33b5c661528aa510ca7a4e06a588abb8e1366a394fa081c9ee851580deaa8759aa3580023137e10eb631747820c2ee30bbcfbeb", 0xad}], 0x4, &(0x7f0000001000)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xbe, [@private=0xa010101, @loopback]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x6, 0x10, "e2eb1e924eaa39d511ec14a1eee3"}, {0x6, 0x7, "1eeab56a5e"}, {0x6, 0xf, "1ae5bfb65db46969e65353639e"}, {0x6, 0x3, "a7"}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x47}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11}}], 0x110}}, {{&(0x7f0000001140)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001180)="fbed385683ed092c41d30bdb53dd5ef99224c056d32531cb1ccf639ec85006b866d1847042b2627027d3fe7c0cd20f4891e6ff593e0ac16b99364d92f64aa37f1d6b8cf00991fe1a47a56ed986900bd6b4115fa340922030de7e35624be024dd0abef47649e43e460e220a00a6ec437f24d3c5bafefd31e9e16c4852807c05dae1e025ce7cf012218c88663205fed2e105da9cba9de57ccb658dd728f722f04d707d2d44788675e0dfa8e0cd115770a5a9ad962cc3053e1e60ed55ef3b85", 0xbe}], 0x1, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001280)="a4fa78d3a82ac2a4385237bae817eb5572f788a4bfa31467441c217ea6f1ab780028f5c7cc35a31d61c53090a210d687f46adc2250692d00ca6a5061e573db7bd67fe21a67e2a5f287998b71a0e9ab7dbd4e9069172d8d75c648821472ef483b0b6c503f28ee4c13762825bd9435934f3183f7f88afc6cb7eb0839387f9203dfed89f9d0c6d0e673f7fe40616f5322bfc0a36f55fbaa179a0db0079950dac0871a23751b6883", 0xa6}, {&(0x7f0000001340)="dbe6a6921206d33ead56c462b7e61a146a54fe02c587b8dad391285544c50b4f6de069ca656f729d8ff2017e272ce773bfdf00487688f7313429b2f2f1384f6b768ef8e73696db4af6b8e5c0d7cd01f153d34fd43cc5db78dcd52fa9dfcab199c293b4568a", 0x65}, {&(0x7f00000013c0)="08d34bbbbc9b6279608777675649ef9bed756e3f6d922efc5aef61b063de7cfaf122ec3351ff06730ebf2c93b3493c4536506604046f16e016dc6eabb5074c9305ab917561b79701941a22340732c08d2d54c8110340c0d0c5ea5db1f04379bba0f8dc5dce68c9a8ef47cd62a5cd9ea60a42f1f5cb1b2212a5237416de1f1ac6b5554755abfda46fe43797e45c5d4f0194ae4ba9d908102d32705e6d760b8ba4e98713e4b98a919a365f57e8457577", 0xaf}], 0x3, &(0x7f00000014c0)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x14, 0x8b, 0x0, 0x9, [0x61b5a1bd, 0x7, 0x0, 0xd455]}, @end, @ssrr={0x89, 0x23, 0xa2, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @remote, @multicast1]}]}}}, @ip_retopts={{0x10}}], 0x60}}], 0x4, 0x20000000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2744.486966][T32757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:29 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0)
readv(r0, &(0x7f0000002500)=[{&(0x7f0000002180)=""/242, 0xf2}, {&(0x7f0000002280)=""/237, 0xed}, {&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000002380)=""/98, 0x62}, {&(0x7f0000002440)=""/154, 0x9a}], 0x5) (async)
read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="00e8ff00", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2744.567181][T32760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2744.637848][T32760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:30 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0)
readv(r0, &(0x7f0000002500)=[{&(0x7f0000002180)=""/242, 0xf2}, {&(0x7f0000002280)=""/237, 0xed}, {&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000002380)=""/98, 0x62}, {&(0x7f0000002440)=""/154, 0x9a}], 0x5)
read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="00e8ff00", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) (async)
readv(r0, &(0x7f0000002500)=[{&(0x7f0000002180)=""/242, 0xf2}, {&(0x7f0000002280)=""/237, 0xed}, {&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000002380)=""/98, 0x62}, {&(0x7f0000002440)=""/154, 0x9a}], 0x5) (async)
read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="00e8ff00", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)

[ 2744.731075][T32762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2744.827045][  T300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2744.943387][  T300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000088211000001080211007c5302f2899f1a4e4c62eb151e54000008021100000000000000000000000000640001000006020202020202010882848b960c021824db811268cf0d2dc004caa72bf0c00a8e4d702f1010971e87c9cb3ae358bdd18c5ecdf5715f01ae54b6e507877cc72f57b3214c95e9e7ed8db7cf697ae83a0f5cdff6a65746da460867e4e6c056502e943b7de453fec59465"], 0x36)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r3, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005b80)={'gre0\x00', &(0x7f0000005b00)={'syztnl2\x00', <r6=>0x0, 0x8, 0x7, 0xfffffffd, 0x6, {{0xa, 0x4, 0x2, 0x3a, 0x28, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x69, [@private=0xa010102, @broadcast, @loopback, @private=0xa010101]}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r9=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x581, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, 0x442}}, 0x20}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000005d40)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x124, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "339c21c5bf4e0d0321eb627c00b756b70bf8a7faef5d7c0c450841776330adf2712acadd8c8aa3269a5d81"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x5}, 0x10)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r11 = socket$bt_bnep(0x1f, 0x3, 0x4)
recvmmsg(r11, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/104, 0x68}], 0x1, &(0x7f0000000700)=""/176, 0xb0}, 0x4e}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/88, 0x58}, {&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/251, 0xfb}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/102, 0x66}, {&(0x7f0000001c80)=""/49, 0x31}], 0x8, &(0x7f0000001d40)=""/232, 0xe8}, 0x7}, {{&(0x7f0000001e40)=@nfc_llcp, 0x80, &(0x7f0000003240)=[{&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/74, 0x4a}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/193, 0xc1}, {&(0x7f0000003200)=""/10, 0xa}], 0x6, &(0x7f00000032c0)=""/127, 0x7f}, 0x3}, {{&(0x7f0000003340)=@generic, 0x80, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/194, 0xc2}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/122, 0x7a}, {&(0x7f00000035c0)=""/55, 0x37}, {&(0x7f0000003600)=""/67, 0x43}], 0x5, &(0x7f0000003700)=""/50, 0x32}, 0x7}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/15, 0xf}], 0x1}, 0x2}, {{&(0x7f00000037c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/246, 0xfe32}, {&(0x7f0000003940)=""/7, 0x7}, {&(0x7f0000003980)=""/100, 0x64}], 0x3, &(0x7f0000003a40)=""/19, 0x13}, 0x200}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003a80)=""/153, 0x99}, {&(0x7f0000003b40)=""/68, 0x44}, {&(0x7f0000003bc0)=""/231, 0xe7}, {&(0x7f0000003cc0)=""/200, 0xc8}, {&(0x7f0000003dc0)=""/95, 0x5f}, {&(0x7f0000003e40)=""/210, 0xd2}, {&(0x7f0000003f40)=""/222, 0xde}], 0x7, &(0x7f00000040c0)=""/66, 0x42}, 0x42fc}, {{&(0x7f0000004140)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000055c0)=[{&(0x7f00000041c0)=""/87, 0x57}, {&(0x7f0000004240)=""/71, 0x47}, {&(0x7f00000042c0)=""/254, 0xfe}, {&(0x7f00000043c0)=""/75, 0x4b}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/74, 0x4a}, {&(0x7f00000054c0)=""/233, 0xe9}], 0x7, &(0x7f0000005640)=""/179, 0xb3}, 0x9}], 0x8, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000005900)=@broadcast, &(0x7f0000005940)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @random="6b091a055658", {0x3, 0xbd4}}, @ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x102, 0xb3b8, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12}, {0x4, 0x1}]}, @void, [{0xdd, 0xbf, "2b9c94b0116a72a9cefa26da69bb143fca14dc67fa839e2d91445cb14a2d89b071a7f28aee4ad2f2f117395260d2fd2959a4b60c30afc40ad238292d6ef20492320047be45f110cd4ef7d6418179d4e67b682d9a865589720e50a2a6de2fae98159950e04c1c6dc3613b91a605062b12f387ba3237c01f6563fca26d6344e24d6804dfb55ba23e217f43cb26ad17eef09b2713bdc8222daea4d69a91377293bc22e5b598e8e680fc675f426d7ff62eff696d25aef352b9b96f19547944747d"}]}, 0xf3)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
futex(&(0x7f0000000000)=0x2, 0x100, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000300), 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000600)={0x6, 'wg1\x00', {0x7}, 0x8})

[ 2745.195825][  T305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2745.256218][T12290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2745.310053][  T306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2745.395960][  T305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2745.421126][T12290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2745.453825][  T306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2745.547223][T12290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2745.664565][T12290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:46:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000088211000001080211007c5302f2899f1a4e4c62eb151e54000008021100000000000000000000000000640001000006020202020202010882848b960c021824db811268cf0d2dc004caa72bf0c00a8e4d702f1010971e87c9cb3ae358bdd18c5ecdf5715f01ae54b6e507877cc72f57b3214c95e9e7ed8db7cf697ae83a0f5cdff6a65746da460867e4e6c056502e943b7de453fec59465"], 0x36)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r3, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005b80)={'gre0\x00', &(0x7f0000005b00)={'syztnl2\x00', <r6=>0x0, 0x8, 0x7, 0xfffffffd, 0x6, {{0xa, 0x4, 0x2, 0x3a, 0x28, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x69, [@private=0xa010102, @broadcast, @loopback, @private=0xa010101]}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r9=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x581, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, 0x442}}, 0x20}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000005d40)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x124, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "339c21c5bf4e0d0321eb627c00b756b70bf8a7faef5d7c0c450841776330adf2712acadd8c8aa3269a5d81"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x5}, 0x10)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r11 = socket$bt_bnep(0x1f, 0x3, 0x4)
recvmmsg(r11, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/104, 0x68}], 0x1, &(0x7f0000000700)=""/176, 0xb0}, 0x4e}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/88, 0x58}, {&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/251, 0xfb}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/102, 0x66}, {&(0x7f0000001c80)=""/49, 0x31}], 0x8, &(0x7f0000001d40)=""/232, 0xe8}, 0x7}, {{&(0x7f0000001e40)=@nfc_llcp, 0x80, &(0x7f0000003240)=[{&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/74, 0x4a}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/193, 0xc1}, {&(0x7f0000003200)=""/10, 0xa}], 0x6, &(0x7f00000032c0)=""/127, 0x7f}, 0x3}, {{&(0x7f0000003340)=@generic, 0x80, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/194, 0xc2}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/122, 0x7a}, {&(0x7f00000035c0)=""/55, 0x37}, {&(0x7f0000003600)=""/67, 0x43}], 0x5, &(0x7f0000003700)=""/50, 0x32}, 0x7}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/15, 0xf}], 0x1}, 0x2}, {{&(0x7f00000037c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/246, 0xfe32}, {&(0x7f0000003940)=""/7, 0x7}, {&(0x7f0000003980)=""/100, 0x64}], 0x3, &(0x7f0000003a40)=""/19, 0x13}, 0x200}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003a80)=""/153, 0x99}, {&(0x7f0000003b40)=""/68, 0x44}, {&(0x7f0000003bc0)=""/231, 0xe7}, {&(0x7f0000003cc0)=""/200, 0xc8}, {&(0x7f0000003dc0)=""/95, 0x5f}, {&(0x7f0000003e40)=""/210, 0xd2}, {&(0x7f0000003f40)=""/222, 0xde}], 0x7, &(0x7f00000040c0)=""/66, 0x42}, 0x42fc}, {{&(0x7f0000004140)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000055c0)=[{&(0x7f00000041c0)=""/87, 0x57}, {&(0x7f0000004240)=""/71, 0x47}, {&(0x7f00000042c0)=""/254, 0xfe}, {&(0x7f00000043c0)=""/75, 0x4b}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/74, 0x4a}, {&(0x7f00000054c0)=""/233, 0xe9}], 0x7, &(0x7f0000005640)=""/179, 0xb3}, 0x9}], 0x8, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000005900)=@broadcast, &(0x7f0000005940)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @random="6b091a055658", {0x3, 0xbd4}}, @ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x102, 0xb3b8, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12}, {0x4, 0x1}]}, @void, [{0xdd, 0xbf, "2b9c94b0116a72a9cefa26da69bb143fca14dc67fa839e2d91445cb14a2d89b071a7f28aee4ad2f2f117395260d2fd2959a4b60c30afc40ad238292d6ef20492320047be45f110cd4ef7d6418179d4e67b682d9a865589720e50a2a6de2fae98159950e04c1c6dc3613b91a605062b12f387ba3237c01f6563fca26d6344e24d6804dfb55ba23e217f43cb26ad17eef09b2713bdc8222daea4d69a91377293bc22e5b598e8e680fc675f426d7ff62eff696d25aef352b9b96f19547944747d"}]}, 0xf3)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
futex(&(0x7f0000000000)=0x2, 0x100, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000300), 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000600)={0x6, 'wg1\x00', {0x7}, 0x8})

[ 2746.122427][  T320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2746.324387][  T321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2746.475267][  T320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2746.574539][  T320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000088211000001080211007c5302f2899f1a4e4c62eb151e54000008021100000000000000000000000000640001000006020202020202010882848b960c021824db811268cf0d2dc004caa72bf0c00a8e4d702f1010971e87c9cb3ae358bdd18c5ecdf5715f01ae54b6e507877cc72f57b3214c95e9e7ed8db7cf697ae83a0f5cdff6a65746da460867e4e6c056502e943b7de453fec59465"], 0x36)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r3, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005b80)={'gre0\x00', &(0x7f0000005b00)={'syztnl2\x00', <r6=>0x0, 0x8, 0x7, 0xfffffffd, 0x6, {{0xa, 0x4, 0x2, 0x3a, 0x28, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x69, [@private=0xa010102, @broadcast, @loopback, @private=0xa010101]}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r9=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x581, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, 0x442}}, 0x20}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000005d40)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x124, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "339c21c5bf4e0d0321eb627c00b756b70bf8a7faef5d7c0c450841776330adf2712acadd8c8aa3269a5d81"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x5}, 0x10)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r11 = socket$bt_bnep(0x1f, 0x3, 0x4)
recvmmsg(r11, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/104, 0x68}], 0x1, &(0x7f0000000700)=""/176, 0xb0}, 0x4e}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/88, 0x58}, {&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/251, 0xfb}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/102, 0x66}, {&(0x7f0000001c80)=""/49, 0x31}], 0x8, &(0x7f0000001d40)=""/232, 0xe8}, 0x7}, {{&(0x7f0000001e40)=@nfc_llcp, 0x80, &(0x7f0000003240)=[{&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/74, 0x4a}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/193, 0xc1}, {&(0x7f0000003200)=""/10, 0xa}], 0x6, &(0x7f00000032c0)=""/127, 0x7f}, 0x3}, {{&(0x7f0000003340)=@generic, 0x80, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/194, 0xc2}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/122, 0x7a}, {&(0x7f00000035c0)=""/55, 0x37}, {&(0x7f0000003600)=""/67, 0x43}], 0x5, &(0x7f0000003700)=""/50, 0x32}, 0x7}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/15, 0xf}], 0x1}, 0x2}, {{&(0x7f00000037c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/246, 0xfe32}, {&(0x7f0000003940)=""/7, 0x7}, {&(0x7f0000003980)=""/100, 0x64}], 0x3, &(0x7f0000003a40)=""/19, 0x13}, 0x200}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003a80)=""/153, 0x99}, {&(0x7f0000003b40)=""/68, 0x44}, {&(0x7f0000003bc0)=""/231, 0xe7}, {&(0x7f0000003cc0)=""/200, 0xc8}, {&(0x7f0000003dc0)=""/95, 0x5f}, {&(0x7f0000003e40)=""/210, 0xd2}, {&(0x7f0000003f40)=""/222, 0xde}], 0x7, &(0x7f00000040c0)=""/66, 0x42}, 0x42fc}, {{&(0x7f0000004140)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000055c0)=[{&(0x7f00000041c0)=""/87, 0x57}, {&(0x7f0000004240)=""/71, 0x47}, {&(0x7f00000042c0)=""/254, 0xfe}, {&(0x7f00000043c0)=""/75, 0x4b}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/74, 0x4a}, {&(0x7f00000054c0)=""/233, 0xe9}], 0x7, &(0x7f0000005640)=""/179, 0xb3}, 0x9}], 0x8, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000005900)=@broadcast, &(0x7f0000005940)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @broadcast, @random="6b091a055658", {0x3, 0xbd4}}, @ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x102, 0xb3b8, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12}, {0x4, 0x1}]}, @void, [{0xdd, 0xbf, "2b9c94b0116a72a9cefa26da69bb143fca14dc67fa839e2d91445cb14a2d89b071a7f28aee4ad2f2f117395260d2fd2959a4b60c30afc40ad238292d6ef20492320047be45f110cd4ef7d6418179d4e67b682d9a865589720e50a2a6de2fae98159950e04c1c6dc3613b91a605062b12f387ba3237c01f6563fca26d6344e24d6804dfb55ba23e217f43cb26ad17eef09b2713bdc8222daea4d69a91377293bc22e5b598e8e680fc675f426d7ff62eff696d25aef352b9b96f19547944747d"}]}, 0xf3)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
futex(&(0x7f0000000000)=0x2, 0x100, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000300), 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000600)={0x6, 'wg1\x00', {0x7}, 0x8})

[ 2747.244204][T12290] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 2747.262787][  T329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2747.495767][  T330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2747.568101][  T329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2747.639916][  T329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2747.731512][T12290] hsr_slave_0: left promiscuous mode
[ 2747.758354][T12290] hsr_slave_1: left promiscuous mode
[ 2747.777074][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2747.785006][T12290] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2747.798369][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2747.806089][T12290] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2747.819102][T12290] bridge_slave_1: left allmulticast mode
[ 2747.824950][T12290] bridge_slave_1: left promiscuous mode
[ 2747.831677][T12290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2747.858963][T12290] bridge_slave_0: left allmulticast mode
[ 2747.864820][T12290] bridge_slave_0: left promiscuous mode
[ 2747.871679][T12290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2747.958002][T12290] veth1_macvtap: left promiscuous mode
[ 2747.964010][T12290] veth0_macvtap: left promiscuous mode
[ 2747.970346][T12290] veth1_vlan: left promiscuous mode
[ 2747.975875][T12290] veth0_vlan: left promiscuous mode
[ 2749.624839][T17952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2749.636430][T17952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2749.648948][T17952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2749.663056][T17952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2749.673628][T17952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2749.683368][T17952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2749.767950][T12290] team0 (unregistering): Port device team_slave_1 removed
[ 2749.831732][T12290] team0 (unregistering): Port device team_slave_0 removed
[ 2749.869054][T12290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2749.921155][T12290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2750.264793][T12290] bond0 (unregistering): Released all slaves
18:46:35 executing program 5:
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
dup2(r4, r3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400))
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="b000f42ed80000080400000000000000160201cc00"/37], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2750.753909][  T387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2750.876406][  T395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2750.996278][  T395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2751.456002][  T354] chnl_net:caif_netlink_parms(): no params data found
18:46:36 executing program 5:
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
dup2(r4, r3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400))
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="b000f42ed80000080400000000000000160201cc00"/37], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2751.768446][T17952] Bluetooth: hci3: command 0x0409 tx timeout
[ 2751.784283][  T489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2751.899835][  T491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2751.972757][  T491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:37 executing program 5:
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
dup2(r4, r3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400))
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="b000f42ed80000080400000000000000160201cc00"/37], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2752.563139][  T499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2752.657579][  T500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2752.773394][  T500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2752.957264][  T354] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2752.967461][  T354] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2752.976296][  T354] bridge_slave_0: entered allmulticast mode
[ 2752.985551][  T354] bridge_slave_0: entered promiscuous mode
[ 2753.051373][  T354] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2753.061528][  T354] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2753.069554][  T354] bridge_slave_1: entered allmulticast mode
[ 2753.078892][  T354] bridge_slave_1: entered promiscuous mode
18:46:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)

[ 2753.397569][  T354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2753.484045][  T553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.545878][  T354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2753.578036][  T553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.709740][  T553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.827145][  T354] team0: Port device team_slave_0 added
[ 2753.850407][T17952] Bluetooth: hci3: command 0x041b tx timeout
[ 2753.877366][  T354] team0: Port device team_slave_1 added
[ 2754.101266][  T354] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2754.108605][  T354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2754.135012][  T354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
18:46:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)

[ 2754.160033][  T354] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2754.167186][  T354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2754.193822][  T354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2754.378805][  T354] hsr_slave_0: entered promiscuous mode
[ 2754.424816][  T354] hsr_slave_1: entered promiscuous mode
[ 2754.435234][  T354] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2754.443210][  T354] Cannot create hsr debugfs directory
[ 2754.670798][  T637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2754.757148][  T637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2754.844447][  T657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)

[ 2755.616558][  T716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2755.790121][  T720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2755.911589][  T716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2755.929750][T17952] Bluetooth: hci3: command 0x040f tx timeout
[ 2756.290171][  T354] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2756.332531][  T354] netdevsim netdevsim3 netdevsim1: renamed from eth1
18:46:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000008c0)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@device_b, {0x7, 0x1}}, {0x1, 0x0, 0x3, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7f0}, @random="825928f44a81", @broadcast, @initial, {0xe, 0x80}}, {0x3, 0x0, 0x2, 0x1, 0x7}}}, @random="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"}, 0x3b8)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2756.374801][  T354] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2756.407827][  T354] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2756.525354][  T754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2756.597578][  T755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2756.734227][  T754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001b2c56e6ed5600e2fbe565cf8a3fda944000006"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200202c0}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x4c, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x84)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2757.118112][  T354] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2757.242977][  T354] 8021q: adding VLAN 0 to HW filter on device team0
[ 2757.305826][  T762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2757.306398][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2757.323519][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2757.420474][  T762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2757.448969][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2757.456611][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2757.506302][  T763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2757.857613][  T354] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2758.012924][T28216] Bluetooth: hci3: command 0x0419 tx timeout
[ 2758.161953][  T354] veth0_vlan: entered promiscuous mode
[ 2758.228054][  T354] veth1_vlan: entered promiscuous mode
[ 2758.419907][  T354] veth0_macvtap: entered promiscuous mode
[ 2758.462529][  T354] veth1_macvtap: entered promiscuous mode
[ 2758.576918][  T354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2758.587894][  T354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2758.598793][  T354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2758.612124][  T354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2758.622235][  T354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2758.632951][  T354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2758.651211][  T354] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2758.716292][  T354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2758.727258][  T354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2758.740527][  T354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2758.751261][  T354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2758.761336][  T354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2758.774510][  T354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2758.788634][  T354] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2758.843979][  T354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2758.853142][  T354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2758.866825][  T354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2758.875970][  T354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2759.084919][T26077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2759.093080][T26077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2759.211446][T26077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2759.219596][T26077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2759.475131][  T781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2759.580027][  T783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2759.674590][  T785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000052db21a100000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001b2c56e6ed5600e2fbe565cf8a3fda944000006"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200202c0}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x4c, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x84)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:45 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000058c0), 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2282, &(0x7f0000000000))
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0xb89})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)={0x22, 0x2, 0x8670, "37b9b15fa2196b1e0943f688d0d400ea264a4a53b141574fa4c35582a4418ff6add1"})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x64, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffb1b, 0x54}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x2c, 0x1, "960976ba757963d7934078cce1748a102524387f6ef7a2240b88273fc042d5939354b88d747b7c09"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000008b960c12182400000000000000000000000000000000e5127df06997b855964c9cf28a40cd678b8a25f19452cd4ba58854fe1ec2bd8d05324429fc0be5"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:45 executing program 1:
r0 = syz_open_dev$sg(&(0x7f00000058c0), 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2282, &(0x7f0000000000))
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0xb89})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)={0x22, 0x2, 0x8670, "37b9b15fa2196b1e0943f688d0d400ea264a4a53b141574fa4c35582a4418ff6add1"})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x64, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffb1b, 0x54}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x2c, 0x1, "960976ba757963d7934078cce1748a102524387f6ef7a2240b88273fc042d5939354b88d747b7c09"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = dup2(r4, r3)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x828, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x34c, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffff4cf}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x2, 0x3, 0x6, 0x2, 0xf442, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x401, 0x8cb, 0x1, 0x0, 0x7, 0xa4a4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x1, 0x6c, 0x24, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x9, 0x9, 0x101, 0x7, 0x5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x3, 0x9, 0x18, 0x30, 0xb, 0xb, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x40, 0x4, 0x1, 0x7, 0x8, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x5}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0x1c}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x4}, {0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x1}, {0x1}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x9, 0x60, 0x12, 0x60, 0x3, 0x6, 0x55, 0x1a, 0x18, 0x36, 0xc, 0x48, 0xb, 0xc9adccf375dc77ca, 0x39, 0x4, 0x2, 0x16, 0x2, 0x48, 0x1, 0x6, 0xc, 0xc, 0x3, 0x1, 0x4, 0x24, 0x4, 0x5, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x867, 0x9bce, 0x6, 0x0, 0x4, 0x56, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf35f, 0x933, 0x57f, 0xfff, 0x0, 0x2, 0x6, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x1, 0x80, 0x48c, 0x0, 0xcb, 0x8b2]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x16, 0x18, 0x9, 0x0, 0x6, 0x1b, 0x5, 0x5, 0x18, 0x48, 0x9, 0x9, 0xc, 0x16, 0x1b, 0xc, 0x2, 0x16, 0xb, 0x12, 0x1b, 0x6, 0x12, 0x60, 0x12, 0x36, 0x1, 0x10, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb45c, 0x2, 0x4, 0x5, 0x4, 0x9, 0x2, 0x69fa]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x36, 0x39, 0x16, 0x18, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb53, 0x1, 0x8, 0x7, 0x6, 0x2, 0x2]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x334, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x240, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x36f, 0x3f, 0xfffe, 0x400, 0x2, 0x1, 0xffff]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfc00, 0x81, 0x2, 0x40, 0x5, 0x4, 0x1000, 0x49]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6014763a612ae39a, 0x16, 0x60]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x6}, {0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x2}, {0x3, 0x8}, {0x7, 0x6}, {0x1, 0x6}, {0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x6}, {0x5, 0x5}, {0x4, 0x9}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x3}, {0x6, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x9}, {0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x6}, {0x2, 0x8}, {0x5}, {0x0, 0x4}, {}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x3}, {0x5, 0x6}, {0x5, 0x9}, {0x7, 0x4}, {0x2, 0x9}, {0x4, 0x6}, {0x6, 0x5}, {}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x0, 0x5, 0xd3, 0x7, 0x67, 0x7]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x7}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x4}, {0x6}, {0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x4}, {0x4}, {0x4, 0x8}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x6c, 0x13, 0x6, 0x1b, 0x6c, 0x6c, 0x6c, 0x2, 0x24, 0x1, 0x48, 0x60, 0x5, 0x1b, 0x12, 0x6, 0x18, 0x17, 0x1b, 0x18, 0x3, 0x0, 0x48, 0x12, 0x24, 0x48, 0x6c, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1faf, 0x8, 0x9, 0x401, 0x9, 0x9, 0x7]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x74, 0x8000, 0xa79a, 0x1000, 0x9, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5255, 0x1000, 0x5b, 0xfffe, 0x100, 0x3, 0x8521, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x24, 0xb, 0xb, 0x24, 0x4, 0x6, 0x3, 0x6, 0x30, 0x9, 0x2, 0x9, 0x36, 0x48, 0x3, 0x4, 0x60, 0x1b, 0x1b, 0x9, 0x12, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {0x2, 0x6}, {0x5}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x5}, {}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x5}, {0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x7}, {0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x9}, {0x5}, {0x1, 0x4}, {0x0, 0x9}, {}, {0x5, 0x6}, {0x1}, {0x3, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc6, 0x4, 0x6, 0x5, 0x55, 0x6, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe67}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a96}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x26e5}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff000000000000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x828}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000013c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000000e80)={0x4c8, r6, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9f}, @NL80211_ATTR_CSA_IES={0x47c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x3a0, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6532}, @device_b, @device_b, @from_mac=@broadcast, {0x2, 0xfe0}}, 0x80000001, @random=0x5, 0xc0, @void, @val, @void, @void, @void, @val={0x5, 0x92, {0x8, 0x76, 0x67, "6a20101c4c41ead7ea8d2922e70da6a24eed103e289a56c0f0733659b02600ad5bf3ae49a3ba175f8abec07040baef0f6abe39aaa29a2e8a65d153b3bec3c68c77c5d579f2aadba903cbb72a4221ecf118199153df9394bf183b1f1f127989a403cb7db76403721f6ce7fbb8d42c7a00439e0e6e1e767b430aab5aa4ca8e76b0c36433cf24dba5f9ba864f4175f49a"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x4, 0xaf, 0xf9}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x3, 0x10, 0x80}}, [{0xdd, 0x4e, "7e2ed136b5b5906eaed0c9576f0bca7b4a3807bd93cbec9ee4f1f5cf51cfb7602b3e36de4d1e44df27054ec9d5eb5ceb0b1211285d93aeb531a6036262c048b049757e8ad538a68e8b196e83eec6"}, {0xdd, 0xed, "b4b57b443798a8fb1276f43da97cd5c13ac2fa9ef9f9070ea6120601f05b8cd75d58eb86c88e29b2643ca9252c44bcd3ef63cfe74b9b2c26c177edca15a5d99bec9d8e4e987a02243541e90fce6db245499edf7dd7e63885fa787ec9cd6db33a05d763c870dd4b52dde57f3b7350330dad7c0aa132f134a20de6bd520612ef82b772a7f579f849e2415cbcf5f453133e168211450832855b806b30b0f1f87a8425f5f0df78d536c1d3049f04518122a3aa937817c2debc357d8071baa58d134f99bc89cd2fb7570e3ba529d397bd0ed856b02c1aefd078adf24ed0536e0525852c927ae3c4b725b1202664f977"}, {0xdd, 0x90, "06588821ec193e871028285934a054a61ef63c8da1502ee4bf0fe4f6785e043e95e7f4ddb42f781ee9288bf1a63654df0b518eb76420afa893f309e378cf9424c5d31a6ff1e99f46ffa6268010ba6ddebbfc0a723638ac6b4e5cceadba89db324b139e3ca98b284bc8ef5848998c2e2385048eeee8961fe32794a7082e9fc067f9c89ef03f35b2c44588c1293e3e085e"}, {0xdd, 0x7b, "fbb94b828782a07a7d6b41310f9430fc4cf84476004644cedc62dc4fcc1242fd1189a640f47af6e773bb9c531f4eb36ba1a2dc0806e6afaa98bfd8d064199f2ef0533191d9e093122ec2fbc0897ade1f61782a193b78f4916768312e3145897be7484d2b3e160d0fbc54f5efd82a446a6116cad52741457af39835"}, {0xdd, 0x62, "b904f2711fa3bdd236563a32bc1e837855acf11e10fefead167fefc0f3a93d45527ac0c952146914b9795aa807619216e99eacfb4347b5f65dc9f44064daa736ed30ae1da71a454a6208e6c9c103e35d45d24219c4c4c6d9d14b948181768fe8c657"}, {0xdd, 0x15, "863bc2bc2d02c56f4e68e680a287e8efa4c6f52e96"}]}}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x4, 0x1}}]}, @NL80211_ATTR_IE={0xc9, 0x2a, [@chsw_timing={0x68, 0x4, {0xd40}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x3ff, @void, @val="db7fee2fe6ec65ea1de9f2e57ee12341"}}, @tim={0x5, 0xa5, {0xe8, 0x2e, 0x0, "86bb7c7044b457cf831acea9abaa46bd00b4cf7a15cd1b23e2374d8ba92ce149cb75bbd98af133d1c6d02e54203e43f0fcc7450bb83f0122dba9761e3aa4d7ea16adcecbffee726c6a9042ff06b7e50ce860ce8c8e2590cd626420f567dc5a5641d0b710e0ffbf0f1cc75c2e2b6e72bb3d871d6721d99ad2749247a884d6bec8c3f385bf0b77dda40b054d7070634daed3381a4e5ab9753707a7989738bafe110f67"}}]}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24000814}, 0x79720f5c71d0c3b2)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2760.065776][  T792] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2760.077929][  T798] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2760.113790][  T795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.147525][  T800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.182983][  T798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.188236][  T797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.264603][  T796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.306935][  T804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.329618][  T798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.372967][  T797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.396638][  T795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.425737][  T798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.437744][  T802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.441979][  T800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.493033][  T792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.507874][  T797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.525220][  T795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2760.623128][  T792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000008b960c12182400000000000000000000000000000000e5127df06997b855964c9cf28a40cd678b8a25f19452cd4ba58854fe1ec2bd8d05324429fc0be5"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:46 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000058c0), 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2282, &(0x7f0000000000))
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0xb89})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)={0x22, 0x2, 0x8670, "37b9b15fa2196b1e0943f688d0d400ea264a4a53b141574fa4c35582a4418ff6add1"})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x64, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffb1b, 0x54}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x2c, 0x1, "960976ba757963d7934078cce1748a102524387f6ef7a2240b88273fc042d5939354b88d747b7c09"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = dup2(r4, r3)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x828, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x34c, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffff4cf}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x2, 0x3, 0x6, 0x2, 0xf442, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x401, 0x8cb, 0x1, 0x0, 0x7, 0xa4a4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x1, 0x6c, 0x24, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x9, 0x9, 0x101, 0x7, 0x5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x3, 0x9, 0x18, 0x30, 0xb, 0xb, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x40, 0x4, 0x1, 0x7, 0x8, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x5}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0x1c}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x4}, {0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x1}, {0x1}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x9, 0x60, 0x12, 0x60, 0x3, 0x6, 0x55, 0x1a, 0x18, 0x36, 0xc, 0x48, 0xb, 0xc9adccf375dc77ca, 0x39, 0x4, 0x2, 0x16, 0x2, 0x48, 0x1, 0x6, 0xc, 0xc, 0x3, 0x1, 0x4, 0x24, 0x4, 0x5, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x867, 0x9bce, 0x6, 0x0, 0x4, 0x56, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf35f, 0x933, 0x57f, 0xfff, 0x0, 0x2, 0x6, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x1, 0x80, 0x48c, 0x0, 0xcb, 0x8b2]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x16, 0x18, 0x9, 0x0, 0x6, 0x1b, 0x5, 0x5, 0x18, 0x48, 0x9, 0x9, 0xc, 0x16, 0x1b, 0xc, 0x2, 0x16, 0xb, 0x12, 0x1b, 0x6, 0x12, 0x60, 0x12, 0x36, 0x1, 0x10, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb45c, 0x2, 0x4, 0x5, 0x4, 0x9, 0x2, 0x69fa]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x36, 0x39, 0x16, 0x18, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb53, 0x1, 0x8, 0x7, 0x6, 0x2, 0x2]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x334, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x240, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x36f, 0x3f, 0xfffe, 0x400, 0x2, 0x1, 0xffff]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfc00, 0x81, 0x2, 0x40, 0x5, 0x4, 0x1000, 0x49]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6014763a612ae39a, 0x16, 0x60]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x6}, {0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x2}, {0x3, 0x8}, {0x7, 0x6}, {0x1, 0x6}, {0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x6}, {0x5, 0x5}, {0x4, 0x9}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x3}, {0x6, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x9}, {0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x6}, {0x2, 0x8}, {0x5}, {0x0, 0x4}, {}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x3}, {0x5, 0x6}, {0x5, 0x9}, {0x7, 0x4}, {0x2, 0x9}, {0x4, 0x6}, {0x6, 0x5}, {}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x0, 0x5, 0xd3, 0x7, 0x67, 0x7]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x7}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x4}, {0x6}, {0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x4}, {0x4}, {0x4, 0x8}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x6c, 0x13, 0x6, 0x1b, 0x6c, 0x6c, 0x6c, 0x2, 0x24, 0x1, 0x48, 0x60, 0x5, 0x1b, 0x12, 0x6, 0x18, 0x17, 0x1b, 0x18, 0x3, 0x0, 0x48, 0x12, 0x24, 0x48, 0x6c, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1faf, 0x8, 0x9, 0x401, 0x9, 0x9, 0x7]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x74, 0x8000, 0xa79a, 0x1000, 0x9, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5255, 0x1000, 0x5b, 0xfffe, 0x100, 0x3, 0x8521, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x24, 0xb, 0xb, 0x24, 0x4, 0x6, 0x3, 0x6, 0x30, 0x9, 0x2, 0x9, 0x36, 0x48, 0x3, 0x4, 0x60, 0x1b, 0x1b, 0x9, 0x12, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {0x2, 0x6}, {0x5}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x5}, {}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x5}, {0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x7}, {0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x9}, {0x5}, {0x1, 0x4}, {0x0, 0x9}, {}, {0x5, 0x6}, {0x1}, {0x3, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc6, 0x4, 0x6, 0x5, 0x55, 0x6, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe67}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a96}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x26e5}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff000000000000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x828}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000013c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000000e80)={0x4c8, r6, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9f}, @NL80211_ATTR_CSA_IES={0x47c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x3a0, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6532}, @device_b, @device_b, @from_mac=@broadcast, {0x2, 0xfe0}}, 0x80000001, @random=0x5, 0xc0, @void, @val, @void, @void, @void, @val={0x5, 0x92, {0x8, 0x76, 0x67, "6a20101c4c41ead7ea8d2922e70da6a24eed103e289a56c0f0733659b02600ad5bf3ae49a3ba175f8abec07040baef0f6abe39aaa29a2e8a65d153b3bec3c68c77c5d579f2aadba903cbb72a4221ecf118199153df9394bf183b1f1f127989a403cb7db76403721f6ce7fbb8d42c7a00439e0e6e1e767b430aab5aa4ca8e76b0c36433cf24dba5f9ba864f4175f49a"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x4, 0xaf, 0xf9}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x3, 0x10, 0x80}}, [{0xdd, 0x4e, "7e2ed136b5b5906eaed0c9576f0bca7b4a3807bd93cbec9ee4f1f5cf51cfb7602b3e36de4d1e44df27054ec9d5eb5ceb0b1211285d93aeb531a6036262c048b049757e8ad538a68e8b196e83eec6"}, {0xdd, 0xed, "b4b57b443798a8fb1276f43da97cd5c13ac2fa9ef9f9070ea6120601f05b8cd75d58eb86c88e29b2643ca9252c44bcd3ef63cfe74b9b2c26c177edca15a5d99bec9d8e4e987a02243541e90fce6db245499edf7dd7e63885fa787ec9cd6db33a05d763c870dd4b52dde57f3b7350330dad7c0aa132f134a20de6bd520612ef82b772a7f579f849e2415cbcf5f453133e168211450832855b806b30b0f1f87a8425f5f0df78d536c1d3049f04518122a3aa937817c2debc357d8071baa58d134f99bc89cd2fb7570e3ba529d397bd0ed856b02c1aefd078adf24ed0536e0525852c927ae3c4b725b1202664f977"}, {0xdd, 0x90, "06588821ec193e871028285934a054a61ef63c8da1502ee4bf0fe4f6785e043e95e7f4ddb42f781ee9288bf1a63654df0b518eb76420afa893f309e378cf9424c5d31a6ff1e99f46ffa6268010ba6ddebbfc0a723638ac6b4e5cceadba89db324b139e3ca98b284bc8ef5848998c2e2385048eeee8961fe32794a7082e9fc067f9c89ef03f35b2c44588c1293e3e085e"}, {0xdd, 0x7b, "fbb94b828782a07a7d6b41310f9430fc4cf84476004644cedc62dc4fcc1242fd1189a640f47af6e773bb9c531f4eb36ba1a2dc0806e6afaa98bfd8d064199f2ef0533191d9e093122ec2fbc0897ade1f61782a193b78f4916768312e3145897be7484d2b3e160d0fbc54f5efd82a446a6116cad52741457af39835"}, {0xdd, 0x62, "b904f2711fa3bdd236563a32bc1e837855acf11e10fefead167fefc0f3a93d45527ac0c952146914b9795aa807619216e99eacfb4347b5f65dc9f44064daa736ed30ae1da71a454a6208e6c9c103e35d45d24219c4c4c6d9d14b948181768fe8c657"}, {0xdd, 0x15, "863bc2bc2d02c56f4e68e680a287e8efa4c6f52e96"}]}}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x4, 0x1}}]}, @NL80211_ATTR_IE={0xc9, 0x2a, [@chsw_timing={0x68, 0x4, {0xd40}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x3ff, @void, @val="db7fee2fe6ec65ea1de9f2e57ee12341"}}, @tim={0x5, 0xa5, {0xe8, 0x2e, 0x0, "86bb7c7044b457cf831acea9abaa46bd00b4cf7a15cd1b23e2374d8ba92ce149cb75bbd98af133d1c6d02e54203e43f0fcc7450bb83f0122dba9761e3aa4d7ea16adcecbffee726c6a9042ff06b7e50ce860ce8c8e2590cd626420f567dc5a5641d0b710e0ffbf0f1cc75c2e2b6e72bb3d871d6721d99ad2749247a884d6bec8c3f385bf0b77dda40b054d7070634daed3381a4e5ab9753707a7989738bafe110f67"}}]}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24000814}, 0x79720f5c71d0c3b2)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001b2c56e6ed5600e2fbe565cf8a3fda944000006"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200202c0}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x4c, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x84)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:46:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000640)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x4e, "8972a656ab6b0a6734d4926ccd02d2d7d08b1522660ecd18dcd2d30dc6c72e8be48d63e1f622d50b1f01619cf839538ae03e9334d39646c23ec6d01c5ab53dcc238c27ba02fe675cad035d4327e3"}, {0xdd, 0x60, "b549973a8d2fd80d4dbea38571cbedd87aed72d51b072ba6b504e7fd830a1ab9b441536faef324245cd8cbc01032c317f316f1e857a15b77d4d1cb17d3000cd4995a734bc2168efc5cbdcd5d47a1fe1f65ced3ec2a9c2acfb0775e5800121f93"}, {0xdd, 0xc4, "07e335ebf41fb8fcb99726e39b19a325ee9056c7d7b2e13fdd04d15a67849e17175aecfbd2efc0360f5b7a873767459ee2514164966b4ac02aca344163fe857a58191ac7c45c9faca902fe1b41fea46a50df27579e9083e702524b3cae948675ba6b524a54daa57db5ec8eadb72b50903a51293f53498956519d72fd61e786731c151b2422bb3dc592f1cb4918d61e90d256961246d28198f1e645108912fd4fe66db8df0e182487cfe7f7091cd35112c82db488ed00b042ba101cc8020ad041b4d57974"}]}, 0x1ae)
nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2761.349976][  T823] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2761.414207][  T824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.433204][  T818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.463820][  T822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.545588][  T823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.574268][  T818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.585846][  T825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.604163][  T832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.641485][  T822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.684725][  T829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.698584][  T836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.714909][  T818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.727344][  T827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.770733][  T822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.851264][  T823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2761.854988][  T825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:46:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x44000000}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2762.492352][  T842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2762.593526][  T846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2762.682759][  T842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2762.837568][T12292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2763.051320][T12292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2763.209710][T12292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2763.361453][T12292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2765.457144][T12292] hsr_slave_0: left promiscuous mode
[ 2765.467524][T12292] hsr_slave_1: left promiscuous mode
[ 2765.485759][T12292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2765.494535][T12292] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2765.510663][T12292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2765.518458][T12292] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2765.528721][T12292] bridge_slave_1: left allmulticast mode
[ 2765.534568][T12292] bridge_slave_1: left promiscuous mode
[ 2765.543777][T12292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2765.565479][T12292] bridge_slave_0: left allmulticast mode
[ 2765.571810][T12292] bridge_slave_0: left promiscuous mode
[ 2765.578833][T12292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2765.607782][T12292] veth1_macvtap: left promiscuous mode
[ 2765.616076][T12292] veth0_macvtap: left promiscuous mode
[ 2765.622356][T12292] veth1_vlan: left promiscuous mode
[ 2765.627811][T12292] veth0_vlan: left promiscuous mode
[ 2766.346959][T17952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2766.358785][T17952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2766.367648][T17952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2766.416371][T17952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2766.437992][T17952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2766.447141][ T5008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2766.815706][T12292] team0 (unregistering): Port device team_slave_1 removed
[ 2766.851274][T12292] team0 (unregistering): Port device team_slave_0 removed
[ 2766.883512][T12292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2766.921577][T12292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2767.152807][T12292] bond0 (unregistering): Released all slaves
[ 2768.076056][  T907] chnl_net:caif_netlink_parms(): no params data found
[ 2768.495530][T17952] Bluetooth: hci3: command 0x0409 tx timeout
[ 2769.347938][  T907] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2769.355902][  T907] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2769.363814][  T907] bridge_slave_0: entered allmulticast mode
[ 2769.375349][  T907] bridge_slave_0: entered promiscuous mode
[ 2769.424810][  T907] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2769.436326][  T907] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2769.444222][  T907] bridge_slave_1: entered allmulticast mode
[ 2769.453556][  T907] bridge_slave_1: entered promiscuous mode
[ 2769.774506][  T907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2769.835689][  T907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2770.060031][  T907] team0: Port device team_slave_0 added
[ 2770.086754][  T907] team0: Port device team_slave_1 added
[ 2770.334046][  T907] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2770.341480][  T907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2770.367990][  T907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2770.409666][  T907] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2770.416801][  T907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2770.444344][  T907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2770.570054][T17952] Bluetooth: hci3: command 0x041b tx timeout
[ 2770.700990][  T907] hsr_slave_0: entered promiscuous mode
[ 2770.724254][  T907] hsr_slave_1: entered promiscuous mode
[ 2770.733284][  T907] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2770.745061][  T907] Cannot create hsr debugfs directory
[ 2771.862241][  T907] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2771.910287][  T907] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2771.956640][  T907] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2772.000064][  T907] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2772.649161][T17952] Bluetooth: hci3: command 0x040f tx timeout
[ 2772.673228][  T907] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2772.788805][  T907] 8021q: adding VLAN 0 to HW filter on device team0
[ 2772.819563][T16190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2772.827158][T16190] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2772.899228][T16190] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2772.906846][T16190] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2773.234957][  T907] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2773.415918][  T907] veth0_vlan: entered promiscuous mode
[ 2773.465121][  T907] veth1_vlan: entered promiscuous mode
[ 2773.586584][  T907] veth0_macvtap: entered promiscuous mode
[ 2773.614710][  T907] veth1_macvtap: entered promiscuous mode
[ 2773.684152][  T907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2773.694970][  T907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2773.705200][  T907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2773.715992][  T907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2773.726200][  T907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2773.736851][  T907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2773.752043][  T907] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2773.799178][  T907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2773.812396][  T907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2773.822613][  T907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2773.833544][  T907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2773.845573][  T907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2773.856395][  T907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2773.870983][  T907] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2773.918124][  T907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2773.930353][  T907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2773.939472][  T907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2773.950919][  T907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2774.133340][T24889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2774.143926][T24889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2774.268542][T16190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2774.276566][T16190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2774.468949][ T1306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2774.504570][T24889] wlan1: authenticate with 08:02:11:00:00:00
[ 2774.514186][T24889] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2774.537113][T16190] wlan1: authenticated
[ 2774.537546][ T1307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2774.542040][T16190] mac80211_hwsim hwsim39 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2774.570162][T16190] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2774.610543][T24889] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2774.610945][ T1307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2774.621977][T24889] wlan1: associated
[ 2774.731923][T17952] Bluetooth: hci3: command 0x0419 tx timeout
18:47:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000052db21a100000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x3000000}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000058c0), 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2282, &(0x7f0000000000))
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0xb89})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)={0x22, 0x2, 0x8670, "37b9b15fa2196b1e0943f688d0d400ea264a4a53b141574fa4c35582a4418ff6add1"})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x64, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffb1b, 0x54}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x2c, 0x1, "960976ba757963d7934078cce1748a102524387f6ef7a2240b88273fc042d5939354b88d747b7c09"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = dup2(r4, r3)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x828, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x34c, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffff4cf}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x2, 0x3, 0x6, 0x2, 0xf442, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x401, 0x8cb, 0x1, 0x0, 0x7, 0xa4a4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x1, 0x6c, 0x24, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x9, 0x9, 0x101, 0x7, 0x5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x3, 0x9, 0x18, 0x30, 0xb, 0xb, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x40, 0x4, 0x1, 0x7, 0x8, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x5}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0x1c}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x4}, {0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x1}, {0x1}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x9, 0x60, 0x12, 0x60, 0x3, 0x6, 0x55, 0x1a, 0x18, 0x36, 0xc, 0x48, 0xb, 0xc9adccf375dc77ca, 0x39, 0x4, 0x2, 0x16, 0x2, 0x48, 0x1, 0x6, 0xc, 0xc, 0x3, 0x1, 0x4, 0x24, 0x4, 0x5, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x867, 0x9bce, 0x6, 0x0, 0x4, 0x56, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf35f, 0x933, 0x57f, 0xfff, 0x0, 0x2, 0x6, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x1, 0x80, 0x48c, 0x0, 0xcb, 0x8b2]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x16, 0x18, 0x9, 0x0, 0x6, 0x1b, 0x5, 0x5, 0x18, 0x48, 0x9, 0x9, 0xc, 0x16, 0x1b, 0xc, 0x2, 0x16, 0xb, 0x12, 0x1b, 0x6, 0x12, 0x60, 0x12, 0x36, 0x1, 0x10, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb45c, 0x2, 0x4, 0x5, 0x4, 0x9, 0x2, 0x69fa]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x36, 0x39, 0x16, 0x18, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb53, 0x1, 0x8, 0x7, 0x6, 0x2, 0x2]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x334, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x240, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x36f, 0x3f, 0xfffe, 0x400, 0x2, 0x1, 0xffff]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfc00, 0x81, 0x2, 0x40, 0x5, 0x4, 0x1000, 0x49]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6014763a612ae39a, 0x16, 0x60]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x6}, {0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x2}, {0x3, 0x8}, {0x7, 0x6}, {0x1, 0x6}, {0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x6}, {0x5, 0x5}, {0x4, 0x9}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x3}, {0x6, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x9}, {0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x6}, {0x2, 0x8}, {0x5}, {0x0, 0x4}, {}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x3}, {0x5, 0x6}, {0x5, 0x9}, {0x7, 0x4}, {0x2, 0x9}, {0x4, 0x6}, {0x6, 0x5}, {}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x0, 0x5, 0xd3, 0x7, 0x67, 0x7]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x7}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x4}, {0x6}, {0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x4}, {0x4}, {0x4, 0x8}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x6c, 0x13, 0x6, 0x1b, 0x6c, 0x6c, 0x6c, 0x2, 0x24, 0x1, 0x48, 0x60, 0x5, 0x1b, 0x12, 0x6, 0x18, 0x17, 0x1b, 0x18, 0x3, 0x0, 0x48, 0x12, 0x24, 0x48, 0x6c, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1faf, 0x8, 0x9, 0x401, 0x9, 0x9, 0x7]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x74, 0x8000, 0xa79a, 0x1000, 0x9, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5255, 0x1000, 0x5b, 0xfffe, 0x100, 0x3, 0x8521, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x24, 0xb, 0xb, 0x24, 0x4, 0x6, 0x3, 0x6, 0x30, 0x9, 0x2, 0x9, 0x36, 0x48, 0x3, 0x4, 0x60, 0x1b, 0x1b, 0x9, 0x12, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {0x2, 0x6}, {0x5}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x5}, {}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x5}, {0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x7}, {0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x9}, {0x5}, {0x1, 0x4}, {0x0, 0x9}, {}, {0x5, 0x6}, {0x1}, {0x3, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc6, 0x4, 0x6, 0x5, 0x55, 0x6, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe67}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6a96}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x26e5}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff000000000000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x828}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000013c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000000e80)={0x4c8, r6, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9f}, @NL80211_ATTR_CSA_IES={0x47c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x3a0, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6532}, @device_b, @device_b, @from_mac=@broadcast, {0x2, 0xfe0}}, 0x80000001, @random=0x5, 0xc0, @void, @val, @void, @void, @void, @val={0x5, 0x92, {0x8, 0x76, 0x67, "6a20101c4c41ead7ea8d2922e70da6a24eed103e289a56c0f0733659b02600ad5bf3ae49a3ba175f8abec07040baef0f6abe39aaa29a2e8a65d153b3bec3c68c77c5d579f2aadba903cbb72a4221ecf118199153df9394bf183b1f1f127989a403cb7db76403721f6ce7fbb8d42c7a00439e0e6e1e767b430aab5aa4ca8e76b0c36433cf24dba5f9ba864f4175f49a"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x4, 0xaf, 0xf9}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x3, 0x10, 0x80}}, [{0xdd, 0x4e, "7e2ed136b5b5906eaed0c9576f0bca7b4a3807bd93cbec9ee4f1f5cf51cfb7602b3e36de4d1e44df27054ec9d5eb5ceb0b1211285d93aeb531a6036262c048b049757e8ad538a68e8b196e83eec6"}, {0xdd, 0xed, "b4b57b443798a8fb1276f43da97cd5c13ac2fa9ef9f9070ea6120601f05b8cd75d58eb86c88e29b2643ca9252c44bcd3ef63cfe74b9b2c26c177edca15a5d99bec9d8e4e987a02243541e90fce6db245499edf7dd7e63885fa787ec9cd6db33a05d763c870dd4b52dde57f3b7350330dad7c0aa132f134a20de6bd520612ef82b772a7f579f849e2415cbcf5f453133e168211450832855b806b30b0f1f87a8425f5f0df78d536c1d3049f04518122a3aa937817c2debc357d8071baa58d134f99bc89cd2fb7570e3ba529d397bd0ed856b02c1aefd078adf24ed0536e0525852c927ae3c4b725b1202664f977"}, {0xdd, 0x90, "06588821ec193e871028285934a054a61ef63c8da1502ee4bf0fe4f6785e043e95e7f4ddb42f781ee9288bf1a63654df0b518eb76420afa893f309e378cf9424c5d31a6ff1e99f46ffa6268010ba6ddebbfc0a723638ac6b4e5cceadba89db324b139e3ca98b284bc8ef5848998c2e2385048eeee8961fe32794a7082e9fc067f9c89ef03f35b2c44588c1293e3e085e"}, {0xdd, 0x7b, "fbb94b828782a07a7d6b41310f9430fc4cf84476004644cedc62dc4fcc1242fd1189a640f47af6e773bb9c531f4eb36ba1a2dc0806e6afaa98bfd8d064199f2ef0533191d9e093122ec2fbc0897ade1f61782a193b78f4916768312e3145897be7484d2b3e160d0fbc54f5efd82a446a6116cad52741457af39835"}, {0xdd, 0x62, "b904f2711fa3bdd236563a32bc1e837855acf11e10fefead167fefc0f3a93d45527ac0c952146914b9795aa807619216e99eacfb4347b5f65dc9f44064daa736ed30ae1da71a454a6208e6c9c103e35d45d24219c4c4c6d9d14b948181768fe8c657"}, {0xdd, 0x15, "863bc2bc2d02c56f4e68e680a287e8efa4c6f52e96"}]}}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x4, 0x1}}]}, @NL80211_ATTR_IE={0xc9, 0x2a, [@chsw_timing={0x68, 0x4, {0xd40}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x3ff, @void, @val="db7fee2fe6ec65ea1de9f2e57ee12341"}}, @tim={0x5, 0xa5, {0xe8, 0x2e, 0x0, "86bb7c7044b457cf831acea9abaa46bd00b4cf7a15cd1b23e2374d8ba92ce149cb75bbd98af133d1c6d02e54203e43f0fcc7450bb83f0122dba9761e3aa4d7ea16adcecbffee726c6a9042ff06b7e50ce860ce8c8e2590cd626420f567dc5a5641d0b710e0ffbf0f1cc75c2e2b6e72bb3d871d6721d99ad2749247a884d6bec8c3f385bf0b77dda40b054d7070634daed3381a4e5ab9753707a7989738bafe110f67"}}]}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24000814}, 0x79720f5c71d0c3b2)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000008b960c12182400000000000000000000000000000000e5127df06997b855964c9cf28a40cd678b8a25f19452cd4ba58854fe1ec2bd8d05324429fc0be5"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2775.170889][ T1315] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2775.195433][ T1314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.213251][ T1316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.223402][ T1317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.252737][ T1313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.262293][ T1315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.302187][ T1322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.315158][ T1313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.336831][ T1314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.360379][ T1326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.363710][ T1316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.409468][ T1322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.420449][ T1315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.427852][ T1325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.462370][ T1326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.467174][ T1316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.494078][ T1314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.495152][ T1315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.525678][ T1313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:01 executing program 0:
semget(0x2, 0x0, 0x690)

18:47:01 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x12, 0x0, &(0x7f0000000100))

18:47:01 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0x3}]}}}}})

18:47:01 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)

18:47:01 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x3, 0x0, 0x0)

18:47:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000052db21a100000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (rerun: 64)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 64)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, 0x0, 0x0)

18:47:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}})

18:47:01 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0xc, 0x0, &(0x7f0000000240))

18:47:01 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8953, &(0x7f0000000000)={'veth1_to_team\x00', @broadcast})

18:47:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000002640)={'sit0\x00', &(0x7f0000002700)={@loopback, @dev}})

[ 2776.576113][ T1345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, 0x0, 0x0)

18:47:02 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_proto_private(r0, 0x1089e3, &(0x7f0000000000)="519e9909e8ed39b23a")

18:47:02 executing program 2:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth1_to_team\x00', @broadcast})

18:47:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x300, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4, 0x7}}]}, 0x38}}, 0x40)

18:47:02 executing program 5:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000000000)={'veth1_to_team\x00', @broadcast})

18:47:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:02 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x3b)

18:47:02 executing program 0:
r0 = socket(0x10, 0x2, 0x6)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0)

18:47:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, 0x0, 0x0)

18:47:02 executing program 5:
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0x32, 0x0, &(0x7f0000000240))

[ 2777.631476][ T1380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2777.682070][ T1382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
18:47:03 executing program 2:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth1_to_team\x00', @broadcast})

18:47:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, 0x0, 0x0)

[ 2777.843692][ T1380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:03 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0x5, 0x0, 0x300)

[ 2777.932176][ T1384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2778.103855][ T1426] veth1_to_team: entered promiscuous mode
[ 2778.110100][ T1426] veth1_to_team: entered allmulticast mode
18:47:03 executing program 2:
socket(0x0, 0x0, 0x40)

18:47:03 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000140)='./file1\x00', 0x1000, 0xf0f)

18:47:03 executing program 1:
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x7ffffffffffffffd, 0x0)

18:47:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:04 executing program 0:
open$dir(&(0x7f0000000080)='./file0/../file0\x00', 0x200, 0x0)

18:47:04 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0)

18:47:05 executing program 5:
accept$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffffe)

18:47:05 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = dup2(r0, r0)
connect$inet6(r1, &(0x7f0000000480)={0x1c, 0x1c, 0x3}, 0x1c)

18:47:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:05 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c)

18:47:06 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x111}, 0x98)

18:47:06 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000040)='4', 0x1, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c)

18:47:07 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0xfff, 0x1, 'P'}, 0x9)

18:47:08 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0x1c}, 0x0)

18:47:08 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000001900)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="0800260094"], 0x2c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000900)

18:47:08 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0)

[ 2783.364842][ T1550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:08 executing program 4:
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffa000/0x3000)=nil)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
socket$inet6(0xa, 0x3, 0x6)
r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0xa, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0000000000000000184a00000e00000000000000000000008500010007000200"/52, @ANYRESOCT, @ANYBLOB="00000000000000041c90800006000000", @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x1, 0xff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x90)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13)

18:47:09 executing program 2:
keyctl$search(0x18, 0x0, &(0x7f0000000180)='id_legacy\x00', 0x0, 0xfffffffffffffffd)

18:47:09 executing program 0:
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x6, &(0x7f00000000c0))
write$input_event(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
bpf$OBJ_GET_PROG(0x3, 0x0, 0x8)

18:47:09 executing program 1:
request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0)

18:47:09 executing program 5:
syz_open_dev$mouse(&(0x7f0000000000), 0xffffffffffffffff, 0x60140)

18:47:09 executing program 2:
rt_sigaction(0xb, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200))

18:47:09 executing program 0:
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000080)=""/94)

18:47:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="046304400000000003630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64, @ANYBLOB="0f630c4003000000000000000000000010630840000014900000000003630840"], 0x0, 0x0, 0x0})

[ 2784.396245][ T1163] udevd[1163]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
18:47:10 executing program 5:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

18:47:10 executing program 2:
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)

18:47:10 executing program 1:
syz_clone3(&(0x7f0000000280)={0x501ca3dc7a4f039d, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58)

18:47:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

[ 2784.937581][ T1163] udevd[1163]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 2785.146017][ T1264] udevd[1264]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 2785.170577][ T1610] binder: 1608:1610 ioctl 40046205 0 returned -22
[ 2785.254813][ T1611] binder: BINDER_SET_CONTEXT_MGR already set
[ 2785.261182][ T1611] binder: 1608:1611 ioctl 40046207 0 returned -16
[ 2785.300137][ T1264] udevd[1264]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
18:47:12 executing program 4:
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffa000/0x3000)=nil)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
socket$inet6(0xa, 0x3, 0x6)
r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0xa, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0000000000000000184a00000e00000000000000000000008500010007000200"/52, @ANYRESOCT, @ANYBLOB="00000000000000041c90800006000000", @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x1, 0xff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x90)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13)

18:47:12 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

18:47:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0046209, 0x0)

18:47:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x5421, &(0x7f0000000300))

18:47:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40049409, 0x0)

18:47:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r1=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r4, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r5=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r9=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x32c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x32c}}, 0x20040040)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2787.559659][ T1618] binder: 1614:1618 ioctl c0046209 0 returned -22
[ 2787.616874][ T1620] binder: 1617:1620 ioctl 400c620e 20000080 returned -22
18:47:13 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0}}], 0x1, 0x0)

[ 2787.720366][ T1621] wlan1: authenticate with 08:02:11:00:00:00
[ 2787.731047][ T1621] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
18:47:13 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000ffffac1414aafc000000000006000000000000000000000000000000000002"], 0xb8}}, 0x0)

18:47:13 executing program 0:
r0 = socket(0x2, 0x3, 0x4)
getsockopt$inet_mreqn(r0, 0x0, 0x12, 0x0, &(0x7f00000000c0))

18:47:13 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

[ 2787.834836][ T1628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2787.849666][T16190] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2787.938693][T24889] wlan1: authenticated
[ 2787.943427][T24889] mac80211_hwsim hwsim39 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2787.960008][T26077] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2788.029240][ T1631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:13 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

[ 2788.190922][ T1644] binder: 1638:1644 ioctl 400c620e 20000080 returned -22
18:47:13 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/237, 0xed}}], 0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0)

[ 2788.457095][ T1651] binder: 1647:1651 ioctl 400c620e 20000080 returned -22
[ 2788.939467][T24889] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 2789.049142][T24889] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
[ 2789.162013][T24889] wlan1: association with 08:02:11:00:00:00 timed out
18:47:15 executing program 4:
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffa000/0x3000)=nil)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
socket$inet6(0xa, 0x3, 0x6)
r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0xa, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0000000000000000184a00000e00000000000000000000008500010007000200"/52, @ANYRESOCT, @ANYBLOB="00000000000000041c90800006000000", @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x1, 0xff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x90)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13)

18:47:15 executing program 0:
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x10, 0x0, 0x0, 0x0)

18:47:15 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

18:47:15 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
connect$caif(r0, &(0x7f0000000140)=@dbg, 0x18)

18:47:15 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0)

18:47:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r1=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r4, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r5=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) (async)
getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r9=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x32c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x32c}}, 0x20040040)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 64)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2790.796769][ T1662] binder: 1657:1662 ioctl 400c620e 20000080 returned -22
18:47:16 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@dev, @link_local, @void, {@mpls_uc}}}, 0xe)

18:47:16 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_migrate\x00', 0x2, 0x0)

18:47:16 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541e, 0x0)

18:47:16 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

[ 2791.087792][ T1664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2791.108937][T24889] wlan1: authenticate with 08:02:11:00:00:00
[ 2791.118684][T24889] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2791.251771][T24889] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
18:47:16 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x40c8, 0x0, 0x3c)

18:47:16 executing program 5:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005780), 0x2, 0x0)
write$FUSE_INTERRUPT(r0, 0x0, 0x0)

[ 2791.374808][ T1163] udevd[1163]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 2791.397527][ T1690] binder: 1686:1690 ioctl 400c620e 20000080 returned -22
[ 2791.519011][ T1679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2792.013245][T24889] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 2792.130953][T24889] wlan1: authentication with 08:02:11:00:00:00 timed out
18:47:18 executing program 4:
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffa000/0x3000)=nil)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
socket$inet6(0xa, 0x3, 0x6)
r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0xa, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0000000000000000184a00000e00000000000000000000008500010007000200"/52, @ANYRESOCT, @ANYBLOB="00000000000000041c90800006000000", @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x1, 0xff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x90)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13)

18:47:18 executing program 1:
shmctl$IPC_STAT(0x0, 0x3, &(0x7f0000000000)=""/236)

18:47:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r1=>0x0}, &(0x7f0000000040)=0x80) (rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) (async)
getsockname(r4, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r5=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) (async)
getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r9=>0x0}, &(0x7f0000000040)=0x80)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x32c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x32c}}, 0x20040040)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 32)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (rerun: 64)

18:47:18 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000080))

18:47:18 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x5607, 0x3)

18:47:18 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x125d82, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x4e, 0x0, 'queue0\x00', 0x1})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x4081)

18:47:19 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000080))

18:47:19 executing program 5:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/123)

18:47:19 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x3, 0x8, 0x7d5b5fdab121a45, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0)

18:47:19 executing program 0:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000040)={0x0, "092b1020033fa65f3d337f3ebeb6b15a8fd99ddfb75bda8c6917f4e42044f91790afffa9de42d660407323e0db28589fe2e7bf07d6705ac8faed4d13b3fc3a91"})

18:47:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @broadcast, {0x6, 0x4}, @device_b}, @random="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"}, 0x2a0)

18:47:19 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000080))

[ 2794.342015][ T1210] ieee802154 phy0 wpan0: encryption failed: -22
[ 2794.349335][ T1210] ieee802154 phy1 wpan1: encryption failed: -22
[ 2794.501253][ T1734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2794.513372][ T5890] wlan1: authenticate with 08:02:11:00:00:00
[ 2794.522945][ T5890] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2794.642524][T24889] wlan1: authenticated
[ 2794.647278][T24889] mac80211_hwsim hwsim39 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2794.665402][T26077] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2794.677996][ T1734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2794.760673][T24889] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2794.770081][T24889] wlan1: associated
[ 2794.777769][ T1739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2794.828393][ T1742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:22 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
ioctl$TCSBRK(r0, 0x541d, 0x0)

18:47:22 executing program 5:
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

18:47:22 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

18:47:22 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @random="75bd38736be6"}, 0x10)

18:47:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @broadcast, {0x6, 0x4}, @device_b}, @random="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"}, 0x2a0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @broadcast, {0x6, 0x4}, @device_b}, @random="aeb142d9f2a7af0b27ce8053427a84de0bf9b2d1a56ef65c33a183fd550a2ac6c79d078d96553d29eedbe219a7dfb162b01848ad7d3f26c75201865c277baa752dc45d3c700a22ae6b89682c7cab1602a17e98aadb330ecdca6e53b7428e219ea9b1e55432124f2b0d56058304fae25ca5020fc0c2f26f591d9b337b38db486cc6cc190f60cb2aa48accfa1c40f37f05cd10543e68f9b3d9a172d0d97a95a6285274590a2e79419c25d21562773c03f4470b0dc8f00de4c09ed60df94d312c1b035df695b235f4cddecaea8d754875eb68a521005d336ccaa7c5e4288b74d07db639d457d530f14d57f084dfbd6285190758e3328700bfbf52794c275a675cc09bfb7e4356d39add13da0ef5d00b4b02f89554fa2358df5b4cd88f275a5a9dbbd59cf9367a24a44d8cb3722cda1f4cea28ea166bf46b35ea3d287432f3045be237ea2bdced053b522544e3b5fb8693798781309c727257b055c31bd31e24144a3f0ac1efd970a61e86f92c802a3f576f97ffcd75aff5fda27039199ed4d948257f2ff7f507eecc90240f7d1bc1ad35d10c5ae0d5184f753387a780923a5cd0211d2e48c929f20d4d0f06e0dcdcc398aa4a6f0e4d1484a7de18636a8296ce83404058fb824c18998080c849c3ef57383c850c58e70a525bc7cacfb90fc16081e21548e14047bc08ea07071bf3fce6b2d7287bb78d31a631e9fc3ed6aea6083984cb7d14e1614c46494f7b36d5dc414e1f28f4612751f9b62784fea7c03a33b33c1c865541ea1be3b7e0a53a59876337ad052b017443d8c3cca8afc2b4062f60762c41ac81ebef024377ac8116147ce6b5afd152fb70bf43204f788af8e5c330422ac95b2243217e7e7fd6175d4da2022043f1dc665dd0cdd9c009f6818b55061e0d9e"}, 0x2a0) (async)

[ 2796.887602][ T1752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:22 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{}, {0x6}]})

18:47:22 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000600))

18:47:22 executing program 5:
r0 = open(&(0x7f0000002180)='./file0\x00', 0x842, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000440)={0x0, r1})

18:47:22 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x2dd}, 0x0)

[ 2797.050528][ T1752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:22 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

[ 2797.167689][ T1752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2797.258976][ T1756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:22 executing program 4:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002300)={0x0, 0x2000000000000000})

[ 2797.317206][   T26] kauditd_printk_skb: 11 callbacks suppressed
[ 2797.317271][   T26] audit: type=1326 audit(1693248442.640:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f567947cae9 code=0x0
18:47:22 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r0)
getsockname$inet(r0, 0x0, 0x0)

[ 2797.451225][ T1770] binder: 1767:1770 ioctl 400c620e 20000080 returned -22
18:47:22 executing program 5:
syz_emit_ethernet(0xc49, &(0x7f00000015c0)={@local, @remote, @val, {@ipv6}}, 0x0)

18:47:22 executing program 0:
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff})
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

18:47:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000540)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @broadcast, {0x6, 0x4}, @device_b}, @random="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"}, 0x2a0)

18:47:22 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

18:47:23 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000080), &(0x7f00000012c0)=0x4)

18:47:23 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x3])

[ 2797.907624][ T1786] binder: 1782:1786 ioctl 400c620e 20000080 returned -22
18:47:23 executing program 5:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0)

18:47:23 executing program 0:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0)

18:47:23 executing program 2:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

[ 2798.162093][ T1789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:23 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/132)

18:47:23 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf0, 0xf, 0x4f, 0x10, 0x403, 0xff1d, 0x2e72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xad, 0x0, 0x0, 0x8b, 0x3f, 0xd3}}]}}]}}, 0x0)

[ 2798.385687][ T1807] binder: 1801:1807 ioctl 400c620e 20000080 returned -22
[ 2798.519298][T24889] usb 6-1: new high-speed USB device number 85 using dummy_hcd
18:47:23 executing program 2:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

18:47:24 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCSREP(r0, 0x401c5820, &(0x7f0000000100))

[ 2798.808541][T24889] usb 6-1: Using ep0 maxpacket: 16
[ 2798.854344][ T1527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2798.935539][ T1822] binder: 1820:1822 ioctl 400c620e 20000080 returned -22
[ 2798.971390][ T4694] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 2798.980866][T24889] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32
[ 2798.991133][T24889] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2799.006914][T24889] usb 6-1: config 1 interface 0 has no altsetting 0
[ 2799.093198][ T1527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:47:24 executing program 2:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

[ 2799.239150][ T4694] usb 2-1: Using ep0 maxpacket: 16
[ 2799.282805][T24889] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2799.292840][T24889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2799.301303][T24889] usb 6-1: Product: syz
[ 2799.305684][T24889] usb 6-1: Manufacturer: syz
[ 2799.313140][T24889] usb 6-1: SerialNumber: syz
[ 2799.355811][ T1527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2799.428764][ T4694] usb 2-1: config 0 has an invalid interface number: 173 but max is 0
[ 2799.437201][ T4694] usb 2-1: config 0 has no interface number 0
[ 2799.555178][ T1796] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2799.605221][ T1527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2799.629241][ T4694] usb 2-1: New USB device found, idVendor=0403, idProduct=ff1d, bcdDevice=2e.72
[ 2799.639055][ T4694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2799.647285][ T4694] usb 2-1: Product: syz
[ 2799.654168][ T4694] usb 2-1: Manufacturer: syz
[ 2799.659111][ T4694] usb 2-1: SerialNumber: syz
[ 2799.673351][ T1828] binder: 1826:1828 ioctl 400c620e 20000080 returned -22
[ 2799.738898][ T4694] usb 2-1: config 0 descriptor??
[ 2799.804560][ T4694] ftdi_sio 2-1:0.173: FTDI USB Serial Device converter detected
[ 2799.817639][ T4694] ftdi_sio ttyUSB0: unknown device type: 0x2e72
[ 2799.984403][T24889] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8
[ 2800.001334][T16190] usb 2-1: USB disconnect, device number 46
[ 2800.012550][T16190] ftdi_sio 2-1:0.173: device disconnected
[ 2800.096857][T24889] usb 6-1: USB disconnect, device number 85
[ 2800.162167][T24889] usblp0: removed
[ 2802.176332][ T1527] hsr_slave_0: left promiscuous mode
[ 2802.197172][ T1527] hsr_slave_1: left promiscuous mode
[ 2802.211434][ T1527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2802.219499][ T1527] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2802.241286][ T1527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2802.249263][ T1527] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2802.282952][ T1527] bridge_slave_1: left allmulticast mode
[ 2802.289402][ T1527] bridge_slave_1: left promiscuous mode
[ 2802.295942][ T1527] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2802.343157][ T1527] bridge_slave_0: left allmulticast mode
[ 2802.349420][ T1527] bridge_slave_0: left promiscuous mode
[ 2802.355972][ T1527] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2802.440621][ T1527] veth1_macvtap: left promiscuous mode
[ 2802.446347][ T1527] veth0_macvtap: left promiscuous mode
[ 2802.452534][ T1527] veth1_vlan: left promiscuous mode
[ 2802.458067][ T1527] veth0_vlan: left promiscuous mode
[ 2803.885774][ T1527] team0 (unregistering): Port device team_slave_1 removed
[ 2803.931289][ T1527] team0 (unregistering): Port device team_slave_0 removed
[ 2803.967251][ T1527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2804.002587][ T1527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2804.227037][ T1527] bond0 (unregistering): Released all slaves
[ 2805.169440][T28216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2805.179443][T28216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2805.189333][T28216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2805.205334][T28216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2805.216845][T28216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2805.226681][T28216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2806.463032][ T1914] chnl_net:caif_netlink_parms(): no params data found
[ 2807.290652][T28216] Bluetooth: hci3: command 0x0409 tx timeout
[ 2807.603452][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2807.614650][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2807.622796][ T1914] bridge_slave_0: entered allmulticast mode
[ 2807.632176][ T1914] bridge_slave_0: entered promiscuous mode
[ 2807.654972][ T1914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2807.664284][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2807.674710][ T1914] bridge_slave_1: entered allmulticast mode
[ 2807.683978][ T1914] bridge_slave_1: entered promiscuous mode
[ 2807.852902][ T1914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2807.875733][ T1914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2808.081324][ T1914] team0: Port device team_slave_0 added
[ 2808.122132][ T1914] team0: Port device team_slave_1 added
[ 2808.341151][ T1914] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2808.351070][ T1914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2808.377446][ T1914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2808.429154][ T1914] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2808.436303][ T1914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2808.465642][ T1914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2808.653876][ T1914] hsr_slave_0: entered promiscuous mode
[ 2808.681653][ T1914] hsr_slave_1: entered promiscuous mode
[ 2808.693659][ T1914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2808.703694][ T1914] Cannot create hsr debugfs directory
[ 2809.368629][T17952] Bluetooth: hci3: command 0x041b tx timeout
[ 2810.282924][ T1914] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2810.329818][ T1914] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2810.379845][ T1914] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2810.435166][ T1914] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2811.024372][ T1914] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2811.100103][ T1914] 8021q: adding VLAN 0 to HW filter on device team0
[ 2811.131426][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2811.139155][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2811.185692][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2811.193417][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2811.450938][T17952] Bluetooth: hci3: command 0x040f tx timeout
[ 2811.548364][ T1914] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2811.760024][ T1914] veth0_vlan: entered promiscuous mode
[ 2811.819947][ T1914] veth1_vlan: entered promiscuous mode
[ 2811.968244][ T1914] veth0_macvtap: entered promiscuous mode
[ 2812.003224][ T1914] veth1_macvtap: entered promiscuous mode
[ 2812.116625][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2812.130036][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2812.141453][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2812.152188][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2812.164644][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2812.175406][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2812.193415][ T1914] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2812.260442][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2812.272865][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2812.285391][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2812.296108][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2812.306183][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2812.318939][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2812.334078][ T1914] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2812.389828][ T1914] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2812.398932][ T1914] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2812.407882][ T1914] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2812.419522][ T1914] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2812.618382][T22892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2812.626416][T22892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2812.759802][T22892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2812.767831][T22892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2813.077767][ T2378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080000000015c79800002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000fc0)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_b, @random="0340654ff36a", {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x6, [{0x16}, {0x36, 0x1}, {0x36}, {0x28}, {0x2, 0x1}, {0xb, 0x1}]}, @val={0x2d, 0x1a, {0x2000, 0x3, 0x2, 0x0, {0x7fffffff, 0xa0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x4, 0x1}}, [{0xdd, 0x1a, "724257bc12a14eeaaafc808fd84605ee460ce5205d748307085c"}, {0xdd, 0xb1, "8a145c45c795f26f8c1c08b01f1ce23d87b37556e58b7dc5cec6ce58e1ede7da82d6a534251abc2c8f80178b4967cf10743381abaf54bcc4d4dc7d703d81b12d14a9cf0a9c56fb5d6e5b0331c629d77fc37f7b227dcb560efe72b8eb5ed7bd3d28578a011e598c3336d1a1d83f2e08230a80cf00d75c15f38546c5d96874e268a4ca7a6f80dc637561672b2ae5aae5c60509c437ec53a4d7c3f221529c9e7c61a5b294a25646d1e7e3e962c16df8412aa5"}, {0xdd, 0x37, "0621ee4ebcbb48c59eaa583a4421ac414c96c699cf052fd408cf59e974340828687e8d13572656d362837e3b33b03c4747a5b03db4be58"}, {0xdd, 0xa2, "7459d09a6aae505bbb2695371c6dea3cd98b5b931e87c68dad692064da3f45e25ed4069566b70d9164ab7e4d7c8a923465c47dce707d40ed9398b8caac802f0a699e67b37cd71e215993da3588500f14e4e3f1d680c8f4ffcff399b01dcc8f6576125566a386322155a31da88eb76de2b02dc1ae9b5eda5e70916885d5ef986403beb26b2f4ecec6094fe83c01014e6c70b5a5f670d1444f0996099ac3ab8f174635"}, {0xdd, 0x77, "bd90d054ee6d462b5b6d107440e9492b42b56bbc3510952373df68ec88699059c80282627b174fc7690b4da7ed1ca65dcb3e68e07a97cd8e706055498573420f394184bedb7135ae794f6360df41323e66724bb0fc05ce56fc3461b74b43f8a91db4f4cd4e4d43aa98213edd508b119ecc03002d125600"}, {0xdd, 0xc7, "256e61109577b5440339565f2fe7fc1f03086f601fbcb963aa8a39992ffe1a628579a29412b047962d8cf249d04f903fe240f1ebbe9b9e3e4e817a8db9ca5d9da05650a5818ee2da859eec0eb7c905279dc5742d416dbb847b8def846e26bf2fdb34fae1c5e084d09fed2be9e01c8dae145c4477a1b87a1e0c840026b2ab6b1b2490e1bf2658add3501f37e1360480ea57233e5836deb7dd7f3e859458a054698bf398cfffc74a681d7de4e926a11f250113dd72860a002d40455adf341f26148c2dc2497177f1"}, {0xdd, 0xf9, "38bf646ca80d0c7a272eedfcf3fb301db8b05304a0bc084b85990a467e97e99da14e5d7138b25e78f989d412a9f8a144160029e9d03fc455a29a699058fd1d663efafe8b5d59adfd315431e81354c165df09f3d13e42f0ebeb58c2e129b2a5d42fadd08d053b51d4355dddd84ef2ee67d113f6129c26057c10f61b93a46d9738f5af95e133dc2ab4ad76fc55f06558c0d19c4aff11abd8da7a338662bb15f9d45d89ee1c771bea01c932fe33cac0aa2b49be0768e31a5c7e7ca851e0fd5c7de08b968d6ab8fd7fd00f2e3cb1eae138149d0651b3456e7df0db0904b70dc2461ea5391130bf76c21ecece5850d75f4d016eba6aef951ff5f4ac"}, {0xdd, 0x78, "9a66a4539bc082bb52476a2f4b6bd728e5d4367251e65ac346067e9ee3ad04dd9457feeecf24e0a1d367c55833c29a0b95ea079e4298be2fb587bbf581934c80a1c13ed7a92b89e779a094b2c3e9c5c5fe68715d4f88254140c8826a3342e9555bf3e51b2de28c554d5591b85459972bc2a34a7362a00e25"}, {0xdd, 0x7, "93e36e9e61962a"}, {0xdd, 0xb6, "4a635a737b6838bb76696eca43a6877249209bea594a8cc543eeb29af49faf1f0084471e14b3473a9aef40c6659f326e8d88097ffd948d96dbe345c9f84d9d75190d97a7c65b4d6a3b44ef1f4cddf86e4560eb075953cf7690bc1e8b7080242255cf57dae234f21d1c77c03c894f35a21360d15f9aaabd0093afdc20774c78eb4fd7f79da97b3a6b4e460a71a6eba5794d6cedd677d84bef72c384fb35f46e5387eadbae9e29bdf61a8bbbba1496848328c4340a5e5b"}]}, 0x566)

18:47:38 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000580)={0x0, [[0x4], [0xd6], [0x5]], '\x00', [{0x0, 0x11}, {0x7, 0x2011}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x2, 0xb2e}, {0x0, 0x2}], '\x00', 0x2})

18:47:38 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

18:47:38 executing program 5:
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x1a, 0x46, 0x53, 0x20, 0x174f, 0x8a31, 0xd711, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb2, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x4}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0xe9, 0x89, 0xd7, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "4c7998a400cd"}]}}]}}]}}]}}, 0x0)

18:47:38 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc06c4124, 0x0)

18:47:38 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000580)={0x0, [[0x4], [0xd6], [0x5]], '\x00', [{0x0, 0x11}, {0x7, 0x2011}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x2, 0xb2e}, {0x2, 0xa64d}], '\x00', 0x2})

18:47:38 executing program 4:
syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x55, 0x4, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7c0}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x3, 0x20, 0x7, 0x0, 0x80}, 0x8f, &(0x7f0000000180)={0x5, 0xf, 0x8f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9f, 0x0, 0x1ff}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "5afd8a84d922881b482bc14bd55c35cc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xb8, 0xec, 0x8}, @generic={0x57, 0x10, 0x4, "e43325b36ee0bfca15d3e04461e0d7ef13d0ee8c66b8d188c99e70cc00659e04a5877fc8b3a797cd53c049aa1fb5f188dfe09f58f1651a11a569a55ac22a8bd4fc0bd953a6b41a05ace0559a9d7840645187432d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x8, 0x0, 0x2, 0x41}]}, 0x3, [{0x62, &(0x7f0000000240)=@string={0x62, 0x3, "a8a592db111469231fd60d5a4848e04cc8cd3ff337b72940fba58ec55100a3a21279d209c117072ce7b71e0ae3c5bc777f6e7f72ea495a2003242b0a104aafb849ab290761750d87f2462c1504e326658a93d16220c50187ffa60baca78ce97b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x83e}}]})

18:47:38 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

[ 2813.506698][ T2395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2813.529978][T28216] Bluetooth: hci3: command 0x0419 tx timeout
18:47:38 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084149, &(0x7f0000000540))

18:47:38 executing program 1:
pwritev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0)

[ 2813.627956][ T2396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2813.668801][T22892] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 2813.782484][ T2395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2813.884274][ T2395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2813.922533][T22892] usb 6-1: Using ep0 maxpacket: 32
[ 2814.059862][T22892] usb 6-1: config 0 has an invalid interface number: 178 but max is 1
[ 2814.071363][T22892] usb 6-1: config 0 has no interface number 1
[ 2814.077696][T22892] usb 6-1: config 0 interface 178 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2814.087888][T22892] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
18:47:39 executing program 1:
add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)

18:47:39 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080))

[ 2814.109061][T24889] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 2814.359379][T24889] usb 5-1: Using ep0 maxpacket: 8
[ 2814.439863][T22892] usb 6-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=d7.11
[ 2814.449485][T22892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2814.457710][T22892] usb 6-1: Product: syz
[ 2814.465419][T22892] usb 6-1: Manufacturer: syz
[ 2814.470308][T22892] usb 6-1: SerialNumber: syz
18:47:39 executing program 0:
socket(0x23, 0x0, 0x13b045ac)

18:47:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080000000015c79800002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000fc0)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_b, @random="0340654ff36a", {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x6, [{0x16}, {0x36, 0x1}, {0x36}, {0x28}, {0x2, 0x1}, {0xb, 0x1}]}, @val={0x2d, 0x1a, {0x2000, 0x3, 0x2, 0x0, {0x7fffffff, 0xa0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x4, 0x1}}, [{0xdd, 0x1a, "724257bc12a14eeaaafc808fd84605ee460ce5205d748307085c"}, {0xdd, 0xb1, "8a145c45c795f26f8c1c08b01f1ce23d87b37556e58b7dc5cec6ce58e1ede7da82d6a534251abc2c8f80178b4967cf10743381abaf54bcc4d4dc7d703d81b12d14a9cf0a9c56fb5d6e5b0331c629d77fc37f7b227dcb560efe72b8eb5ed7bd3d28578a011e598c3336d1a1d83f2e08230a80cf00d75c15f38546c5d96874e268a4ca7a6f80dc637561672b2ae5aae5c60509c437ec53a4d7c3f221529c9e7c61a5b294a25646d1e7e3e962c16df8412aa5"}, {0xdd, 0x37, "0621ee4ebcbb48c59eaa583a4421ac414c96c699cf052fd408cf59e974340828687e8d13572656d362837e3b33b03c4747a5b03db4be58"}, {0xdd, 0xa2, "7459d09a6aae505bbb2695371c6dea3cd98b5b931e87c68dad692064da3f45e25ed4069566b70d9164ab7e4d7c8a923465c47dce707d40ed9398b8caac802f0a699e67b37cd71e215993da3588500f14e4e3f1d680c8f4ffcff399b01dcc8f6576125566a386322155a31da88eb76de2b02dc1ae9b5eda5e70916885d5ef986403beb26b2f4ecec6094fe83c01014e6c70b5a5f670d1444f0996099ac3ab8f174635"}, {0xdd, 0x77, "bd90d054ee6d462b5b6d107440e9492b42b56bbc3510952373df68ec88699059c80282627b174fc7690b4da7ed1ca65dcb3e68e07a97cd8e706055498573420f394184bedb7135ae794f6360df41323e66724bb0fc05ce56fc3461b74b43f8a91db4f4cd4e4d43aa98213edd508b119ecc03002d125600"}, {0xdd, 0xc7, "256e61109577b5440339565f2fe7fc1f03086f601fbcb963aa8a39992ffe1a628579a29412b047962d8cf249d04f903fe240f1ebbe9b9e3e4e817a8db9ca5d9da05650a5818ee2da859eec0eb7c905279dc5742d416dbb847b8def846e26bf2fdb34fae1c5e084d09fed2be9e01c8dae145c4477a1b87a1e0c840026b2ab6b1b2490e1bf2658add3501f37e1360480ea57233e5836deb7dd7f3e859458a054698bf398cfffc74a681d7de4e926a11f250113dd72860a002d40455adf341f26148c2dc2497177f1"}, {0xdd, 0xf9, "38bf646ca80d0c7a272eedfcf3fb301db8b05304a0bc084b85990a467e97e99da14e5d7138b25e78f989d412a9f8a144160029e9d03fc455a29a699058fd1d663efafe8b5d59adfd315431e81354c165df09f3d13e42f0ebeb58c2e129b2a5d42fadd08d053b51d4355dddd84ef2ee67d113f6129c26057c10f61b93a46d9738f5af95e133dc2ab4ad76fc55f06558c0d19c4aff11abd8da7a338662bb15f9d45d89ee1c771bea01c932fe33cac0aa2b49be0768e31a5c7e7ca851e0fd5c7de08b968d6ab8fd7fd00f2e3cb1eae138149d0651b3456e7df0db0904b70dc2461ea5391130bf76c21ecece5850d75f4d016eba6aef951ff5f4ac"}, {0xdd, 0x78, "9a66a4539bc082bb52476a2f4b6bd728e5d4367251e65ac346067e9ee3ad04dd9457feeecf24e0a1d367c55833c29a0b95ea079e4298be2fb587bbf581934c80a1c13ed7a92b89e779a094b2c3e9c5c5fe68715d4f88254140c8826a3342e9555bf3e51b2de28c554d5591b85459972bc2a34a7362a00e25"}, {0xdd, 0x7, "93e36e9e61962a"}, {0xdd, 0xb6, "4a635a737b6838bb76696eca43a6877249209bea594a8cc543eeb29af49faf1f0084471e14b3473a9aef40c6659f326e8d88097ffd948d96dbe345c9f84d9d75190d97a7c65b4d6a3b44ef1f4cddf86e4560eb075953cf7690bc1e8b7080242255cf57dae234f21d1c77c03c894f35a21360d15f9aaabd0093afdc20774c78eb4fd7f79da97b3a6b4e460a71a6eba5794d6cedd677d84bef72c384fb35f46e5387eadbae9e29bdf61a8bbbba1496848328c4340a5e5b"}]}, 0x566)

18:47:39 executing program 1:
pipe2(&(0x7f0000000600)={<r0=>0xffffffffffffffff}, 0x0)
readahead(r0, 0x0, 0x0)

[ 2814.508859][T22892] usb 6-1: config 0 descriptor??
[ 2814.522886][T24889] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 2814.532926][T24889] usb 5-1: config 1 has no interface number 1
[ 2814.539954][T24889] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2814.814821][T22892] usb 6-1: Found UVC 0.00 device syz (174f:8a31)
[ 2814.821716][T22892] usb 6-1: No valid video chain found.
[ 2814.849476][T24889] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2814.858889][T24889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2814.867145][T24889] usb 5-1: Product: ࠾
[ 2814.874376][T24889] usb 5-1: Manufacturer: 䐊
[ 2814.879765][T24889] usb 5-1: SerialNumber: syz
[ 2814.949499][T22892] usb 6-1: USB disconnect, device number 86
[ 2815.052263][ T2437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2815.103124][ T2439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2815.319647][T24889] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc
18:47:40 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}]}, 0x38}}, 0x0)

18:47:40 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000080))

18:47:40 executing program 0:
r0 = openat$uhid(0xffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000500)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'h'}}, 0x119)

[ 2815.537355][T24889] usb 5-1: USB disconnect, device number 57
[ 2815.706762][ T5890] hid-generic 0000:0000:0000.006C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 2815.727154][ T1268] udevd[1268]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
18:47:41 executing program 4:
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e780c2000000bbbbbbbbbbbb08"], 0x0)

18:47:41 executing program 1:
keyctl$get_persistent(0x9, 0x0, 0x0)

18:47:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0}) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080000000015c79800002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000fc0)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_b, @random="0340654ff36a", {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x6, [{0x16}, {0x36, 0x1}, {0x36}, {0x28}, {0x2, 0x1}, {0xb, 0x1}]}, @val={0x2d, 0x1a, {0x2000, 0x3, 0x2, 0x0, {0x7fffffff, 0xa0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x4, 0x1}}, [{0xdd, 0x1a, "724257bc12a14eeaaafc808fd84605ee460ce5205d748307085c"}, {0xdd, 0xb1, "8a145c45c795f26f8c1c08b01f1ce23d87b37556e58b7dc5cec6ce58e1ede7da82d6a534251abc2c8f80178b4967cf10743381abaf54bcc4d4dc7d703d81b12d14a9cf0a9c56fb5d6e5b0331c629d77fc37f7b227dcb560efe72b8eb5ed7bd3d28578a011e598c3336d1a1d83f2e08230a80cf00d75c15f38546c5d96874e268a4ca7a6f80dc637561672b2ae5aae5c60509c437ec53a4d7c3f221529c9e7c61a5b294a25646d1e7e3e962c16df8412aa5"}, {0xdd, 0x37, "0621ee4ebcbb48c59eaa583a4421ac414c96c699cf052fd408cf59e974340828687e8d13572656d362837e3b33b03c4747a5b03db4be58"}, {0xdd, 0xa2, "7459d09a6aae505bbb2695371c6dea3cd98b5b931e87c68dad692064da3f45e25ed4069566b70d9164ab7e4d7c8a923465c47dce707d40ed9398b8caac802f0a699e67b37cd71e215993da3588500f14e4e3f1d680c8f4ffcff399b01dcc8f6576125566a386322155a31da88eb76de2b02dc1ae9b5eda5e70916885d5ef986403beb26b2f4ecec6094fe83c01014e6c70b5a5f670d1444f0996099ac3ab8f174635"}, {0xdd, 0x77, "bd90d054ee6d462b5b6d107440e9492b42b56bbc3510952373df68ec88699059c80282627b174fc7690b4da7ed1ca65dcb3e68e07a97cd8e706055498573420f394184bedb7135ae794f6360df41323e66724bb0fc05ce56fc3461b74b43f8a91db4f4cd4e4d43aa98213edd508b119ecc03002d125600"}, {0xdd, 0xc7, "256e61109577b5440339565f2fe7fc1f03086f601fbcb963aa8a39992ffe1a628579a29412b047962d8cf249d04f903fe240f1ebbe9b9e3e4e817a8db9ca5d9da05650a5818ee2da859eec0eb7c905279dc5742d416dbb847b8def846e26bf2fdb34fae1c5e084d09fed2be9e01c8dae145c4477a1b87a1e0c840026b2ab6b1b2490e1bf2658add3501f37e1360480ea57233e5836deb7dd7f3e859458a054698bf398cfffc74a681d7de4e926a11f250113dd72860a002d40455adf341f26148c2dc2497177f1"}, {0xdd, 0xf9, "38bf646ca80d0c7a272eedfcf3fb301db8b05304a0bc084b85990a467e97e99da14e5d7138b25e78f989d412a9f8a144160029e9d03fc455a29a699058fd1d663efafe8b5d59adfd315431e81354c165df09f3d13e42f0ebeb58c2e129b2a5d42fadd08d053b51d4355dddd84ef2ee67d113f6129c26057c10f61b93a46d9738f5af95e133dc2ab4ad76fc55f06558c0d19c4aff11abd8da7a338662bb15f9d45d89ee1c771bea01c932fe33cac0aa2b49be0768e31a5c7e7ca851e0fd5c7de08b968d6ab8fd7fd00f2e3cb1eae138149d0651b3456e7df0db0904b70dc2461ea5391130bf76c21ecece5850d75f4d016eba6aef951ff5f4ac"}, {0xdd, 0x78, "9a66a4539bc082bb52476a2f4b6bd728e5d4367251e65ac346067e9ee3ad04dd9457feeecf24e0a1d367c55833c29a0b95ea079e4298be2fb587bbf581934c80a1c13ed7a92b89e779a094b2c3e9c5c5fe68715d4f88254140c8826a3342e9555bf3e51b2de28c554d5591b85459972bc2a34a7362a00e25"}, {0xdd, 0x7, "93e36e9e61962a"}, {0xdd, 0xb6, "4a635a737b6838bb76696eca43a6877249209bea594a8cc543eeb29af49faf1f0084471e14b3473a9aef40c6659f326e8d88097ffd948d96dbe345c9f84d9d75190d97a7c65b4d6a3b44ef1f4cddf86e4560eb075953cf7690bc1e8b7080242255cf57dae234f21d1c77c03c894f35a21360d15f9aaabd0093afdc20774c78eb4fd7f79da97b3a6b4e460a71a6eba5794d6cedd677d84bef72c384fb35f46e5387eadbae9e29bdf61a8bbbba1496848328c4340a5e5b"}]}, 0x566)

18:47:41 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000080))

18:47:41 executing program 0:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0xfffffd9d)
sendfile(r1, r2, 0x0, 0x8000002b)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffd9d)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001740)=0x14)

18:47:41 executing program 1:
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}]}, 0x20}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'})
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

18:47:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="c6cd932a843c69382309990f18a5ad26add42eea93f598ea052add45f96da7b21546770289bfca4c87f6ec76c760456920181bc754f837293ebd3dde9c6fed64f118f464b43889d54a5c9bda"], 0x24}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r3=>0x0, @initdev, @empty}, &(0x7f0000000540)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@bridge_newvlan={0x30, 0x70, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x20000080)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:41 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r3 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000c40)=0xe8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000540)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc, &(0x7f0000000b00)=[{&(0x7f0000005580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x1644}, {&(0x7f0000000600)={0x2a4, 0x32, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@generic="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", @nested={0x189, 0x82, 0x0, 0x1, [@generic="d05b3874ea2b595b3b3de0ec39c41b25dfb1d3e7da9ba5e6515dbcbac361740ddc50306010467e1ec69bfe1e66afd2147f4d5095b7ff9d0165788ee3bc640bf5347fb4ce39f44682809131ae8003d1f2faa5001338185e29b9897e3f52c89024114eea", @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @generic="c155737adfe886ddfbb0373498160e0fd6de65bb81ca7ebfe7bd91f0b97b1930da27a670bb5101dfe33ab03050510a6dff21cc3796eecf99970c93711381fd795eb99d85919363fc27922589883ddd980eb90f04815f411449888431242a64cceb263985d8b4a7457fac6b17382b7df10089d8c6d0405961927279a6acb21ddbd67b9e2d578d1f5355bc06f1d45160d474684b6c4e253fb742e3e2", @typed={0x8, 0x45, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="2f31e29b6e50fde8085f369037ca4762d1eb6be865518750bdf991afa313f9f21e29b3407af4948647e54ec64cb7464566a9dbf2d9f302c5919ada1f854282b6b806d1a22971ba8529e357a17c237555eeb3b3991bbd1ae81e8a0e6e261b172ab639ccfae3a6ec051a0b49bcbe9ebede448a40b7a1c458"]}, @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x38}]}, 0x2a4}], 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="2000000000000000010000000100000092a4ab1769805400a9d0a76c643bef0ee9d020e823cc6046475b9f5b2564af68438d21d0bf03b2603dbf0e7fd34d47f2c462f9d6a79114f4e4b1e9dc19de93db348c1209bc20d4298b4b3f31b6e0fb964c281fc745af564c6ed016322fa20fcb8561f6367e61931cbc12f6141fa993c1e37b35f01d3c5c92ec913c5560be2fe28b06fd8ecc436e337fdc45413319ca02e0cb40779ec3c4a49b69debdc8c500000004000000000000000000000026e3950784741bfc78568c90ca8cbdfa14e23ef812e5bacf23c783b70042f69523b4933a948946737d7794c2594096abeb063c25a86196", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x4000)
write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12)
r5 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, &(0x7f00000000c0))
read(r5, &(0x7f0000000280)=""/4096, 0x1000)
write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200))

18:47:42 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000080))

18:47:42 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, &(0x7f00000000c0), 0xfffffc6a, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10)

[ 2818.096254][ T2603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:43 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0)

18:47:43 executing program 0:
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x268}}, 0x0)

18:47:43 executing program 5:
pselect6(0x40, &(0x7f0000000040)={0x1}, 0x0, 0x0, 0x0, 0x0)

[ 2818.838932][ T2597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:47:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x4}]}, 0x30}}, 0x0)

[ 2820.120101][ T2673] binder: 2672:2673 ioctl 400c620e 0 returned -14
18:47:46 executing program 5:
socketpair(0xa, 0x806, 0x0, &(0x7f0000000000))

18:47:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="c6cd932a843c69382309990f18a5ad26add42eea93f598ea052add45f96da7b21546770289bfca4c87f6ec76c760456920181bc754f837293ebd3dde9c6fed64f118f464b43889d54a5c9bda"], 0x24}}, 0x0) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r3=>0x0, @initdev, @empty}, &(0x7f0000000540)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@bridge_newvlan={0x30, 0x70, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x20000080) (async, rerun: 32)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (rerun: 32)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:47:47 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0)

18:47:47 executing program 0:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$instantiate_iov(0x6, r0, 0x0, 0x0, 0x0)

18:47:47 executing program 1:
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fchown(r0, 0x0, 0x0)

[ 2823.955541][ T2760] binder: 2756:2760 ioctl 400c620e 0 returned -14
[ 2825.249546][ T2753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2826.069769][T26324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2826.210642][T26324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2826.404599][T26324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2826.552813][T26324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2828.380766][T26324] hsr_slave_0: left promiscuous mode
[ 2828.389576][T26324] hsr_slave_1: left promiscuous mode
[ 2828.403226][T26324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2828.411128][T26324] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2828.427780][T26324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2828.438014][T26324] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2828.450591][T26324] bridge_slave_1: left allmulticast mode
[ 2828.456449][T26324] bridge_slave_1: left promiscuous mode
[ 2828.465576][T26324] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2828.486784][T26324] bridge_slave_0: left allmulticast mode
[ 2828.495211][T26324] bridge_slave_0: left promiscuous mode
[ 2828.501916][T26324] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2828.552798][T26324] veth1_macvtap: left promiscuous mode
[ 2828.558644][T26324] veth0_macvtap: left promiscuous mode
[ 2828.564510][T26324] veth1_vlan: left promiscuous mode
[ 2828.570275][T26324] veth0_vlan: left promiscuous mode
[ 2829.625083][T28216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2829.640766][T28216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2829.664059][T28216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2829.684221][T28216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2829.694687][T28216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2829.703633][T28216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2829.926004][T26324] team0 (unregistering): Port device team_slave_1 removed
[ 2829.958648][T26324] team0 (unregistering): Port device team_slave_0 removed
[ 2829.990077][T26324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2830.029796][T26324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2830.247408][T26324] bond0 (unregistering): Released all slaves
[ 2831.302126][ T2818] chnl_net:caif_netlink_parms(): no params data found
[ 2831.769613][T28216] Bluetooth: hci3: command 0x0409 tx timeout
[ 2832.484325][ T2818] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2832.493718][ T2818] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2832.504151][ T2818] bridge_slave_0: entered allmulticast mode
[ 2832.515279][ T2818] bridge_slave_0: entered promiscuous mode
[ 2832.591682][ T2818] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2832.599751][ T2818] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2832.607634][ T2818] bridge_slave_1: entered allmulticast mode
[ 2832.617061][ T2818] bridge_slave_1: entered promiscuous mode
[ 2832.891199][ T2818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2833.047926][ T2818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2833.250952][ T2818] team0: Port device team_slave_0 added
[ 2833.328089][ T2818] team0: Port device team_slave_1 added
[ 2833.508051][ T2818] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2833.515343][ T2818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2833.541879][ T2818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2833.587967][ T2818] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2833.596374][ T2818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2833.622997][ T2818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2833.848842][T28216] Bluetooth: hci3: command 0x041b tx timeout
[ 2833.855000][ T2818] hsr_slave_0: entered promiscuous mode
[ 2833.890860][ T2818] hsr_slave_1: entered promiscuous mode
[ 2833.917849][ T2818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2833.926124][ T2818] Cannot create hsr debugfs directory
[ 2835.037453][ T2818] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2835.080425][ T2818] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2835.120810][ T2818] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2835.177873][ T2818] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2835.740419][ T2818] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2835.802361][ T2818] 8021q: adding VLAN 0 to HW filter on device team0
[ 2835.847258][T16190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2835.855017][T16190] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2835.911985][T16190] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2835.919763][T16190] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2835.940806][T28216] Bluetooth: hci3: command 0x040f tx timeout
[ 2836.326759][ T2818] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2836.525205][ T2818] veth0_vlan: entered promiscuous mode
[ 2836.574933][ T2818] veth1_vlan: entered promiscuous mode
[ 2836.692035][ T2818] veth0_macvtap: entered promiscuous mode
[ 2836.716911][ T2818] veth1_macvtap: entered promiscuous mode
[ 2836.795329][ T2818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2836.808939][ T2818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2836.819239][ T2818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2836.829971][ T2818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2836.842527][ T2818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2836.853309][ T2818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2836.871247][ T2818] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2836.911944][ T2818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2836.923616][ T2818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2836.936250][ T2818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2836.946958][ T2818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2836.957052][ T2818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2836.970111][ T2818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2836.985446][ T2818] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2837.026245][ T2818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2837.037244][ T2818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2837.046791][ T2818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2837.055970][ T2818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2837.281041][T26072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2837.289990][T26072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2837.356652][T26072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2837.364778][T26072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2837.557547][ T3189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2837.632758][ T3189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2837.653773][ T3190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2837.704701][ T3190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2838.018455][T28216] Bluetooth: hci3: command 0x0419 tx timeout
[ 2855.780164][ T1210] ieee802154 phy0 wpan0: encryption failed: -22
[ 2855.786893][ T1210] ieee802154 phy1 wpan1: encryption failed: -22
18:48:36 executing program 1:
bpf$OBJ_PIN_PROG(0x1b, 0x0, 0x0)

18:48:36 executing program 5:
getgroups(0x2, &(0x7f00000007c0)=[0x0, 0xee01])

18:48:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r1)

18:48:36 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0)

18:48:36 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r3 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000c40)=0xe8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000540)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc, &(0x7f0000000b00)=[{&(0x7f0000005580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x1644}, {&(0x7f0000000600)={0x2a4, 0x32, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@generic="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", @nested={0x189, 0x82, 0x0, 0x1, [@generic="d05b3874ea2b595b3b3de0ec39c41b25dfb1d3e7da9ba5e6515dbcbac361740ddc50306010467e1ec69bfe1e66afd2147f4d5095b7ff9d0165788ee3bc640bf5347fb4ce39f44682809131ae8003d1f2faa5001338185e29b9897e3f52c89024114eea", @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @generic="c155737adfe886ddfbb0373498160e0fd6de65bb81ca7ebfe7bd91f0b97b1930da27a670bb5101dfe33ab03050510a6dff21cc3796eecf99970c93711381fd795eb99d85919363fc27922589883ddd980eb90f04815f411449888431242a64cceb263985d8b4a7457fac6b17382b7df10089d8c6d0405961927279a6acb21ddbd67b9e2d578d1f5355bc06f1d45160d474684b6c4e253fb742e3e2", @typed={0x8, 0x45, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="2f31e29b6e50fde8085f369037ca4762d1eb6be865518750bdf991afa313f9f21e29b3407af4948647e54ec64cb7464566a9dbf2d9f302c5919ada1f854282b6b806d1a22971ba8529e357a17c237555eeb3b3991bbd1ae81e8a0e6e261b172ab639ccfae3a6ec051a0b49bcbe9ebede448a40b7a1c458"]}, @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x38}]}, 0x2a4}], 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="2000000000000000010000000100000092a4ab1769805400a9d0a76c643bef0ee9d020e823cc6046475b9f5b2564af68438d21d0bf03b2603dbf0e7fd34d47f2c462f9d6a79114f4e4b1e9dc19de93db348c1209bc20d4298b4b3f31b6e0fb964c281fc745af564c6ed016322fa20fcb8561f6367e61931cbc12f6141fa993c1e37b35f01d3c5c92ec913c5560be2fe28b06fd8ecc436e337fdc45413319ca02e0cb40779ec3c4a49b69debdc8c500000004000000000000000000000026e3950784741bfc78568c90ca8cbdfa14e23ef812e5bacf23c783b70042f69523b4933a948946737d7794c2594096abeb063c25a86196", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x4000)
write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12)
r5 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, &(0x7f00000000c0))
read(r5, &(0x7f0000000280)=""/4096, 0x1000)
write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200))

18:48:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="c6cd932a843c69382309990f18a5ad26add42eea93f598ea052add45f96da7b21546770289bfca4c87f6ec76c760456920181bc754f837293ebd3dde9c6fed64f118f464b43889d54a5c9bda"], 0x24}}, 0x0) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r3=>0x0, @initdev, @empty}, &(0x7f0000000540)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@bridge_newvlan={0x30, 0x70, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x20000080) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2871.775744][ T3199] binder: 3193:3199 ioctl 400c620e 0 returned -14
18:48:37 executing program 5:
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="dc", 0x1, 0xfffffffffffffffe)

[ 2871.832681][ T3201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
18:48:37 executing program 1:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10}}}}}]}}]}}, 0x0)

18:48:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001ac0)=ANY=[], 0xf54}}, 0x0)

[ 2872.033415][ T3202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:48:37 executing program 2:
syz_io_uring_setup(0x74e5, &(0x7f0000000100)={0x0, 0x0, 0xa6}, 0x0, 0x0)

18:48:37 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

[ 2872.391054][ T3207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:48:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002ee2ffff07000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x6c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10000}, @NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "873503e507ba5820c556d51043719fd44dad20690b7f9dcf4f3a9f4f312cb69d0dbc715118f7215aa6b82f15a981926e65bf7d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240408d1}, 0x40012)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2e8141, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "cfdd7eb1b672d4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}, @NL80211_ATTR_FILS_ERP_RRK={0x6c, 0xfc, "76cd5ec27d0ac78ee03c5aadbec42357f2a053c88bab79db742a19759d3cd9acab91271cf2b2c04501dbcee7908210a97caefaeb563fbef6175cfd458ea2ae51379c230092357dfa0f0da0a0d9fe92059e07143cf336862f6a10e8eb39e8a86aedcc7abdd5fea789"}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x814}, 0x8000)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000040), 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
dup2(r9, r8)
clock_gettime(0x0, &(0x7f0000000940)={<r10=>0x0, <r11=>0x0})
semtimedop(0x0, &(0x7f0000000900)=[{0x2, 0x6, 0x2000}, {0x3, 0x80, 0x800}, {0x0, 0x1, 0x800}, {0x3, 0x7, 0x400}], 0x4, &(0x7f0000000980)={r10, r11+10000000})
sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40290140}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x40, 0x7]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040080)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2872.538501][ T5890] usb 2-1: new high-speed USB device number 47 using dummy_hcd
18:48:38 executing program 2:
bpf$PROG_LOAD_XDP(0x13, &(0x7f0000000180)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

18:48:37 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xe, 0x0, 0x0, 0x2}, 0x48)

18:48:38 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

[ 2872.778889][ T5890] usb 2-1: Using ep0 maxpacket: 32
[ 2872.899563][ T5890] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2873.021333][ T3228] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[ 2873.069394][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2873.078884][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2873.087112][ T5890] usb 2-1: Product: syz
[ 2873.091650][ T5890] usb 2-1: Manufacturer: syz
[ 2873.096478][ T5890] usb 2-1: SerialNumber: syz
[ 2873.134595][ T3228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2873.174551][ T3213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2873.215069][ T3228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2873.327008][ T3228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2873.400487][ T5890] usb 2-1: USB disconnect, device number 47
[ 2874.592523][T28216] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2874.601652][T28216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2874.614429][T28216] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2874.627962][ T5008] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2874.640998][ T5008] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 2874.651056][ T5008] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2875.322156][ T3249] chnl_net:caif_netlink_parms(): no params data found
[ 2875.925741][ T3249] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2875.935917][ T3249] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2875.944100][ T3249] bridge_slave_0: entered allmulticast mode
[ 2875.953295][ T3249] bridge_slave_0: entered promiscuous mode
[ 2875.976307][ T3249] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2875.984647][ T3249] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2875.994957][ T3249] bridge_slave_1: entered allmulticast mode
[ 2876.004239][ T3249] bridge_slave_1: entered promiscuous mode
[ 2876.163725][ T3249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2876.186998][ T3249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2876.309290][ T3249] team0: Port device team_slave_0 added
[ 2876.341674][ T3249] team0: Port device team_slave_1 added
[ 2876.467900][ T3249] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2876.475164][ T3249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2876.503132][ T3249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2876.524038][ T3249] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2876.532579][ T3249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2876.559987][ T3249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2876.727920][ T3249] hsr_slave_0: entered promiscuous mode
[ 2876.737558][T17952] Bluetooth: hci6: command 0x0409 tx timeout
[ 2876.755252][ T3249] hsr_slave_1: entered promiscuous mode
[ 2876.764201][ T3249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2876.772156][ T3249] Cannot create hsr debugfs directory
[ 2877.829051][ T3249] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2877.857298][ T3249] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2877.881609][ T3249] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2877.899300][ T3249] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2878.309747][ T3249] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2878.367201][ T3249] 8021q: adding VLAN 0 to HW filter on device team0
[ 2878.406127][ T1813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2878.413839][ T1813] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2878.459432][ T1813] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2878.467122][ T1813] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2878.744207][ T3249] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2878.808867][T17952] Bluetooth: hci6: command 0x041b tx timeout
[ 2878.926701][ T3249] veth0_vlan: entered promiscuous mode
[ 2878.976616][ T3249] veth1_vlan: entered promiscuous mode
[ 2879.103087][ T3249] veth0_macvtap: entered promiscuous mode
[ 2879.134176][ T3249] veth1_macvtap: entered promiscuous mode
[ 2879.197243][ T3249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2879.207957][ T3249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2879.218208][ T3249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2879.228936][ T3249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2879.239161][ T3249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2879.249870][ T3249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2879.260009][ T3249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2879.270748][ T3249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2879.286062][ T3249] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2879.340102][ T3249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2879.351403][ T3249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2879.361644][ T3249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2879.372358][ T3249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2879.382458][ T3249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2879.393184][ T3249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2879.403295][ T3249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2879.414026][ T3249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2879.429483][ T3249] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2879.485201][ T3249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2879.494746][ T3249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2879.503879][ T3249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2879.512932][ T3249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2879.723661][T16190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2879.732555][T16190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2879.863379][T16190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2879.872978][T16190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2880.888495][ T5008] Bluetooth: hci6: command 0x040f tx timeout
[ 2881.370368][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 2882.968549][T17952] Bluetooth: hci6: command 0x0419 tx timeout
[ 2917.218737][ T1210] ieee802154 phy0 wpan0: encryption failed: -22
[ 2917.225373][ T1210] ieee802154 phy1 wpan1: encryption failed: -22
18:49:40 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)

18:49:40 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="81f0"], 0x10)

18:49:40 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:40 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

18:49:40 executing program 2:
r0 = socket(0x2, 0xa, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, &(0x7f00000002c0)=[@rthdr={{0x18}}], 0x18}}], 0x1, 0x0)

18:49:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002ee2ffff07000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x6c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10000}, @NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "873503e507ba5820c556d51043719fd44dad20690b7f9dcf4f3a9f4f312cb69d0dbc715118f7215aa6b82f15a981926e65bf7d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240408d1}, 0x40012) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2e8141, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "cfdd7eb1b672d4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}, @NL80211_ATTR_FILS_ERP_RRK={0x6c, 0xfc, "76cd5ec27d0ac78ee03c5aadbec42357f2a053c88bab79db742a19759d3cd9acab91271cf2b2c04501dbcee7908210a97caefaeb563fbef6175cfd458ea2ae51379c230092357dfa0f0da0a0d9fe92059e07143cf336862f6a10e8eb39e8a86aedcc7abdd5fea789"}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x814}, 0x8000)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000040), 0xc) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
dup2(r9, r8) (async)
clock_gettime(0x0, &(0x7f0000000940)={<r10=>0x0, <r11=>0x0})
semtimedop(0x0, &(0x7f0000000900)=[{0x2, 0x6, 0x2000}, {0x3, 0x80, 0x800}, {0x0, 0x1, 0x800}, {0x3, 0x7, 0x400}], 0x4, &(0x7f0000000980)={r10, r11+10000000}) (async)
sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40290140}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x40, 0x7]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040080)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2935.209953][ T3605] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
18:49:40 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

18:49:40 executing program 1:
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x8)

18:49:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

18:49:40 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002ee2ffff07000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x6c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10000}, @NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "873503e507ba5820c556d51043719fd44dad20690b7f9dcf4f3a9f4f312cb69d0dbc715118f7215aa6b82f15a981926e65bf7d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240408d1}, 0x40012) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2e8141, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "cfdd7eb1b672d4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}, @NL80211_ATTR_FILS_ERP_RRK={0x6c, 0xfc, "76cd5ec27d0ac78ee03c5aadbec42357f2a053c88bab79db742a19759d3cd9acab91271cf2b2c04501dbcee7908210a97caefaeb563fbef6175cfd458ea2ae51379c230092357dfa0f0da0a0d9fe92059e07143cf336862f6a10e8eb39e8a86aedcc7abdd5fea789"}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x814}, 0x8000) (async)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000040), 0xc) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
dup2(r9, r8)
clock_gettime(0x0, &(0x7f0000000940)={<r10=>0x0, <r11=>0x0})
semtimedop(0x0, &(0x7f0000000900)=[{0x2, 0x6, 0x2000}, {0x3, 0x80, 0x800}, {0x0, 0x1, 0x800}, {0x3, 0x7, 0x400}], 0x4, &(0x7f0000000980)={r10, r11+10000000}) (async, rerun: 32)
sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40290140}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x40, 0x7]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040080) (rerun: 32)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:49:41 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

[ 2936.001356][ T3620] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[ 2936.152623][ T3620] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[ 2936.296417][ T3620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2937.979853][ T5008] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2937.989097][ T5008] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2937.997772][ T5008] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2938.013280][ T5008] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2938.023866][ T5008] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2938.034710][ T5008] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2938.772641][ T3635] chnl_net:caif_netlink_parms(): no params data found
[ 2939.421279][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2939.430122][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2939.437856][ T3635] bridge_slave_0: entered allmulticast mode
[ 2939.447263][ T3635] bridge_slave_0: entered promiscuous mode
[ 2939.476228][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2939.489920][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2939.497746][ T3635] bridge_slave_1: entered allmulticast mode
[ 2939.507178][ T3635] bridge_slave_1: entered promiscuous mode
[ 2939.663256][ T3635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2939.692255][ T3635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2939.866465][ T3635] team0: Port device team_slave_0 added
[ 2939.891028][ T3635] team0: Port device team_slave_1 added
[ 2940.042760][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2940.051404][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2940.081809][ T3635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2940.089451][T28216] Bluetooth: hci7: command 0x0409 tx timeout
[ 2940.117255][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2940.124535][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2940.154461][ T3635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2940.326783][ T3635] hsr_slave_0: entered promiscuous mode
[ 2940.352510][ T3635] hsr_slave_1: entered promiscuous mode
[ 2940.372349][ T3635] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2940.381002][ T3635] Cannot create hsr debugfs directory
[ 2940.864830][ T3635] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2941.028486][ T3635] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2941.224264][ T3635] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2941.409115][ T3635] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2941.801361][ T3635] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2941.826809][ T3635] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2941.861931][ T3635] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2941.885824][ T3635] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2942.169956][ T5008] Bluetooth: hci7: command 0x041b tx timeout
[ 2942.314296][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2942.372478][ T3635] 8021q: adding VLAN 0 to HW filter on device team0
[ 2942.399843][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2942.407436][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2942.475448][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2942.483198][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2942.725678][ T3635] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2942.931530][ T3635] veth0_vlan: entered promiscuous mode
[ 2942.995130][ T3635] veth1_vlan: entered promiscuous mode
[ 2943.127759][ T3635] veth0_macvtap: entered promiscuous mode
[ 2943.165066][ T3635] veth1_macvtap: entered promiscuous mode
[ 2943.232520][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2943.243900][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.256511][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2943.267515][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.277602][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2943.290769][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.300973][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2943.311692][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.324232][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2943.335063][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.352599][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2943.411818][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2943.422577][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.432831][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2943.445906][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.456882][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2943.470596][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.480871][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2943.491600][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.504093][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2943.514857][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2943.528455][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2943.570787][ T3635] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2943.580278][ T3635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2943.589457][ T3635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2943.598516][ T3635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2943.811920][ T5890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2943.820134][ T5890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2943.926634][T26072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2943.935936][T26072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
18:49:49 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1b, 0x3, &(0x7f00000012c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

18:49:49 executing program 5:
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

18:49:49 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x8, 0x3ff})

18:49:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0xf}}, 0x0)

18:49:49 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="43a06ee42c0889e451c5df04b109b33dea901c4da9d3", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @broadcast, @device_a, @random="732f335f7ce2"}, 0x0, @default, 0x8250, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x3, 0x84, 0x0, 0xff, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xfc, 0x8b}}, @void, @void}, 0x52)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe0, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20, 0xf}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x358}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x262}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xba6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa8c7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x62b4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x53}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x77}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40004}, 0x4004082)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2944.258263][T28216] Bluetooth: hci7: command 0x040f tx timeout
[ 2944.433431][ T3983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:49:49 executing program 0:
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:49 executing program 5:
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

18:49:49 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0))

18:49:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCFLSH(r0, 0x80045439, 0xffefff1f00000000)

[ 2944.593663][ T3983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:49:50 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x5, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})

[ 2944.761063][ T3983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:49:50 executing program 5:
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

18:49:50 executing program 0:
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x200040c1)

18:49:50 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x3)

18:49:50 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x98e)

18:49:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="43a06ee42c0889e451c5df04b109b33dea901c4da9d3", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @broadcast, @device_a, @random="732f335f7ce2"}, 0x0, @default, 0x8250, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x3, 0x84, 0x0, 0xff, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xfc, 0x8b}}, @void, @void}, 0x52)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
dup2(r4, r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe0, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20, 0xf}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x358}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x262}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xba6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa8c7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x62b4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x53}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x77}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40004}, 0x4004082) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:49:50 executing program 5:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

18:49:50 executing program 0:
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:51 executing program 1:
process_vm_readv(0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/48, 0x30}, {0x0}], 0x2, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000440)=""/4096, 0x1000}, {0x0}], 0x3, 0x0)

18:49:51 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="d2"})

18:49:51 executing program 0:
r0 = epoll_create(0x0)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="43a06ee42c0889e451c5df04b109b33dea901c4da9d3", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @broadcast, @device_a, @random="732f335f7ce2"}, 0x0, @default, 0x8250, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x3, 0x84, 0x0, 0xff, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xfc, 0x8b}}, @void, @void}, 0x52)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe0, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20, 0xf}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x358}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x262}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xba6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa8c7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x62b4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x53}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x77}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40004}, 0x4004082) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:49:51 executing program 5:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

18:49:51 executing program 1:
prctl$PR_SET_MM_MAP_SIZE(0x23, 0x2, &(0x7f0000000280))

[ 2946.329374][T28216] Bluetooth: hci7: command 0x0419 tx timeout
[ 2946.401355][ T4031] binder: 4028:4031 ioctl c018620b 0 returned -14
18:49:52 executing program 0:
r0 = epoll_create(0x0)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:52 executing program 5:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3ff})

[ 2946.760470][ T4037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2946.766421][ T4038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:49:52 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/249)

18:49:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r3)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0)

18:49:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2401, 0x82, 0x1}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xff7b26d73aae9dbb}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r6, 0x100, 0x1, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x3}, {0x2, 0x3}, {0x3, 0x4}], "3cac9c5cfe0b43bc"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ffa}, @broadcast, @device_a, @from_mac=@device_b, {0xd, 0x4}}, @ver_80211n={0x0, 0x7fc1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0xb, @random="7267a561d86c5aa5bd257d"}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x7, 0x0, 0xffff, 0x101}}, @val={0x6, 0x2, 0x2}, @val={0x2d, 0x1a, {0x300, 0x0, 0x6, 0x0, {0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x177, 0xf8}}, @void, @void}, 0x67)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:49:52 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0)

18:49:52 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r3)
ioctl$TIOCSLCKTRMIOS(r1, 0x5603, 0x0)

18:49:52 executing program 0:
r0 = epoll_create(0x0)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:53 executing program 0:
epoll_create(0x8)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:49:53 executing program 2:
prctl$PR_SET_MM_MAP_SIZE(0x23, 0x6, &(0x7f0000000280))

18:49:53 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000004600))

18:49:53 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0)

18:49:53 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

[ 2947.852068][ T4050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:49:53 executing program 2:
prctl$PR_SET_MM_MAP_SIZE(0x23, 0x5, &(0x7f0000000280))

18:49:53 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/asound/seq/timer\x00', 0x0, 0x0)

18:49:53 executing program 0:
epoll_create(0x8)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

[ 2948.710761][ T2724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2948.911030][ T2724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2949.090466][ T2724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2949.194146][ T2724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2951.054122][ T2724] hsr_slave_0: left promiscuous mode
[ 2951.081715][ T2724] hsr_slave_1: left promiscuous mode
[ 2951.103586][ T2724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2951.114074][ T2724] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2951.146962][ T2724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2951.154989][ T2724] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2951.202101][ T2724] bridge_slave_1: left allmulticast mode
[ 2951.207947][ T2724] bridge_slave_1: left promiscuous mode
[ 2951.217159][ T2724] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2951.266435][ T2724] bridge_slave_0: left allmulticast mode
[ 2951.275088][ T2724] bridge_slave_0: left promiscuous mode
[ 2951.282010][ T2724] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2951.379442][ T2724] veth1_macvtap: left promiscuous mode
[ 2951.385162][ T2724] veth0_macvtap: left promiscuous mode
[ 2951.391183][ T2724] veth1_vlan: left promiscuous mode
[ 2951.396701][ T2724] veth0_vlan: left promiscuous mode
[ 2952.406045][T28216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2952.427716][T28216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2952.441881][T28216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2952.467545][T28216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2952.505808][T28216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2952.518309][T28216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2952.949034][ T2724] team0 (unregistering): Port device team_slave_1 removed
[ 2952.985635][ T2724] team0 (unregistering): Port device team_slave_0 removed
[ 2953.020473][ T2724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2953.069424][ T2724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2953.320059][ T2724] bond0 (unregistering): Released all slaves
[ 2954.597173][ T4133] chnl_net:caif_netlink_parms(): no params data found
[ 2954.651371][T28216] Bluetooth: hci3: command 0x0409 tx timeout
[ 2955.805390][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2955.814371][ T4133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2955.822288][ T4133] bridge_slave_0: entered allmulticast mode
[ 2955.831605][ T4133] bridge_slave_0: entered promiscuous mode
[ 2955.860230][ T4133] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2955.867822][ T4133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2955.877221][ T4133] bridge_slave_1: entered allmulticast mode
[ 2955.886423][ T4133] bridge_slave_1: entered promiscuous mode
[ 2956.075923][ T4133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2956.106442][ T4133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2956.337676][ T4133] team0: Port device team_slave_0 added
[ 2956.404556][ T4133] team0: Port device team_slave_1 added
[ 2956.657043][ T4133] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2956.664476][ T4133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2956.694033][ T4133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2956.723331][ T4133] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2956.730797][ T4133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2956.739709][T28216] Bluetooth: hci3: command 0x041b tx timeout
[ 2956.757075][ T4133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2956.914419][ T4133] hsr_slave_0: entered promiscuous mode
[ 2956.926964][ T4133] hsr_slave_1: entered promiscuous mode
[ 2956.951462][ T4133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2956.961110][ T4133] Cannot create hsr debugfs directory
[ 2958.707615][ T4133] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2958.736428][ T4133] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2958.762351][ T4133] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2958.792421][ T4133] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2958.822501][T28216] Bluetooth: hci3: command 0x040f tx timeout
[ 2959.394736][ T4133] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2959.471815][ T4133] 8021q: adding VLAN 0 to HW filter on device team0
[ 2959.510195][T24889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2959.517798][T24889] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2959.574507][T24889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2959.582204][T24889] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2959.972196][ T4133] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2960.271687][ T4133] veth0_vlan: entered promiscuous mode
[ 2960.361359][ T4133] veth1_vlan: entered promiscuous mode
[ 2960.607513][ T4133] veth0_macvtap: entered promiscuous mode
[ 2960.658823][ T4133] veth1_macvtap: entered promiscuous mode
[ 2960.775841][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2960.786669][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2960.796859][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2960.807611][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2960.819672][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2960.830741][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2960.840920][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2960.851672][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2960.861785][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2960.874954][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2960.890988][ T4133] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2960.891069][T28216] Bluetooth: hci3: command 0x0419 tx timeout
[ 2960.984435][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2960.995947][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2961.006119][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2961.019425][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2961.030707][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2961.041404][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2961.053938][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2961.064781][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2961.075686][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2961.089006][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2961.104454][ T4133] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2961.184036][ T4133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2961.195869][ T4133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2961.205321][ T4133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2961.216861][ T4133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2961.472898][T24889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2961.484534][T24889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2961.622728][T26072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2961.633309][T26072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2962.054663][ T4545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2962.156460][ T4549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2962.264809][ T4545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2401, 0x82, 0x1}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xff7b26d73aae9dbb}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r6, 0x100, 0x1, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x3}, {0x2, 0x3}, {0x3, 0x4}], "3cac9c5cfe0b43bc"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) (async)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xff7b26d73aae9dbb}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r6, 0x100, 0x1, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x3}, {0x2, 0x3}, {0x3, 0x4}], "3cac9c5cfe0b43bc"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ffa}, @broadcast, @device_a, @from_mac=@device_b, {0xd, 0x4}}, @ver_80211n={0x0, 0x7fc1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0xb, @random="7267a561d86c5aa5bd257d"}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x7, 0x0, 0xffff, 0x101}}, @val={0x6, 0x2, 0x2}, @val={0x2d, 0x1a, {0x300, 0x0, 0x6, 0x0, {0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x177, 0xf8}}, @void, @void}, 0x67)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:50:08 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0)

18:50:08 executing program 4:
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4)

18:50:08 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = dup(r0)
getsockopt$sock_linger(r1, 0xffff, 0x80, 0x0, 0x0)

18:50:08 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = dup(r0)
getsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

18:50:08 executing program 0:
epoll_create(0x8)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:50:08 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:50:08 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
lseek(r0, 0x0, 0x0)

18:50:08 executing program 2:
munmap(&(0x7f0000ff1000/0xd000)=nil, 0xd000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

18:50:08 executing program 4:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:50:08 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback})

[ 2963.331416][ T4567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:08 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@can_delroute={0x44, 0x19, 0x75530953e1df67d1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "dfd44900"}, 0x6}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "7ba9792e458c62de"}, 0x6}}]}, 0x44}}, 0x0)

18:50:09 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}]})

18:50:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2401, 0x82, 0x1}, 0x18) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xff7b26d73aae9dbb}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r6, 0x100, 0x1, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x3}, {0x2, 0x3}, {0x3, 0x4}], "3cac9c5cfe0b43bc"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) (async, rerun: 32)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ffa}, @broadcast, @device_a, @from_mac=@device_b, {0xd, 0x4}}, @ver_80211n={0x0, 0x7fc1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0xb, @random="7267a561d86c5aa5bd257d"}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x7, 0x0, 0xffff, 0x101}}, @val={0x6, 0x2, 0x2}, @val={0x2d, 0x1a, {0x300, 0x0, 0x6, 0x0, {0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x177, 0xf8}}, @void, @void}, 0x67) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:50:09 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000540)=@string={0x2}}, {0x101, 0x0}]})

18:50:09 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xed, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

18:50:09 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

18:50:09 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x101, 0x0}]})

[ 2964.278692][T10600] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 2964.352566][T26072] usb 5-1: new high-speed USB device number 58 using dummy_hcd
18:50:09 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

[ 2964.399985][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 2964.531269][T10600] usb 6-1: Using ep0 maxpacket: 8
18:50:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x1}}, './file0\x00'})
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x5}, @broadcast}, 0xa)

[ 2964.611651][T26072] usb 5-1: Using ep0 maxpacket: 16
[ 2964.639065][ T5888] usb 3-1: Using ep0 maxpacket: 8
[ 2964.662061][T10600] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 2964.713745][T10600] usb 6-1: language id specifier not provided by device, defaulting to English
[ 2964.763546][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 2964.782210][T26072] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2964.930187][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2964.939646][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2964.947872][ T5888] usb 3-1: Product: syz
[ 2964.952731][ T5888] usb 3-1: SerialNumber: syz
[ 2964.961296][T24889] usb 2-1: new high-speed USB device number 48 using dummy_hcd
18:50:10 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

[ 2965.010385][T26072] usb 5-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.40
[ 2965.022435][T26072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2965.030831][T26072] usb 5-1: Product: syz
[ 2965.035204][T26072] usb 5-1: Manufacturer: syz
[ 2965.040197][T26072] usb 5-1: SerialNumber: syz
[ 2965.079539][T10600] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2965.089051][T10600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2965.097278][T10600] usb 6-1: Product: syz
[ 2965.101808][T10600] usb 6-1: SerialNumber: syz
[ 2965.163715][ T5888] cdc_ether: probe of 3-1:1.0 failed with error -22
[ 2965.240827][T26072] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[ 2965.250721][ T4623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2965.254665][T24889] usb 2-1: Using ep0 maxpacket: 8
[ 2965.342048][T10600] cdc_ether: probe of 6-1:1.0 failed with error -22
[ 2965.427842][ T5888] usb 3-1: USB disconnect, device number 12
[ 2965.438825][T24889] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 2965.522827][T26072] usb 5-1: USB disconnect, device number 58
[ 2965.554009][T10600] usb 6-1: USB disconnect, device number 87
18:50:11 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

[ 2965.802740][T24889] usb 2-1: language id specifier not provided by device, defaulting to English
[ 2965.933391][T24889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2965.943702][T24889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2965.952095][T24889] usb 2-1: Product: syz
[ 2965.956555][T24889] usb 2-1: Manufacturer: syz
[ 2965.964046][T24889] usb 2-1: SerialNumber: syz
[ 2966.074016][ T2729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:50:11 executing program 2:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}})

18:50:11 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0)

[ 2966.232699][T24889] cdc_ether: probe of 2-1:1.0 failed with error -22
18:50:11 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)

[ 2966.456406][T24889] usb 2-1: USB disconnect, device number 48
[ 2966.473501][ T2729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:50:11 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)

[ 2966.671847][ T2729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:50:12 executing program 4:
syz_clone(0x1012c000, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2966.810325][T29561] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 2966.991748][ T2729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2967.060011][T29561] usb 3-1: Using ep0 maxpacket: 32
18:50:12 executing program 1:
syz_clone(0x1004600, 0x0, 0x0, 0x0, 0x0, 0x0)

18:50:12 executing program 5:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ac0)=@generic={0x0, 0x0, 0x18}, 0x18)

18:50:12 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

[ 2967.258702][T29561] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2967.428812][T29561] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2967.438347][T29561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2967.446582][T29561] usb 3-1: Product: syz
[ 2967.451195][T29561] usb 3-1: Manufacturer: syz
[ 2967.456004][T29561] usb 3-1: SerialNumber: syz
18:50:12 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)

[ 2967.962599][T29561] usb 3-1: USB disconnect, device number 13
[ 2969.955521][ T2729] hsr_slave_0: left promiscuous mode
[ 2969.979301][ T2729] hsr_slave_1: left promiscuous mode
[ 2970.001171][ T2729] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2970.010846][ T2729] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2970.036677][ T2729] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2970.044536][ T2729] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2970.056863][ T2729] bridge_slave_1: left allmulticast mode
[ 2970.062871][ T2729] bridge_slave_1: left promiscuous mode
[ 2970.069902][ T2729] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2970.120528][ T2729] bridge_slave_0: left allmulticast mode
[ 2970.126384][ T2729] bridge_slave_0: left promiscuous mode
[ 2970.133092][ T2729] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2970.226437][ T2729] veth1_macvtap: left promiscuous mode
[ 2970.232551][ T2729] veth0_macvtap: left promiscuous mode
[ 2970.238615][ T2729] veth1_vlan: left promiscuous mode
[ 2970.244146][ T2729] veth0_vlan: left promiscuous mode
[ 2971.491075][ T5008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2971.501954][ T5008] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2971.518623][ T5008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2971.549699][ T5008] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2971.585395][ T5008] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2971.614104][ T5008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2971.911862][ T2729] team0 (unregistering): Port device team_slave_1 removed
[ 2971.961539][ T2729] team0 (unregistering): Port device team_slave_0 removed
[ 2972.015597][ T2729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2972.065230][ T2729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2972.427095][ T2729] bond0 (unregistering): Released all slaves
[ 2973.661365][ T4770] chnl_net:caif_netlink_parms(): no params data found
[ 2973.693855][ T5008] Bluetooth: hci3: command 0x0409 tx timeout
[ 2974.943085][ T4770] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2974.950963][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2974.961296][ T4770] bridge_slave_0: entered allmulticast mode
[ 2974.972853][ T4770] bridge_slave_0: entered promiscuous mode
[ 2975.021781][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2975.029575][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2975.037328][ T4770] bridge_slave_1: entered allmulticast mode
[ 2975.046773][ T4770] bridge_slave_1: entered promiscuous mode
[ 2975.265149][ T4770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2975.322989][ T4770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2975.543793][ T4770] team0: Port device team_slave_0 added
[ 2975.587616][ T4770] team0: Port device team_slave_1 added
[ 2975.772383][ T5008] Bluetooth: hci3: command 0x041b tx timeout
[ 2975.815471][ T4770] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2975.826575][ T4770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2975.854842][ T4770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2975.900089][ T4770] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2975.907221][ T4770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2975.936269][ T4770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2976.169086][ T4770] hsr_slave_0: entered promiscuous mode
[ 2976.192423][ T4770] hsr_slave_1: entered promiscuous mode
[ 2976.204418][ T4770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2976.212348][ T4770] Cannot create hsr debugfs directory
[ 2977.638374][ T4770] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2977.665934][ T4770] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2977.699806][ T4770] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2977.725546][ T4770] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2977.854901][ T5008] Bluetooth: hci3: command 0x040f tx timeout
[ 2978.426449][ T4770] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2978.521408][ T4770] 8021q: adding VLAN 0 to HW filter on device team0
[ 2978.555210][T24889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2978.562967][T24889] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2978.646974][T24889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2978.654691][T24889] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2978.676650][ T1210] ieee802154 phy0 wpan0: encryption failed: -22
[ 2978.683448][ T1210] ieee802154 phy1 wpan1: encryption failed: -22
[ 2978.903574][ T4770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2978.917273][ T4770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2979.087675][ T4770] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2979.346281][ T4770] veth0_vlan: entered promiscuous mode
[ 2979.391768][ T4770] veth1_vlan: entered promiscuous mode
[ 2979.540495][ T4770] veth0_macvtap: entered promiscuous mode
[ 2979.567210][ T4770] veth1_macvtap: entered promiscuous mode
[ 2979.637398][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2979.648337][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.658505][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2979.669868][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.679963][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2979.690803][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.700994][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2979.714238][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.724539][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2979.735241][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.750829][ T4770] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2979.807397][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2979.820818][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.831253][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2979.842003][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.854731][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2979.865807][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.876223][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2979.887050][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.897136][ T4770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2979.907832][ T4770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2979.925864][ T4770] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2979.939853][ T5008] Bluetooth: hci3: command 0x0419 tx timeout
[ 2979.986432][ T4770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2979.995549][ T4770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2980.004844][ T4770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2980.013945][ T4770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2980.275295][T10600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2980.285382][T10600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2980.415984][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2980.424392][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2980.686600][ T5195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2980.705440][T24889] wlan1: authenticate with 08:02:11:00:00:00
[ 2980.715954][T24889] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2980.761476][ T6028] wlan1: authenticated
[ 2980.766170][ T6028] mac80211_hwsim hwsim51 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2980.769078][ T5196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2980.779891][ T6028] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2980.856667][ T6028] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2980.862755][ T5195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2980.865815][ T6028] wlan1: associated
[ 2980.893139][ T5195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x1}}, './file0\x00'})
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x5}, @broadcast}, 0xa) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x5}, @broadcast}, 0xa)

18:50:26 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000a00)={0x0, 0xfea7, &(0x7f0000000040)=[{&(0x7f00000008c0)='\x00', 0xffffff18}], 0x1}, 0x0)

18:50:26 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

18:50:26 executing program 4:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xc840)

18:50:26 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18)
mkdir(&(0x7f0000001700)='./file0\x00', 0x0)

18:50:26 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)

18:50:26 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

18:50:26 executing program 2:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18)

18:50:26 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000080)="86", 0x1}, {0x0}, {&(0x7f0000000000)='e', 0x1}], 0x4}, 0x0)

18:50:26 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb37b00, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="85000000860000009500fd9f000000008a479a9cc9ca135552516c6a61eb9c85eee435df000000008000000001f2daa876d6451fcc7ea8064707b82c5e9cc34193"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc2, &(0x7f00000009c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$inet(0x2, 0x3, 0x5)
setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000002100)={<r3=>0x0, @local, @local}, &(0x7f00000020c0)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x8003, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18002b4c421453aec3e8b72004bc7a00f2d05120af2f7ce3a01d1f3bdc33f3f500"/42], &(0x7f0000000080)='GPL\x00', 0x1f, 0xad, &(0x7f0000000340)=""/173, 0x41100, 0x8, '\x00', r3, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xc, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0xedb}, 0x10, r4, r0}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x8, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000002000000000000000000000085100000866e37193cbee03973b69de3"], &(0x7f0000000b40)='GPL\x00', 0x6, 0x3e, &(0x7f0000000b80)=""/62, 0x41000, 0x2, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x1, 0x8, 0x8}, 0x10, r4}, 0x80)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000040)=""/12, &(0x7f00000003c0), &(0x7f0000000440), 0x801, r5, 0x0, 0x21bf000000000000}, 0x38)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0), 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000040)=""/12, &(0x7f00000003c0), &(0x7f0000000440), 0x801, r7, 0x0, 0x21bf000000000000}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x8, &(0x7f0000002140)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="00000000000000006d4bc0fffcffffff18220000", @ANYRES8, @ANYBLOB="00000095000000000000c82ff075656b7a8f000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x3d, &(0x7f0000000140)=""/61, 0x40f00, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xa, 0xffffffff, 0xd1}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r5, r6, 0xffffffffffffffff, r7]}, 0x80)
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x8, &(0x7f0000000540)=@raw=[@alu={0x7, 0x0, 0xa, 0x3, 0x3, 0xfffffffffffffff0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @ldst={0x3, 0x2, 0x0, 0x2, 0x7, 0x18, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xe, 0xd1b, 0x3ff}, 0x10, r4, r8}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
r11 = fcntl$dupfd(r9, 0x0, r10)
sendmsg$IPVS_CMD_SET_SERVICE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffff7f00000000000000002b3502001000e80f"], &(0x7f0000000040)='GPL\x00', 0xfffffa7c, 0xe1, &(0x7f0000000080)=""/225, 0x41000, 0x4, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x10, 0x60, 0x7}, 0x10, r4, r11}, 0x80)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x12, &(0x7f00000005c0)=@raw=[@map_fd, @generic={0xfd, 0xc, 0xa, 0x6, 0x1ff}, @func, @map_fd={0x18, 0xa}, @ldst={0x3, 0x0, 0x3, 0xa, 0x3, 0x80, 0x1dcfe61b9fcbc0fb}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit, @map_fd={0x18, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f0000000680)='GPL\x00', 0x2, 0x9a, &(0x7f0000000180)=""/113, 0x41000, 0x2, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0xb9}, 0x10, r4}, 0x80)
r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
r13 = dup(r12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb37b00, 0x1000006, 0x28011, r13, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x67}, @generic={0x6, 0x4, 0x3, 0xfffc, 0x6}, @ldst={0x3, 0x0, 0x0, 0x0, 0xa, 0xffffffffffffffe0}], &(0x7f0000000080)='GPL\x00', 0x5, 0x3b, &(0x7f00000000c0)=""/59, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x6, 0x56}, 0x10, r4, r13}, 0x80)

18:50:26 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x11}}}}}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}]}, 0x40}}, 0x0)

18:50:27 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8)

18:50:27 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x1}}, './file0\x00'})
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x5}, @broadcast}, 0xa)

18:50:27 executing program 2:
modify_ldt$write2(0x11, &(0x7f0000000000), 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002500), 0x10)
fsopen(&(0x7f00000026c0)='befs\x00', 0x1)
syz_clone(0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, &(0x7f0000003140))
ioprio_set$uid(0x3, 0x0, 0x4004)

18:50:27 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x5, 0x1f, 0x8000, 0x5}, 0x8)

18:50:27 executing program 5:
r0 = socket(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000040)={'wlan0\x00'})

18:50:27 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8)

[ 2982.500969][ T5235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:27 executing program 5:
r0 = socket(0x1d, 0x3, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000080)={'tunl0\x00', 0x0})

18:50:27 executing program 1:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

18:50:28 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8)

18:50:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000029bd7000ffdbdf25810000000800bc03456776b613fc0de0051b8e01bdcfe2b718ec7f987631a85c0da8c0d7b74bc6484e83640193e843ddaeb42267d65badc4911aa46ebcd6d7eb3b83490aee41311fbf6545c57872944a2e3b3cf372d3fd704ca38775b33c0b119545ddd8c900acb2bcd79e10a7aa256de6f116091eb29c7a61a1e85cc8f5587b2d156f8caaaee25e912102981b656af753842ecc51f575", @ANYRES32=r2, @ANYBLOB="0c009900b2e300006e0000000a0006000802110000010000040067000a0006000802110000000000060066001c0000000600660010000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="24df00001dd4ae2bc847ce4dc3d9662a2f1f5c30386fc01c8502bb764df3fdf3295fd25c8a861e4230ed94cd3f759bf736a8c44e474a81899672aabdc6967838fb9e33fda13f4a582a4b36e03e0651bc91770dd716a2e74d91a7c083d037fe802724400ffadc8bb4b9bb3bbd2fb71fa6d09fb8d60b8b710285b591fb311d39", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:50:28 executing program 4:
r0 = socket(0x2, 0x3, 0x1)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

18:50:28 executing program 5:
r0 = socket(0x1d, 0x3, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f0000000080)={'tunl0\x00', 0x0})

18:50:28 executing program 2:
modify_ldt$write2(0x11, &(0x7f0000000000), 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002500), 0x10)
fsopen(&(0x7f00000026c0)='befs\x00', 0x1)
syz_clone(0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, &(0x7f0000003140))
ioprio_set$uid(0x3, 0x0, 0x4004)

[ 2983.161143][ T5256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2983.211384][T24889] usb 2-1: new high-speed USB device number 49 using dummy_hcd
18:50:28 executing program 0:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8936, 0x0)

[ 2983.306299][ T5256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2983.468927][T24889] usb 2-1: Using ep0 maxpacket: 32
[ 2983.469615][ T5259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:28 executing program 4:
r0 = socket(0x1d, 0x3, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8993, &(0x7f0000000080)={'tunl0\x00', 0x0})

18:50:28 executing program 5:
r0 = socket(0x1d, 0x3, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}})

[ 2983.589005][T24889] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
18:50:29 executing program 0:
syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @local, @val, {@ipv6}}, 0x0)

[ 2983.800402][T24889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2983.810665][T24889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2983.821884][T24889] usb 2-1: Product: syz
[ 2983.826270][T24889] usb 2-1: Manufacturer: syz
[ 2983.831261][T24889] usb 2-1: SerialNumber: syz
18:50:29 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="60000000ffff000003000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000ff01000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="24000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="60000000ffff000003000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="10000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="34000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="10000000ffff000001000000", @ANYRES32, @ANYBLOB="60000000ffff000003000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="10000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='`'], 0x210}, 0x0)

18:50:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async, rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
dup2(r4, r3)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000029bd7000ffdbdf25810000000800bc03456776b613fc0de0051b8e01bdcfe2b718ec7f987631a85c0da8c0d7b74bc6484e83640193e843ddaeb42267d65badc4911aa46ebcd6d7eb3b83490aee41311fbf6545c57872944a2e3b3cf372d3fd704ca38775b33c0b119545ddd8c900acb2bcd79e10a7aa256de6f116091eb29c7a61a1e85cc8f5587b2d156f8caaaee25e912102981b656af753842ecc51f575", @ANYRES32=r2, @ANYBLOB="0c009900b2e300006e0000000a0006000802110000010000040067000a0006000802110000000000060066001c0000000600660010000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="24df00001dd4ae2bc847ce4dc3d9662a2f1f5c30386fc01c8502bb764df3fdf3295fd25c8a861e4230ed94cd3f759bf736a8c44e474a81899672aabdc6967838fb9e33fda13f4a582a4b36e03e0651bc91770dd716a2e74d91a7c083d037fe802724400ffadc8bb4b9bb3bbd2fb71fa6d09fb8d60b8b710285b591fb311d39", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async, rerun: 64)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (rerun: 64)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async, rerun: 64)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (rerun: 64)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2984.173460][T24889] cdc_ether: probe of 2-1:1.0 failed with error -22
[ 2984.264896][T24889] usb 2-1: USB disconnect, device number 49
[ 2984.442707][ T5292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2984.567967][ T5292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:30 executing program 1:
lchown(&(0x7f0000000040)='.\x00', 0x0, 0xffffffffffffffff)

18:50:30 executing program 5:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x80, &(0x7f00000001c0), 0x4)

18:50:30 executing program 2:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x2, &(0x7f0000000040)="f011283e", 0x4)

18:50:30 executing program 0:
syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaff2a838a619786dd6082a76f002000009664f5e5fab848834a66c6b278c27696fe"], 0x0)

18:50:30 executing program 4:
r0 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, 0x0)

18:50:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000029bd7000ffdbdf25810000000800bc03456776b613fc0de0051b8e01bdcfe2b718ec7f987631a85c0da8c0d7b74bc6484e83640193e843ddaeb42267d65badc4911aa46ebcd6d7eb3b83490aee41311fbf6545c57872944a2e3b3cf372d3fd704ca38775b33c0b119545ddd8c900acb2bcd79e10a7aa256de6f116091eb29c7a61a1e85cc8f5587b2d156f8caaaee25e912102981b656af753842ecc51f575", @ANYRES32=r2, @ANYBLOB="0c009900b2e300006e0000000a0006000802110000010000040067000a0006000802110000000000060066001c0000000600660010000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="24df00001dd4ae2bc847ce4dc3d9662a2f1f5c30386fc01c8502bb764df3fdf3295fd25c8a861e4230ed94cd3f759bf736a8c44e474a81899672aabdc6967838fb9e33fda13f4a582a4b36e03e0651bc91770dd716a2e74d91a7c083d037fe802724400ffadc8bb4b9bb3bbd2fb71fa6d09fb8d60b8b710285b591fb311d39", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2985.079326][ T5311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:30 executing program 4:
syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaff2a838a619786dd6082a76f002000009664f5e5fab848834a66c6b278c27696fe80"], 0x0)

18:50:30 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$unix(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="10"], 0x10}, 0x0)

18:50:30 executing program 1:
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@broadcast, @remote, @val, {@ipv6}}, 0x0)

18:50:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000006c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x14c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe00000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd94}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x803}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x58}, 0x14)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000780)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @initial, @device_b, @device_a, {0x1, 0x80}}, @a_msdu=[{@device_a, @broadcast, 0xb1, "079763c1f5d8f8dfc37e74da17eca2f5596ab51197c6dc5224469161f43b578b5c3abdf4840960b31b08e408eaf922b4eaff8babf03ea2b7355ed5d8f44a4febd9473b2eb7e2ffd399265f82bcd40b0e9878fbf012a4cba7459e8589232d586d6521943d35fb3184484a95a7f4b087161ad19691b4bd6277f831b7ed1af016194be6f94304e488c9bd6cb42868a77e12f1ee8ee76cd5ee66229a10aaf28934958bad45f6a8bf1712e6b5d7aaacd71cc859"}, {@device_a, @device_b, 0xa2, "1b50130148b29eec3c6df43fa11f2664f66f3520ed804a470d8715f01863d615d2dfd3652b560e396440e00b94aa174528d335433ca28232b085d532dd3a15ddbd9224e1c34e5fd076db91c73d9730c3a4cd08cae9740d373deda47aaac22036d8d38ca4c8bc93842bc01c278e69f52c450faaeb021131d0605fbd692065f2ac343b675cd84d7955bef2e0d7f3971274456f98d2487246b4266f76b454b5f02d866c"}]}, 0x188)

18:50:31 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r0)
connect$inet6(r2, &(0x7f00000001c0)={0x1c, 0x1c, 0x3}, 0x1c)

18:50:31 executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x200, 0x0)

18:50:31 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@cred], 0x60}, 0x0)

18:50:31 executing program 5:
fchownat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0, 0x2000)

18:50:31 executing program 1:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@rights], 0x10}, 0x0)

[ 2985.953200][ T5327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:31 executing program 2:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x26, 0x0, 0x0)

18:50:31 executing program 1:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x2, 0x4)

[ 2986.309620][ T5326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:31 executing program 4:
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000300)={0x1c, 0x1c, 0x2}, 0x1c)

18:50:31 executing program 5:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$unix(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@cred], 0x60}, 0x2f)

18:50:32 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$unix(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred, @rights], 0x70}, 0x0)

18:50:32 executing program 5:
open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)

[ 2987.346321][ T2738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2987.577556][ T2738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2987.872002][ T2738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2988.053120][ T2738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2989.733710][ T2738] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 2990.116657][ T2738] hsr_slave_0: left promiscuous mode
[ 2990.125433][ T2738] hsr_slave_1: left promiscuous mode
[ 2990.140263][ T2738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2990.148008][ T2738] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2990.186797][ T2738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2990.197092][ T2738] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2990.232229][ T2738] bridge_slave_1: left allmulticast mode
[ 2990.240159][ T2738] bridge_slave_1: left promiscuous mode
[ 2990.246999][ T2738] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2990.267297][ T2738] bridge_slave_0: left allmulticast mode
[ 2990.274097][ T2738] bridge_slave_0: left promiscuous mode
[ 2990.280966][ T2738] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2990.338021][ T2738] veth1_macvtap: left promiscuous mode
[ 2990.344106][ T2738] veth0_macvtap: left promiscuous mode
[ 2990.350225][ T2738] veth1_vlan: left promiscuous mode
[ 2990.355748][ T2738] veth0_vlan: left promiscuous mode
[ 2991.359771][T28216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2991.375181][T28216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2991.386530][T28216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2991.419037][T28216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2991.442909][T28216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2991.456080][T28216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2991.902304][ T2738] team0 (unregistering): Port device team_slave_1 removed
[ 2991.960194][ T2738] team0 (unregistering): Port device team_slave_0 removed
[ 2992.005230][ T2738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2992.046516][ T2738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2992.294922][ T2738] bond0 (unregistering): Released all slaves
[ 2993.331436][ T5412] chnl_net:caif_netlink_parms(): no params data found
[ 2993.529024][T28216] Bluetooth: hci3: command 0x0409 tx timeout
[ 2994.652026][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2994.663019][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2994.671015][ T5412] bridge_slave_0: entered allmulticast mode
[ 2994.680336][ T5412] bridge_slave_0: entered promiscuous mode
[ 2994.750536][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2994.758396][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2994.768869][ T5412] bridge_slave_1: entered allmulticast mode
[ 2994.777994][ T5412] bridge_slave_1: entered promiscuous mode
[ 2995.036640][ T5412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2995.101500][ T5412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2995.323644][ T5412] team0: Port device team_slave_0 added
[ 2995.380342][ T5412] team0: Port device team_slave_1 added
[ 2995.619048][ T5008] Bluetooth: hci3: command 0x041b tx timeout
[ 2995.659413][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2995.666561][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2995.696726][ T5412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2995.833879][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2995.841168][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2995.867666][ T5412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2996.234315][ T5412] hsr_slave_0: entered promiscuous mode
[ 2996.270778][ T5412] hsr_slave_1: entered promiscuous mode
[ 2996.302961][ T5412] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2996.311023][ T5412] Cannot create hsr debugfs directory
[ 2997.688631][ T5008] Bluetooth: hci3: command 0x040f tx timeout
[ 2998.058028][ T5412] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2998.083240][ T5412] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2998.117665][ T5412] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2998.141065][ T5412] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2998.658519][ T5412] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2998.732592][ T5412] 8021q: adding VLAN 0 to HW filter on device team0
[ 2998.766423][T16190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2998.774161][T16190] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2998.842692][T16190] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2998.850449][T16190] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2999.185380][ T5412] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2999.387450][ T5412] veth0_vlan: entered promiscuous mode
[ 2999.448298][ T5412] veth1_vlan: entered promiscuous mode
[ 2999.615867][ T5412] veth0_macvtap: entered promiscuous mode
[ 2999.660278][ T5412] veth1_macvtap: entered promiscuous mode
[ 2999.729525][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2999.740311][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2999.750505][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2999.761224][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2999.771448][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2999.784834][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2999.795231][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2999.796265][ T5008] Bluetooth: hci3: command 0x0419 tx timeout
[ 2999.805871][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2999.805941][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2999.806017][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2999.811474][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2999.945276][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2999.956157][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2999.969382][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2999.980201][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2999.991214][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3000.004438][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3000.014763][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3000.025551][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3000.038002][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3000.048894][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3000.066616][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3000.268891][ T5412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3000.277928][ T5412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3000.287226][ T5412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3000.299432][ T5412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3000.549629][T26072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3000.557676][T26072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3000.676902][T16190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3000.685150][T16190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3001.139855][ T5811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3001.165759][T16190] wlan1: authenticate with 08:02:11:00:00:00
[ 3001.176558][T16190] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3001.209262][ T5008] Bluetooth: hci6: command 0x0406 tx timeout
[ 3001.248462][ T5810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3001.250999][ T1813] wlan1: authenticated
[ 3001.263197][ T1813] mac80211_hwsim hwsim53 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 3001.281274][T26072] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3001.327766][ T5811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3001.410738][ T1813] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 3001.538959][ T1813] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
[ 3001.651167][ T1813] wlan1: association with 08:02:11:00:00:00 timed out
18:50:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000006c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x14c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe00000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd94}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x803}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x58}, 0x14)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000780)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @initial, @device_b, @device_a, {0x1, 0x80}}, @a_msdu=[{@device_a, @broadcast, 0xb1, "079763c1f5d8f8dfc37e74da17eca2f5596ab51197c6dc5224469161f43b578b5c3abdf4840960b31b08e408eaf922b4eaff8babf03ea2b7355ed5d8f44a4febd9473b2eb7e2ffd399265f82bcd40b0e9878fbf012a4cba7459e8589232d586d6521943d35fb3184484a95a7f4b087161ad19691b4bd6277f831b7ed1af016194be6f94304e488c9bd6cb42868a77e12f1ee8ee76cd5ee66229a10aaf28934958bad45f6a8bf1712e6b5d7aaacd71cc859"}, {@device_a, @device_b, 0xa2, "1b50130148b29eec3c6df43fa11f2664f66f3520ed804a470d8715f01863d615d2dfd3652b560e396440e00b94aa174528d335433ca28232b085d532dd3a15ddbd9224e1c34e5fd076db91c73d9730c3a4cd08cae9740d373deda47aaac22036d8d38ca4c8bc93842bc01c278e69f52c450faaeb021131d0605fbd692065f2ac343b675cd84d7955bef2e0d7f3971274456f98d2487246b4266f76b454b5f02d866c"}]}, 0x188)

18:50:47 executing program 2:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x25, 0x0, 0x0)

18:50:47 executing program 0:
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x7, 0x4)
sendmsg$unix(r0, &(0x7f0000001d40)={&(0x7f0000000040)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000001c40)=[@rights], 0xc}, 0x0)

18:50:47 executing program 1:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f00000000c0)='cdg\x00', 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000080)='cdg\x00', 0x4)

18:50:47 executing program 4:
r0 = msgget(0x3, 0x0)
msgsnd(r0, &(0x7f0000000ec0)={0x0, "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"}, 0x801, 0x0)

18:50:47 executing program 5:
r0 = socket$inet6(0x18, 0x1, 0x0)
listen(r0, 0x0)

18:50:47 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)

18:50:47 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
getsockopt(r0, 0x0, 0x0, 0x0, 0x0)

[ 3002.476423][ T5834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3002.489615][T16190] wlan1: authenticate with 08:02:11:00:00:00
[ 3002.499224][T16190] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3002.715311][T16190] wlan1: authenticated
[ 3002.725361][T16190] mac80211_hwsim hwsim53 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
18:50:48 executing program 0:
r0 = open$dir(&(0x7f00000017c0)='./file0\x00', 0x7a1d550ac041c79d, 0x0)
readv(r0, &(0x7f0000000440)=[{0x0}], 0x1)

[ 3002.759289][ T5888] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3002.779034][ T5834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:48 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
shutdown(r0, 0x1)
bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8)

18:50:48 executing program 1:
openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/module/nbd', 0x20a002, 0x0)

18:50:48 executing program 4:
write$damon_target_ids(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x15)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040))

18:50:48 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000006c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x14c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe00000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd94}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x803}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x58}, 0x14)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000780)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @initial, @device_b, @device_a, {0x1, 0x80}}, @a_msdu=[{@device_a, @broadcast, 0xb1, "079763c1f5d8f8dfc37e74da17eca2f5596ab51197c6dc5224469161f43b578b5c3abdf4840960b31b08e408eaf922b4eaff8babf03ea2b7355ed5d8f44a4febd9473b2eb7e2ffd399265f82bcd40b0e9878fbf012a4cba7459e8589232d586d6521943d35fb3184484a95a7f4b087161ad19691b4bd6277f831b7ed1af016194be6f94304e488c9bd6cb42868a77e12f1ee8ee76cd5ee66229a10aaf28934958bad45f6a8bf1712e6b5d7aaacd71cc859"}, {@device_a, @device_b, 0xa2, "1b50130148b29eec3c6df43fa11f2664f66f3520ed804a470d8715f01863d615d2dfd3652b560e396440e00b94aa174528d335433ca28232b085d532dd3a15ddbd9224e1c34e5fd076db91c73d9730c3a4cd08cae9740d373deda47aaac22036d8d38ca4c8bc93842bc01c278e69f52c450faaeb021131d0605fbd692065f2ac343b675cd84d7955bef2e0d7f3971274456f98d2487246b4266f76b454b5f02d866c"}]}, 0x188)

18:50:48 executing program 5:
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000340)='/sys/module/ath10k_pci', 0x0, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x1})
ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0)
r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0)
r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000001c0), 0x7b4b46f6bad0a1fb, 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})
ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x403})
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0)
syz_clone(0x80a0000, &(0x7f0000000280)="4c6308616c521fbcb23010c3290053c4118413cdcfdfebc0675c6fc69ec4c93e002f6c24ae74cae2ba75e28beef24db78ea4c837a034c717a44efff10c61704e0eec0381a9e430a6eded2fc32c969671524a5c65184df3911b3978d4d33b72cd9a81e89e95009e6fd5f8ca08f10cc5a0df7bec649305110d70962ab576ad6bf09fc00334c50dff31b85b95a01ee755b8", 0x90, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="d8e5991860942f9bf557a04ba9c65c19353dac23a8c99b13672de3d381c1cdddc56cc20a36d2f385bc3c862ec3c2a5804939a78089acf905067c74531d74e56a032ee0194a89b6b46286929c5a8d7501d7b6f9b2abb9f2031e6a527edf7177ec284e11669451ff9ef53cd5b9bf41811124f2c2a855b94149d533d7211fdd0e455ae2e4402dec67af9b3b680dc9c0ea41b572479b6ac4272127d30dcfe7f310ca36d06065d32ada0ed0c449cc7440")
syz_clone(0x0, &(0x7f00000004c0)="55c3916098a5160e", 0x8, 0x0, 0x0, 0x0)
syz_clone(0x10000000, &(0x7f0000000600)="350d0414f300c48f548fccd5e0681e4b5ee065a2a029fa2ba27eb95a256aca84d7b5f3f3e2df46358984d70cc079df777848c932b20f2340562d308e78d8dfc9460cbe69f07906", 0x47, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="3e3679014e3392d82412e8c32d94d198bf95b8be9e3e6abed1ef21302601835525c8e7d50649cb178465e5521688d4f529c2418898378155b9cbf3ccebc5d2c1977230d84089957d4d62790e97dcff3307e447c3692f6079030aa948987fd06881afbdde3b08976f360689e3f2cf8fbaa8ba78466970449fde9e03311d93294af35b796d8ac374cbb72e30d3a0")

18:50:48 executing program 0:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000080)={[{0x3d, 0x4e00, "462f9759fe4686ed07c75e377e7e9508b1b1f1a1a57a141ae185fe707056314444bc7431daf3b629471666d356011f6cca03261e65fbc015f333744480"}]})

18:50:48 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$unlink(0x9, r0, r1)

18:50:48 executing program 1:
bpf$OBJ_GET_PROG(0x2, 0x0, 0x10)

[ 3003.563655][ T5858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:49 executing program 4:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)

[ 3003.682816][ T5856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:50:49 executing program 2:
request_key(&(0x7f0000000140)='asymmetric\x00', 0x0, 0x0, 0xfffffffffffffffa)

[ 3003.854224][ T5862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3003.929945][ T5888] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
18:50:49 executing program 1:
syz_clone(0x40894000, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3004.063187][ T5888] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
18:50:49 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@initr0], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xa5, &(0x7f0000000080)=""/165, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

[ 3004.265181][ T5888] wlan1: association with 08:02:11:00:00:00 timed out
18:50:49 executing program 2:
r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xc0045878, 0x0)

18:50:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000780)=""/138, &(0x7f0000000840)=0x8a)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000000021100000108021100800f0802110000002000012000000100010882848b960c121824310691922820ff723491567843ca0a663ddcfc57ad8156ceaaa4312a6ddfbccf148e37eeac6ca0787085c50fb7987f9a689d68280498e66c690371bd2a327039e119a3de7db4eaf39fa367876515b92bc9ab5ccaa5e5ae8d7a4e1724ae4532642cb5fe6ce8e157ffec1399be8b233d038174ecf10180e6c5a1e9070db16ee01449683de7df10ee6bf0998c60467709defe054ea821b049b881d467225e36064ed7770e1716aac9266530ee183b374762"], 0x28)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
dup2(r6, r5)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800)
futex(&(0x7f0000000040)=0x2, 0x6, 0x6, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)=0x2, 0x1)

18:50:49 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)

18:50:50 executing program 1:
r0 = openat$nvram(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$nci(r0, 0x0, 0x0)

18:50:50 executing program 4:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x9, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{}, "a9667801961cc0ec", "27edc7b04c19e05a98a1221d86f4abeda263f0d4e134831b02869f2b18cc73de", "da26c8d0", "8d8dc22fa5656151"}, 0x38)

[ 3004.993273][ T1813] wlan1: authenticate with 08:02:11:00:00:00
[ 3005.005807][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3005.006349][ T1813] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3005.147939][ T1813] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 3005.174901][ T5888] wlan1: authenticated
[ 3005.187958][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3005.223651][ T5888] mac80211_hwsim hwsim53 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 3005.241293][T10600] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3005.394113][T10600] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 3005.561045][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3006.161287][ T2738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3006.340561][ T2738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3006.555564][ T2738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:50:51 executing program 0:
r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000018c0), 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)

18:50:51 executing program 2:
r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f00000000c0))

18:50:51 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)={0x0, "0c8231de83478455f8474cf430b90b0e1608968f7bcbdbd44c57441095782726bab03602219935acf022d276ca729dea46341f8d750d94d02f4d786efb467654"}, 0x48, r0)
keyctl$update(0x2, r1, &(0x7f0000000280)='G', 0x1)

18:50:51 executing program 4:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x32, 0x66, 0x62, 0x32, 0x3, 0x66, 0x31, 0x35, 0x64, 0x34]}, &(0x7f0000000180)={0x0, "0c8231de83478455f8474cf430b90b0e1608968f7bcbdbd44c57441095782726bab03602219935acf022d276ca729dea46341f8d750d94d02f4d786efb467654", 0x36}, 0x48, r0)
keyctl$update(0x2, r1, &(0x7f0000000280)="471c5f9bbf417cb8c6d0d784b5139db83b5464e328b0fd8332fdfa9d0fb66fac1a7fbfa84148f689c2484db2da1d3e08dbbf793be1bbe989435ed23b61f8d8b404bf983ca31568450a08369527162d81f2c623fd9ea50209731c09f351b365ad7dd9cd2e11689569aefa4fb04c78e222a06d7f06cd3e0e3b0f48b01c582c158658d73e982d5463cc0751ce93f29a8acc0c24d24c513b1c4a2abf6a69d8a465d3aa373d1ed44e21470ab771dc33e4e1f45e8169584b705367407d9f49fffa5ff62fb6c519ca4ae12e87ec91a032d96cc3dbb7e34539769e3067a4799f0ae6e309ba0b3baee6922a4ae8fb2a155ccf1670829122", 0xf3)

18:50:51 executing program 5:
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0)

[ 3006.777195][ T2738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:50:52 executing program 1:
r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$phonet_pipe(r0, 0x0, 0x0)

18:50:52 executing program 4:
bpf$MAP_CREATE(0x11, &(0x7f00000000c0)=@bloom_filter, 0x48)

[ 3006.952835][ T4694] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
18:50:52 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
setitimer(0x0, &(0x7f0000000100)={{0x0, 0xea60}, {0x0, r0/1000+60000}}, 0x0)

[ 3007.142706][ T4694] wlan1: association with 08:02:11:00:00:00 timed out
[ 3009.632752][ T2738] hsr_slave_0: left promiscuous mode
[ 3009.644624][ T2738] hsr_slave_1: left promiscuous mode
[ 3009.677698][ T2738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3009.685950][ T2738] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3009.720885][ T2738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3009.728816][ T2738] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3009.748969][ T2738] bridge_slave_1: left allmulticast mode
[ 3009.754821][ T2738] bridge_slave_1: left promiscuous mode
[ 3009.761519][ T2738] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3009.804151][ T2738] bridge_slave_0: left allmulticast mode
[ 3009.810338][ T2738] bridge_slave_0: left promiscuous mode
[ 3009.819580][ T2738] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3009.887363][ T2738] veth1_macvtap: left promiscuous mode
[ 3009.893425][ T2738] veth0_macvtap: left promiscuous mode
[ 3009.899457][ T2738] veth1_vlan: left promiscuous mode
[ 3009.904996][ T2738] veth0_vlan: left promiscuous mode
[ 3011.148836][T28216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 3011.157720][T28216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 3011.169677][T28216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 3011.181706][T28216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 3011.194519][T28216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 3011.203436][T28216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 3011.850178][ T2738] team0 (unregistering): Port device team_slave_1 removed
[ 3011.911820][ T2738] team0 (unregistering): Port device team_slave_0 removed
[ 3011.959538][ T2738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3012.022033][ T2738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3012.372596][ T2738] bond0 (unregistering): Released all slaves
[ 3013.289761][T28216] Bluetooth: hci3: command 0x0409 tx timeout
[ 3013.839193][ T5985] chnl_net:caif_netlink_parms(): no params data found
[ 3015.368371][T28216] Bluetooth: hci3: command 0x041b tx timeout
[ 3015.373306][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3015.382322][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3015.390382][ T5985] bridge_slave_0: entered allmulticast mode
[ 3015.399833][ T5985] bridge_slave_0: entered promiscuous mode
[ 3015.510697][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3015.518696][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3015.526668][ T5985] bridge_slave_1: entered allmulticast mode
[ 3015.536347][ T5985] bridge_slave_1: entered promiscuous mode
[ 3015.791660][ T5985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3015.869548][ T5985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3016.092942][ T5985] team0: Port device team_slave_0 added
[ 3016.135509][ T5985] team0: Port device team_slave_1 added
[ 3016.355267][ T5985] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3016.362671][ T5985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3016.391566][ T5985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3016.425307][ T5985] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3016.432999][ T5985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3016.460824][ T5985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3016.685554][ T5985] hsr_slave_0: entered promiscuous mode
[ 3016.730678][ T5985] hsr_slave_1: entered promiscuous mode
[ 3016.749057][ T5985] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3016.756815][ T5985] Cannot create hsr debugfs directory
[ 3017.448604][T28216] Bluetooth: hci3: command 0x040f tx timeout
[ 3018.238542][ T5985] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3018.264548][ T5985] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3018.291866][ T5985] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3018.319627][ T5985] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3019.008436][ T5985] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3019.096422][ T5985] 8021q: adding VLAN 0 to HW filter on device team0
[ 3019.130377][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3019.138002][ T4694] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3019.200996][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3019.208718][ T4694] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3019.529453][T28216] Bluetooth: hci3: command 0x0419 tx timeout
[ 3019.577272][ T5985] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3019.793374][ T5985] veth0_vlan: entered promiscuous mode
[ 3019.886155][ T5985] veth1_vlan: entered promiscuous mode
[ 3020.060446][ T5985] veth0_macvtap: entered promiscuous mode
[ 3020.133502][ T5985] veth1_macvtap: entered promiscuous mode
[ 3020.251004][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3020.262885][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.273154][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3020.286255][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.296394][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3020.307144][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.322707][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3020.333500][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.343685][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3020.356838][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.373082][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3020.441059][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3020.451906][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.462065][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3020.476140][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.486377][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3020.497175][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.509900][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3020.520672][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.530784][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3020.543941][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3020.559460][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3020.637489][ T5985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3020.650517][ T5985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3020.659685][ T5985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3020.668785][ T5985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3020.990242][T16190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3020.999062][T16190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3021.126765][T16190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3021.136387][T16190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3021.505320][ T6374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3021.530347][T16190] wlan1: authenticate with 08:02:11:00:00:00
[ 3021.540054][T16190] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3021.587662][T16190] wlan1: authenticated
[ 3021.609555][T16190] mac80211_hwsim hwsim55 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 3021.623551][ T6374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3021.634238][ T5888] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3021.724618][ T6374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3021.749388][T16190] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 3021.858477][T16190] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
[ 3021.968492][T16190] wlan1: association with 08:02:11:00:00:00 timed out
18:51:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3) (async)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000780)=""/138, &(0x7f0000000840)=0x8a)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000000021100000108021100800f0802110000002000012000000100010882848b960c121824310691922820ff723491567843ca0a663ddcfc57ad8156ceaaa4312a6ddfbccf148e37eeac6ca0787085c50fb7987f9a689d68280498e66c690371bd2a327039e119a3de7db4eaf39fa367876515b92bc9ab5ccaa5e5ae8d7a4e1724ae4532642cb5fe6ce8e157ffec1399be8b233d038174ecf10180e6c5a1e9070db16ee01449683de7df10ee6bf0998c60467709defe054ea821b049b881d467225e36064ed7770e1716aac9266530ee183b374762"], 0x28) (async)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
dup2(r6, r5) (async, rerun: 32)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async, rerun: 32)
futex(&(0x7f0000000040)=0x2, 0x6, 0x6, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)=0x2, 0x1)

18:51:07 executing program 0:
openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/module/cpuidle_haltpoll', 0x0, 0x0)

18:51:07 executing program 1:
r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$phonet_pipe(r0, 0x0, 0x0)

18:51:07 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x80045400, 0x0)

18:51:07 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$clear(0x7, r0)

18:51:07 executing program 2:
r0 = syz_open_dev$vcsu(&(0x7f0000008680), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40086602, &(0x7f0000000100)={{0x2000000}})

18:51:08 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='S', 0x1}], 0x6, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x20}, 0x0)

18:51:08 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
read$msr(r0, &(0x7f0000000100)=""/205, 0xcd)

18:51:08 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5452, &(0x7f0000000080)={{0x1}})

18:51:08 executing program 1:
pselect6(0x2f, &(0x7f0000000040), &(0x7f0000000000), 0x0, 0x0, 0x0)

18:51:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0)

[ 3023.402571][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:51:08 executing program 0:
prctl$PR_GET_SECCOMP(0x15)
syz_open_dev$evdev(0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sync()

18:51:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040), 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
dup2(r4, r3) (async)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000780)=""/138, &(0x7f0000000840)=0x8a)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000000021100000108021100800f0802110000002000012000000100010882848b960c121824310691922820ff723491567843ca0a663ddcfc57ad8156ceaaa4312a6ddfbccf148e37eeac6ca0787085c50fb7987f9a689d68280498e66c690371bd2a327039e119a3de7db4eaf39fa367876515b92bc9ab5ccaa5e5ae8d7a4e1724ae4532642cb5fe6ce8e157ffec1399be8b233d038174ecf10180e6c5a1e9070db16ee01449683de7df10ee6bf0998c60467709defe054ea821b049b881d467225e36064ed7770e1716aac9266530ee183b374762"], 0x28) (async)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040), 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
dup2(r6, r5) (async)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800)
futex(&(0x7f0000000040)=0x2, 0x6, 0x6, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)=0x2, 0x1)

18:51:08 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000001b80)="ec", 0x1)

18:51:08 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000))

18:51:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0)

[ 3023.997806][T16190] wlan1: authenticate with 08:02:11:00:00:00
[ 3024.007601][T16190] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 3024.032127][ T6427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:51:09 executing program 4:
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
sync()

18:51:09 executing program 2:
prctl$PR_GET_SECCOMP(0x15)
prctl$PR_GET_SECCOMP(0x15)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0x5)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, <r0=>0xffffffffffffffff})
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, <r2=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000340)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0})
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0xb4, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff8000}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000700)={r2, 0x0, <r4=>0x0, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, r4], &(0x7f0000000780)=[0x56, 0x7, 0x80000000, 0x3, 0x0, 0x8000, 0xff, 0x5, 0x401], &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x6]})
prctl$PR_GET_SECCOMP(0x15)
syz_genetlink_get_family_id$l2tp(0x0, r1)
sync()

18:51:09 executing program 0:
prctl$PR_GET_SECCOMP(0x15)
syz_open_dev$evdev(0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sync()

18:51:09 executing program 1:
select(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)

[ 3024.400198][ T6433] binder: 6431:6433 ioctl c018620b 0 returned -14
[ 3024.480066][ T6439] binder: 6431:6439 ioctl c00c6211 0 returned -14
[ 3024.511719][ T6420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:51:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @random=0x9, @from_mac, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:51:10 executing program 4:
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000003c0))
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff)

18:51:10 executing program 0:
prctl$PR_GET_SECCOMP(0x15)
syz_open_dev$evdev(0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sync()

18:51:10 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000200))

18:51:10 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xb013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

[ 3024.978540][T16190] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 3025.113429][ T6452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3025.139611][T16190] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
18:51:10 executing program 0:
prctl$PR_GET_SECCOMP(0x15)
syz_open_dev$evdev(0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff)
sync()

18:51:10 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080))

[ 3025.251690][T16190] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 3025.274381][ T6452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3025.390412][ T6452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:51:10 executing program 1:
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x0)

[ 3025.458528][T24889] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 3025.477711][ T6463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:51:10 executing program 5:
pwritev(0xffffffffffffffff, &(0x7f00000026c0)=[{0x0}], 0x1, 0x0, 0x0)

[ 3025.721018][T24889] usb 3-1: Using ep0 maxpacket: 16
18:51:11 executing program 4:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
fcntl$getflags(r0, 0x3)

[ 3025.859384][T24889] usb 3-1: unable to get BOS descriptor or descriptor too short
18:51:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @random=0x9, @from_mac, @device_b}, 0x10) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @random=0x9, @from_mac, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

18:51:11 executing program 1:
setitimer(0x0, &(0x7f0000000080)={{0xffffffffffffff78}}, 0x0)

[ 3025.972877][T24889] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 3025.980844][T24889] usb 3-1: can't read configurations, error -71
18:51:11 executing program 0:
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

18:51:11 executing program 5:
r0 = socket$unix(0x1, 0x5, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000), 0x4)

18:51:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x12, 0x811, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "dfd44ec068b29949"}}}]}, 0x2c}}, 0x0)

18:51:11 executing program 4:
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="13610000120091ef"], 0xfe33)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001500)=ANY=[], 0xfe33)

18:51:11 executing program 1:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r1)

18:51:11 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x1265)

[ 3026.554059][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3026.567713][T22892] wlan1: authenticate with 08:02:11:00:00:00
[ 3026.577879][T22892] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
18:51:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xc302}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)

[ 3026.710596][T22892] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 3026.739616][T22892] wlan1: authenticated
[ 3026.744863][T22892] mac80211_hwsim hwsim55 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 3026.750143][ T6491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3026.771586][ T4694] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 3026.809302][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3026.873049][ T6499] netlink: 24819 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3026.883316][ T6499] netlink: 24819 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3026.955333][T22892] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 3027.037606][    C0] =====================================================
[ 3027.045095][    C0] BUG: KMSAN: uninit-value in ieee80211_prepare_and_rx_handle+0x28ed/0x9690
[ 3027.054198][    C0]  ieee80211_prepare_and_rx_handle+0x28ed/0x9690
[ 3027.060819][    C0]  ieee80211_rx_for_interface+0x88d/0x990
[ 3027.066757][    C0]  ieee80211_rx_list+0x5753/0x6580
[ 3027.072137][    C0]  ieee80211_rx_napi+0x87/0x350
[ 3027.077183][    C0]  ieee80211_tasklet_handler+0x1a0/0x310
18:51:12 executing program 0:
r0 = socket(0xa, 0x3, 0x20)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)

18:51:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x12, 0x811, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "dfd44ec068b29949"}}}]}, 0x2c}}, 0x0)

[ 3027.083205][    C0]  tasklet_action_common+0x391/0xd30
[ 3027.088780][    C0]  tasklet_action+0x26/0x30
[ 3027.093515][    C0]  __do_softirq+0x1b7/0x78f
[ 3027.098381][    C0]  do_softirq+0x9a/0xf0
[ 3027.102730][    C0]  __local_bh_enable_ip+0x99/0xa0
[ 3027.107959][    C0]  local_bh_enable+0x28/0x30
[ 3027.112800][    C0]  __dev_queue_xmit+0x2616/0x50f0
[ 3027.117989][    C0]  __netlink_deliver_tap+0x84d/0xc90
[ 3027.123558][    C0]  netlink_sendskb+0x232/0x260
[ 3027.128609][    C0]  netlink_unicast+0x705/0x1230
[ 3027.133673][    C0]  netlink_ack+0x193b/0x1a60
[ 3027.138520][    C0]  netlink_rcv_skb+0x50a/0x650
[ 3027.143479][    C0]  genl_rcv+0x40/0x60
[ 3027.147683][    C0]  netlink_unicast+0xf28/0x1230
[ 3027.152810][    C0]  netlink_sendmsg+0x122f/0x13d0
[ 3027.157949][    C0]  __sys_sendto+0x781/0xa30
[ 3027.162732][    C0]  __x64_sys_sendto+0x125/0x1c0
[ 3027.167786][    C0]  do_syscall_64+0x41/0xc0
[ 3027.172493][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3027.178677][    C0] 
[ 3027.181094][    C0] Uninit was created at:
[ 3027.185590][    C0]  slab_post_alloc_hook+0x12f/0xb70
[ 3027.191050][    C0]  kmem_cache_alloc_node+0x577/0xa80
[ 3027.196526][    C0]  kmalloc_reserve+0x148/0x470
[ 3027.201578][    C0]  __alloc_skb+0x318/0x740
[ 3027.206179][    C0]  hwsim_cloned_frame_received_nl+0x1b7/0x1410
[ 3027.212636][    C0]  genl_rcv_msg+0x1328/0x13c0
[ 3027.217513][    C0]  netlink_rcv_skb+0x371/0x650
[ 3027.222558][    C0]  genl_rcv+0x40/0x60
[ 3027.226730][    C0]  netlink_unicast+0xf28/0x1230
[ 3027.231838][    C0]  netlink_sendmsg+0x122f/0x13d0
[ 3027.236990][    C0]  __sys_sendto+0x781/0xa30
[ 3027.241766][    C0]  __x64_sys_sendto+0x125/0x1c0
[ 3027.246815][    C0]  do_syscall_64+0x41/0xc0
[ 3027.251493][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3027.257614][    C0] 
[ 3027.260104][    C0] CPU: 0 PID: 6489 Comm: syz-executor.3 Tainted: G        W          6.5.0-syzkaller #0
[ 3027.270075][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 3027.280358][    C0] =====================================================
[ 3027.287407][    C0] Disabling lock debugging due to kernel taint
[ 3027.293746][    C0] Kernel panic - not syncing: kmsan.panic set ...
[ 3027.300277][    C0] CPU: 0 PID: 6489 Comm: syz-executor.3 Tainted: G    B   W          6.5.0-syzkaller #0
[ 3027.310170][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 3027.320360][    C0] Call Trace:
[ 3027.323736][    C0]  <IRQ>
[ 3027.326665][    C0]  dump_stack_lvl+0x1bf/0x240
[ 3027.331551][    C0]  dump_stack+0x1e/0x20
[ 3027.335898][    C0]  panic+0x4d5/0xc70
[ 3027.339990][    C0]  ? add_taint+0x108/0x1a0
[ 3027.344577][    C0]  kmsan_report+0x2d0/0x2d0
[ 3027.349447][    C0]  ? __msan_warning+0x96/0x110
[ 3027.354418][    C0]  ? ieee80211_prepare_and_rx_handle+0x28ed/0x9690
[ 3027.361149][    C0]  ? ieee80211_rx_for_interface+0x88d/0x990
[ 3027.367248][    C0]  ? ieee80211_rx_list+0x5753/0x6580
[ 3027.372743][    C0]  ? ieee80211_rx_napi+0x87/0x350
[ 3027.377967][    C0]  ? ieee80211_tasklet_handler+0x1a0/0x310
[ 3027.383989][    C0]  ? tasklet_action_common+0x391/0xd30
[ 3027.389661][    C0]  ? tasklet_action+0x26/0x30
[ 3027.394522][    C0]  ? __do_softirq+0x1b7/0x78f
[ 3027.399373][    C0]  ? do_softirq+0x9a/0xf0
[ 3027.403892][    C0]  ? __local_bh_enable_ip+0x99/0xa0
[ 3027.409291][    C0]  ? local_bh_enable+0x28/0x30
[ 3027.414209][    C0]  ? __dev_queue_xmit+0x2616/0x50f0
[ 3027.419561][    C0]  ? __netlink_deliver_tap+0x84d/0xc90
[ 3027.425211][    C0]  ? netlink_sendskb+0x232/0x260
[ 3027.430325][    C0]  ? netlink_unicast+0x705/0x1230
[ 3027.435529][    C0]  ? netlink_ack+0x193b/0x1a60
[ 3027.440470][    C0]  ? netlink_rcv_skb+0x50a/0x650
[ 3027.445590][    C0]  ? genl_rcv+0x40/0x60
[ 3027.449920][    C0]  ? netlink_unicast+0xf28/0x1230
[ 3027.455118][    C0]  ? netlink_sendmsg+0x122f/0x13d0
[ 3027.460405][    C0]  ? __sys_sendto+0x781/0xa30
[ 3027.465256][    C0]  ? __x64_sys_sendto+0x125/0x1c0
[ 3027.470457][    C0]  ? do_syscall_64+0x41/0xc0
[ 3027.475231][    C0]  ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3027.481528][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 3027.487557][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 3027.493575][    C0]  __msan_warning+0x96/0x110
[ 3027.498345][    C0]  ieee80211_prepare_and_rx_handle+0x28ed/0x9690
[ 3027.504896][    C0]  ? sta_info_hash_lookup+0x5ff/0x610
[ 3027.510497][    C0]  ieee80211_rx_for_interface+0x88d/0x990
[ 3027.516428][    C0]  ieee80211_rx_list+0x5753/0x6580
[ 3027.521727][    C0]  ? ieee80211_rx_napi+0x47/0x350
[ 3027.526965][    C0]  ieee80211_rx_napi+0x87/0x350
[ 3027.531990][    C0]  ? skb_dequeue+0x1c7/0x2a0
[ 3027.536791][    C0]  ieee80211_tasklet_handler+0x1a0/0x310
[ 3027.542627][    C0]  ? ieee80211_reconfig_filter+0x30/0x30
[ 3027.548447][    C0]  tasklet_action_common+0x391/0xd30
[ 3027.553937][    C0]  ? ieee80211_reconfig_filter+0x30/0x30
[ 3027.559762][    C0]  ? tasklet_unlock+0x40/0x40
[ 3027.564633][    C0]  tasklet_action+0x26/0x30
[ 3027.569317][    C0]  __do_softirq+0x1b7/0x78f
[ 3027.574013][    C0]  do_softirq+0x9a/0xf0
[ 3027.578343][    C0]  </IRQ>
[ 3027.581356][    C0]  <TASK>
[ 3027.584377][    C0]  __local_bh_enable_ip+0x99/0xa0
[ 3027.589594][    C0]  local_bh_enable+0x28/0x30
[ 3027.594327][    C0]  __dev_queue_xmit+0x2616/0x50f0
[ 3027.599503][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 3027.605548][    C0]  __netlink_deliver_tap+0x84d/0xc90
[ 3027.611043][    C0]  netlink_sendskb+0x232/0x260
[ 3027.615985][    C0]  netlink_unicast+0x705/0x1230
[ 3027.621022][    C0]  netlink_ack+0x193b/0x1a60
[ 3027.625813][    C0]  netlink_rcv_skb+0x50a/0x650
[ 3027.630763][    C0]  ? genl_bind+0x450/0x450
[ 3027.635375][    C0]  ? genl_pernet_exit+0x60/0x60
[ 3027.640420][    C0]  genl_rcv+0x40/0x60
[ 3027.644586][    C0]  netlink_unicast+0xf28/0x1230
[ 3027.649627][    C0]  netlink_sendmsg+0x122f/0x13d0
[ 3027.654761][    C0]  ? netlink_getsockopt+0x990/0x990
[ 3027.660137][    C0]  __sys_sendto+0x781/0xa30
[ 3027.664830][    C0]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 3027.670871][    C0]  __x64_sys_sendto+0x125/0x1c0
[ 3027.675907][    C0]  do_syscall_64+0x41/0xc0
[ 3027.680508][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3027.686599][    C0] RIP: 0033:0x7ff96ac7e7dc
[ 3027.691132][    C0] Code: 1a 51 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 60 51 02 00 48 8b
[ 3027.710910][    C0] RSP: 002b:00007ff96bab5f70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 3027.719476][    C0] RAX: ffffffffffffffda RBX: 00007ff96bab6030 RCX: 00007ff96ac7e7dc
[ 3027.727588][    C0] RDX: 0000000000000044 RSI: 00007ff96bab6080 RDI: 0000000000000004
[ 3027.735685][    C0] RBP: 0000000000000000 R08: 00007ff96bab5fc4 R09: 000000000000000c
[ 3027.743785][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 3027.751875][    C0] R13: 0000000000000000 R14: 00007ff96bab6080 R15: 0000000000000000
[ 3027.760074][    C0]  </TASK>
[ 3027.763422][    C0] Kernel Offset: disabled
[ 3027.767806][    C0] Rebooting in 86400 seconds..