promiscuous mode
[  914.230610][  T158] device veth0_vlan left promiscuous mode
[  914.537057][  T158] team0 (unregistering): Port device team_slave_1 removed
[  914.553849][  T158] team0 (unregistering): Port device team_slave_0 removed
[  914.568628][  T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  914.583146][  T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  914.650937][  T158] bond0 (unregistering): Released all slaves
[  917.203679][ T6247] chnl_net:caif_netlink_parms(): no params data found
[  917.297821][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.306462][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state
[  917.314217][ T6247] device bridge_slave_0 entered promiscuous mode
[  917.324010][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state
[  917.331760][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.340159][ T6247] device bridge_slave_1 entered promiscuous mode
[  917.376627][ T6247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  917.390461][ T6247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  917.434092][ T6247] team0: Port device team_slave_0 added
[  917.442436][ T6247] team0: Port device team_slave_1 added
[  917.480635][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_0
[  917.487867][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  917.516705][ T6247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  917.531438][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_1
[  917.539951][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  917.566367][ T6247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  917.612022][ T6247] device hsr_slave_0 entered promiscuous mode
[  917.619196][ T6247] device hsr_slave_1 entered promiscuous mode
[  917.627944][ T6247] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  917.637505][ T6247] Cannot create hsr debugfs directory
[  917.752650][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state
[  917.759932][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state
[  917.767378][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.774543][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state
[  917.833042][ T6247] 8021q: adding VLAN 0 to HW filter on device bond0
[  917.849066][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  917.860718][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state
[  917.869443][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.878399][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  917.893027][ T6247] 8021q: adding VLAN 0 to HW filter on device team0
[  917.905997][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  917.914345][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.921491][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  917.945165][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  917.953525][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[  917.960670][ T5612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  917.987124][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  917.995792][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  918.004251][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  918.025572][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  918.040407][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  918.050482][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  918.077182][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  918.086210][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  918.101615][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0
[  918.125921][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  918.151074][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  918.159412][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  918.168968][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  918.181076][ T6247] device veth0_vlan entered promiscuous mode
[  918.197853][ T6247] device veth1_vlan entered promiscuous mode
[  918.228606][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  918.237770][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  918.252440][ T6247] device veth0_macvtap entered promiscuous mode
[  918.264143][ T6247] device veth1_macvtap entered promiscuous mode
[  918.285657][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  918.296901][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.307888][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  918.318917][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.329770][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  918.340709][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.352345][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_0
[  918.361184][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  918.371074][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  918.379769][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  918.390173][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  918.402607][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  918.414833][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.426933][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  918.437704][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.448023][ T6247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  918.458844][ T6247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.470838][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_1
[  918.479667][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  918.490089][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  918.602367][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.654922][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.666788][ T4033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.686318][ T4033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.694110][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  918.704000][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  918.763680][ T6600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:43:54 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x18}, 0x0, 0x0)

11:43:54 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x4c)

11:43:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c7fffff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:43:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:43:54 executing program 5:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
open(&(0x7f0000000080)='./file0\x00', 0x100, 0x11)
close(r1)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0)
read(r3, &(0x7f0000000180)=""/19, 0x11fffffc7)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}, {@fowner_gt}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

11:43:54 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10234, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x84}, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xffff7fffffffffff, r0, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x0, @raw_data="485c8bec36d930750e3303fc5f85c9b9dcc4a2a30bb6f47ef9d74cc1e5ed817b90fca39610d40566ffdba832c6708ecd62adcf624c724e455d9bd1e52eddaec05b711e1c010b7609b9347010563b6c852d77bfe7c09430aa3808e746df30cc9a19e9230c706ff539c699fbe1143d07b18132f2208cb320981999bb30ba9b63c239f3fc1459a912cb37c2685dd0d68625919eabb4656e706a7a0fc8b8b41d631a92ba1320c49b46b35cbaa53da377ba5f6d5965d0d30170865aff4e29d1a9ab6569c86855d6edf8e9"})
clone(0x20000000a200a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003c46, 0x802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0xb910566332c163e, 0x3, 0x0, 0x8, 0x27a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7}, 0x0, 0x1, r0, 0x0)
unshare(0x40000000)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000))
unshare(0x1c068a00)
r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = fcntl$dupfd(r1, 0x0, r3)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={<r5=>0x0, 0x7}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x48c, 0x1, 0x1, 0x8a, 0x8, 0x8001, 0x409, 0xff, r5}, &(0x7f0000000380)=0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = fanotify_init(0x0, 0x101000)
timer_settime(0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
ppoll(&(0x7f0000000040)=[{r6, 0x8055}, {0xffffffffffffffff, 0x102}], 0x2, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4)

[  919.055113][ T8541] Bluetooth: hci3: command 0x0409 tx timeout
[  919.076980][ T6600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  919.158113][ T6603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  919.196424][ T6609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  919.216738][   T25] audit: type=1804 audit(1633607035.049:15): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/1236/file0/bus" dev="ramfs" ino=119461 res=1 errno=0
[  919.236204][ T6616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:43:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c9effff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:43:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3cf0ffff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  919.623626][ T6616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:43:55 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x60)

11:43:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:43:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:43:55 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x19}, 0x0, 0x0)

[  919.901516][ T6643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  919.903010][ T6635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  920.017819][ T6648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:43:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  920.229620][ T6643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:43:56 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x1a}, 0x0, 0x0)

11:43:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3cffffff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:43:56 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x68)

[  920.570758][ T6665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  920.613212][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  920.902390][ T6665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  921.133722][ T8541] Bluetooth: hci3: command 0x041b tx timeout
11:43:58 executing program 5:
r0 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000380)={{0x2, 0x0, 0x401, 0x4}, 0x0, 0x30, 0x8, r0, 0x0, 0x9, 'syz0\x00', 0x0, 0x0, '\x00', [0x0, 0x7, 0xa]})
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents(0xffffffffffffff9c, &(0x7f0000000200)=""/148, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x20, 0x1f, 0x80, 0x0, 0x0, 0x10000, 0x11090, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000600), 0xb}, 0x0, 0x5, 0xb610, 0x0, 0x6, 0x1, 0x5, 0x0, 0xfffffffe, 0x0, 0x8}, r0, 0xffffffffffffffff, r1, 0x8)
dup(0xffffffffffffffff)
fcntl$setstatus(r2, 0x4, 0x4000)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000480)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f00000002c0)=""/173, 0xad}], 0x2, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/184, 0xb8}], 0x1, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x35c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x304, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x110, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf6dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x530}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x244b1d17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x15a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4615a614}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x68}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5359}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0xdc, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x648d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe79}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf26e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x771}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x9d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x150, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "fd0febb694dc6fc7ed897dfb24346f66ec5c4f8040faa13c3622288e0e38ca9da74e94600c03314d692e50ba0a22edc791081ef5374af4c3e2"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9300}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f7}]}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}, @dup={{0x8}, @void}, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}]}}, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}]}, {0x1c, 0x1, 0x0, 0x1, [@queue={{0xa}, @void}, @lookup={{0xb}, @void}]}]}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2a0, 0x9, 0xa, 0x207, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x37}, @NFTA_SET_DESC={0x268, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x231}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x967}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x14c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdec}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4770}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc8a5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd049fb19}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x877}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x302}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff801}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x48c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x438, 0x3, 0x0, 0x1, [{0x434, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x57, 0x1, "fdbcaed6d3588c0dcfe931cf03478f58d89d68145f4c10eed2caf142b855854d2e2f357cd04ab2512e4bfdf0a476df4c9f49128fcc0baa6fba5e8e15ce54498c7205696b263d7fe9697795f8013b650b73c609"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe88}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "8500e0b4137028d8f0b31088b98fda9bc08dc60a6ecd6153d989e01d60ea329efe51a6780f81e0c1d19b755df7d6f8205e7f3a0f170ed369afc9c5c4afeb0126ed44f61dcaf2755c822ddd2fb9649d05403f54b2365c6e8ab73b8ff492d25aa9164c5213e8f9aa0f24b0e8fca69f9841f8fc5c02846aaa0d4443366a9526dc0e35dcfbebf4076beccaf168f2d0f2aca58a330584fc3696fb9a6c9c28cfb2e2d9543473ea02ed62c35a3521dff3a13e7a39f9493f1e5b0364e56c14eb5837dd5429c9c7e160e158cc"}, @NFTA_SET_ELEM_KEY_END={0x264, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "8ed0153188464407227e3f32a45ef751eed457eb26c978576446f9361a48a198f06ce471df"}, @NFTA_DATA_VALUE={0x7c, 0x1, "ad820b8eed71bf07235c1fb213f533601f0544e0457e25c18d7d7b820157b9a4ccf53fa2ac7d00f2243f1a0231776da1761cb9b2dd42793130ad9c660107e53315e431729afb3ed9e1b011808113d15542792a676839d42c83beab7ee892edef831e03116eecf86d67e0f50ad268d7e47f858ad3d885f661"}, @NFTA_DATA_VALUE={0xbb, 0x1, "07e446232964c274b6f9a26a80f9744049bca2d8d783b7dcf258008b56c946bf1cffc14ebe61b8ad2e0478f5dfee5d9bc2a8c63ef917a0d7c937f4b8f32e2bcd409c9b3a7f8b141e796bc82a17a12f9c1c610edd45c5042269e1c1590374c765ee1e8777621076fe2b382991d45632daed7081eaf9e4457f1d09d3bb717cc985b043e9db9028ed373a7f743dea02dabbc6808e7cd7541b5f76297249999f9b7d6cc9592140aaebb8442f758c53ee4e9ce34dfd1573c0a1"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd44}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0xe8}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
sched_setscheduler(r3, 0x0, &(0x7f00000001c0)=0x35)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0xd50}, 0x8)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0)

11:43:58 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10234, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x84}, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xffff7fffffffffff, r0, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x0, @raw_data="485c8bec36d930750e3303fc5f85c9b9dcc4a2a30bb6f47ef9d74cc1e5ed817b90fca39610d40566ffdba832c6708ecd62adcf624c724e455d9bd1e52eddaec05b711e1c010b7609b9347010563b6c852d77bfe7c09430aa3808e746df30cc9a19e9230c706ff539c699fbe1143d07b18132f2208cb320981999bb30ba9b63c239f3fc1459a912cb37c2685dd0d68625919eabb4656e706a7a0fc8b8b41d631a92ba1320c49b46b35cbaa53da377ba5f6d5965d0d30170865aff4e29d1a9ab6569c86855d6edf8e9"})
clone(0x20000000a200a180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003c46, 0x802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0xb910566332c163e, 0x3, 0x0, 0x8, 0x27a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7}, 0x0, 0x1, r0, 0x0)
unshare(0x40000000)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000))
unshare(0x1c068a00)
r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = fcntl$dupfd(r1, 0x0, r3)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={<r5=>0x0, 0x7}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x48c, 0x1, 0x1, 0x8a, 0x8, 0x8001, 0x409, 0xff, r5}, &(0x7f0000000380)=0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = fanotify_init(0x0, 0x101000)
timer_settime(0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
ppoll(&(0x7f0000000040)=[{r6, 0x8055}, {0xffffffffffffffff, 0x102}], 0x2, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4)

11:43:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:43:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:43:58 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x1b}, 0x0, 0x0)

11:43:58 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x6c)

11:43:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  922.457468][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.458590][ T6715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.482440][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.496257][ T6711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.512120][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.563799][ T6707] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[  922.589185][ T6707] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
11:43:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:43:58 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x74)

11:43:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x34)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

[  922.964361][ T8528] Bluetooth: hci2: command 0x0406 tx timeout
[  923.208352][ T8528] Bluetooth: hci3: command 0x040f tx timeout
11:44:00 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x7a)

11:44:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  924.541790][ T6768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  924.594048][ T6707] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[  924.619079][ T6707] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
11:44:00 executing program 5:
r0 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000380)={{0x2, 0x0, 0x401, 0x4}, 0x0, 0x30, 0x8, r0, 0x0, 0x9, 'syz0\x00', 0x0, 0x0, '\x00', [0x0, 0x7, 0xa]})
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents(0xffffffffffffff9c, &(0x7f0000000200)=""/148, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x20, 0x1f, 0x80, 0x0, 0x0, 0x10000, 0x11090, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000600), 0xb}, 0x0, 0x5, 0xb610, 0x0, 0x6, 0x1, 0x5, 0x0, 0xfffffffe, 0x0, 0x8}, r0, 0xffffffffffffffff, r1, 0x8)
dup(0xffffffffffffffff)
fcntl$setstatus(r2, 0x4, 0x4000)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000480)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f00000002c0)=""/173, 0xad}], 0x2, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/184, 0xb8}], 0x1, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x35c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x304, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x110, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf6dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x530}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x244b1d17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x15a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4615a614}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x68}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5359}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0xdc, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x648d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe79}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf26e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x771}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x9d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x150, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "fd0febb694dc6fc7ed897dfb24346f66ec5c4f8040faa13c3622288e0e38ca9da74e94600c03314d692e50ba0a22edc791081ef5374af4c3e2"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9300}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f7}]}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}, @dup={{0x8}, @void}, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}]}}, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}]}, {0x1c, 0x1, 0x0, 0x1, [@queue={{0xa}, @void}, @lookup={{0xb}, @void}]}]}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2a0, 0x9, 0xa, 0x207, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x37}, @NFTA_SET_DESC={0x268, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x231}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x967}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x14c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdec}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4770}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc8a5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd049fb19}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x877}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x302}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff801}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x48c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x438, 0x3, 0x0, 0x1, [{0x434, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x57, 0x1, "fdbcaed6d3588c0dcfe931cf03478f58d89d68145f4c10eed2caf142b855854d2e2f357cd04ab2512e4bfdf0a476df4c9f49128fcc0baa6fba5e8e15ce54498c7205696b263d7fe9697795f8013b650b73c609"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe88}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "8500e0b4137028d8f0b31088b98fda9bc08dc60a6ecd6153d989e01d60ea329efe51a6780f81e0c1d19b755df7d6f8205e7f3a0f170ed369afc9c5c4afeb0126ed44f61dcaf2755c822ddd2fb9649d05403f54b2365c6e8ab73b8ff492d25aa9164c5213e8f9aa0f24b0e8fca69f9841f8fc5c02846aaa0d4443366a9526dc0e35dcfbebf4076beccaf168f2d0f2aca58a330584fc3696fb9a6c9c28cfb2e2d9543473ea02ed62c35a3521dff3a13e7a39f9493f1e5b0364e56c14eb5837dd5429c9c7e160e158cc"}, @NFTA_SET_ELEM_KEY_END={0x264, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "8ed0153188464407227e3f32a45ef751eed457eb26c978576446f9361a48a198f06ce471df"}, @NFTA_DATA_VALUE={0x7c, 0x1, "ad820b8eed71bf07235c1fb213f533601f0544e0457e25c18d7d7b820157b9a4ccf53fa2ac7d00f2243f1a0231776da1761cb9b2dd42793130ad9c660107e53315e431729afb3ed9e1b011808113d15542792a676839d42c83beab7ee892edef831e03116eecf86d67e0f50ad268d7e47f858ad3d885f661"}, @NFTA_DATA_VALUE={0xbb, 0x1, "07e446232964c274b6f9a26a80f9744049bca2d8d783b7dcf258008b56c946bf1cffc14ebe61b8ad2e0478f5dfee5d9bc2a8c63ef917a0d7c937f4b8f32e2bcd409c9b3a7f8b141e796bc82a17a12f9c1c610edd45c5042269e1c1590374c765ee1e8777621076fe2b382991d45632daed7081eaf9e4457f1d09d3bb717cc985b043e9db9028ed373a7f743dea02dabbc6808e7cd7541b5f76297249999f9b7d6cc9592140aaebb8442f758c53ee4e9ce34dfd1573c0a1"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd44}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0xe8}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
sched_setscheduler(r3, 0x0, &(0x7f00000001c0)=0x35)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0xd50}, 0x8)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0)

[  925.260256][ T6792] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[  925.315151][ T8541] Bluetooth: hci3: command 0x0419 tx timeout
[  925.331279][ T6792] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
11:44:03 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, &(0x7f00000000c0))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x3c, 0x28, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0xffe0}, {0xb, 0x8}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xa9, 0xe0}}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000240012800b00010067656e65766500001400028005000d0000000000060005004e23"], 0x54}}, 0x0)

11:44:03 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x1c}, 0x0, 0x0)

11:44:03 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xc0)

11:44:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x34)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:44:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:03 executing program 5:
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa2, 0x95, 0x54, 0x20, 0x1b3d, 0x122, 0x3a8e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9b, 0x11, 0x0, 0x81, 0x21, 0xf}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0x24, 0x8f, {0x8f, 0x23, "7b470e3fa401c140de09370958e6e94b7d8f82b25e4dfb2790fcf6b7caeadc415bfba7424798e79b545c00f36b4b6140450126f14d9e44d105eab6ba5a19cbc6fc9f2fee4a2683a5a700c4ad4ff27e244a4aacc45577de4eeaa327e521a21e36962a177f5091f065e612006d8977f6a4dce721d4f0d4fe304a880f06ce8cbf12ad93b389ff381d51f0321cb59a"}}, &(0x7f0000000100)={0x0, 0x3, 0x61, @string={0x61, 0x3, "35a4914f059fbc05b4512a26cbae201d4778b85928a74f61d054e81bb97678e72a88a9f73c311f6a300c56d7cecb9592a8bb5847eab56463f5f7078b120335ff3d5d00eb3f5344cc80838272b10b1e6e5a99b72c9c4091dc14c8bf0b127549"}}, &(0x7f0000000180)={0x0, 0x22, 0x1a, {[@local=@item_4={0x3, 0x2, 0x4, "43d158bd"}, @main=@item_4={0x3, 0x0, 0xc, "0b1b8a86"}, @main=@item_4={0x3, 0x0, 0x8, "c16398b8"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x8, "e8573b55"}, @main=@item_4={0x3, 0x0, 0x0, "29379a62"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xb5, 0x1, {0x22, 0x748}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x0, 0x8, 0xdc, "8f9469f8a005878b400d9fc5601371c0765b61f535aac38e7ef451ea0e8df8cd3b4f48aa26768bbb95b259a014bb81247e53acf6715217c0d7fb36f225a836a21929ec3584fff40622ae07b4b26570dd2123df05efe2594aae055bcb84ae1a7fc75118b757dcabff27032265d1e924ad660222c5467f5e432278f189efcca109671be29f87901351934affd17bd0a03eb32005c58eb7fcec34364a5d84a51c9a19e107e8dd3ec34b9def861384c38c9deafe4601fc463b5dcfe3f5d156532681d24657a0a673de75866863dc6fda487fe4d71533fccfb1fead22b678"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x1, 0x3f, "00f6226e54846c78723e4f52c96946adf83a6b4f88e725b99f3eaff4f2cf206696219671757db575308739e98d08c7565d0a288b6137a351315106d616dbed"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xe2}})

[  927.569516][ T6816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  927.610676][ T6817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  927.637751][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  927.649991][ T6821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  927.717501][ T6827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  927.729252][ T6823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0
[  927.757471][ T6823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0
[  927.778449][ T6823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0
[  927.793952][ T6823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0
[  927.803547][ T6823] device geneve2 entered promiscuous mode
11:44:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000080)="430f00520066b87e008ed8c441996929672e65440f79b7218e000026f001a3050000000fc72d82aa0000662e45810081cc0f01cfc744240000700000c7442402f66dcbcdc7442406000000000f011c24ab", 0x2401a2db0a0556ee}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x0, 0x0, [0x7]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000012000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  927.904026][ T8541] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  927.913717][ T6816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:03 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x1d}, 0x0, 0x0)

11:44:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:03 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xf0)

[  928.074955][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x34)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

[  928.179430][ T6849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  928.190998][ T8541] usb 6-1: Invalid ep0 maxpacket: 32
[  928.340537][ T6862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  928.353877][ T8541] usb 6-1: new low-speed USB device number 16 using dummy_hcd
11:44:04 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000268a1c872dd436dc9200", @ANYRES32=0x0, @ANYBLOB="ff460d0000150000140012800b00010076786c616e0000000400028008000a002615a3"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40001}, 0x4000)
r0 = socket(0x10, 0x80002, 0x0)
pipe2(&(0x7f0000000040), 0x4800)
perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x3f, 0x8, 0x9, 0x98, 0x0, 0xfffffffffffffff7, 0x50, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0xffffffff80000000}, 0x0, 0x0, 0xd3f3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6622}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000002c0)=[{}, {0xffffffffffffffff, 0x80c8}, {}, {}, {0xffffffffffffffff, 0x20}, {}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x1000}], 0x8, 0x9)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000000280))
open(&(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x6)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1f, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)

11:44:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  928.384179][ T6862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  928.415503][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:04 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x1e}, 0x0, 0x0)

[  928.643881][ T8541] usb 6-1: Invalid ep0 maxpacket: 32
[  928.649806][ T8541] usb usb6-port1: attempt power cycle
[  928.658433][ T6875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  929.036646][ T6875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  929.164023][ T8541] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[  929.274205][ T8541] usb 6-1: Invalid ep0 maxpacket: 32
[  929.444028][ T8541] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  929.534406][ T8541] usb 6-1: Invalid ep0 maxpacket: 32
[  929.539947][ T8541] usb usb6-port1: unable to enumerate USB device
11:44:06 executing program 5:
r0 = syz_io_uring_complete(0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
syz_usb_connect$uac1(0x0, 0xf3, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x8, 0x24, 0x8, 0x0, 0x7, 0xf8, "c3"}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0x80, "4495bd1621"}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x5, 0x8, 0x0, 0x0, 0x0, 0x0], 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0xa1, "d8"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7ff, 0x2, 0x0, "8fb1"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0x6, 0x7}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0xccfa, 0x8, "df188aa1"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x80, 0x7, "b20500", "9d47"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x80, 0x0, {0x7, 0x25, 0x1, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x9, 0x3, "f439", "eec1"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x3f}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x3f, 0x3, {0x7, 0x25, 0x1, 0x83, 0x8, 0x8}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x0, 0x40, 0x80, 0x0, 0x3}, 0x10, &(0x7f0000000340)=ANY=[]})

11:44:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:06 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x300)

11:44:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:44:06 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x21}, 0x0, 0x0)

11:44:06 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000268a1c872dd436dc9200", @ANYRES32=0x0, @ANYBLOB="ff460d0000150000140012800b00010076786c616e0000000400028008000a002615a3"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40001}, 0x4000)
r0 = socket(0x10, 0x80002, 0x0)
pipe2(&(0x7f0000000040), 0x4800)
perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x3f, 0x8, 0x9, 0x98, 0x0, 0xfffffffffffffff7, 0x50, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0xffffffff80000000}, 0x0, 0x0, 0xd3f3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6622}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000002c0)=[{}, {0xffffffffffffffff, 0x80c8}, {}, {}, {0xffffffffffffffff, 0x20}, {}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x1000}], 0x8, 0x9)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000000280))
open(&(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x6)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1f, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)

[  930.637666][ T6902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  930.649168][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  930.649640][ T6901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  930.983286][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  930.994905][ T8528] usb 6-1: new high-speed USB device number 19 using dummy_hcd
11:44:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:44:06 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x22}, 0x0, 0x0)

11:44:06 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x500)

[  931.125969][ T1356] ieee802154 phy0 wpan0: encryption failed: -22
[  931.132307][ T1356] ieee802154 phy1 wpan1: encryption failed: -22
[  931.218518][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  931.226079][ T6931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  931.263789][ T8528] usb 6-1: Using ep0 maxpacket: 16
[  931.277272][ T6932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:07 executing program 0:
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESDEC])
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000480)=ANY=[@ANYBLOB="fa925e4a413f6ec82f2ca1078bb6f74d2b210397d29ce906d4a7ff79f38677de3c2910c12d6419d320ed823812f63ae6b28d6e8949e55f60cec23baf36d6", @ANYBLOB, @ANYRESDEC, @ANYBLOB="bc9f93e64fd4bc7266c9979c68c3e4483d3708af74dcb42c0e01bda10f4051d131ab287dd323cb0e80be46a95a5247bba35b1ed7244d9919708f815ee84db09697d1be3febbcd7716dc84cce1769b220bc42a36147f38ce6c1e0a0011a72"])
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000bc0)={0x6, 0x0, {0x1, @struct={0x101, 0x1}, 0x0, 0x80, 0x8001, 0x4, 0x80000000, 0x1ff, 0xa9, @usage=0x101, 0x0, 0x4, [0x3, 0x7ff, 0x6, 0x0, 0x0, 0x3f]}, {0x6, @struct={0x9, 0x2}, 0x0, 0x3, 0x11cee623, 0x1f, 0x0, 0x200, 0x21, @struct={0x0, 0x8}, 0x40, 0x4, [0x6, 0x2, 0x1, 0x7b5, 0x0, 0x5]}, {0x0, @usage=0x7fff, 0x0, 0x3, 0x8, 0x1, 0x8, 0x0, 0xb0, @usage=0x5, 0x6, 0x6, [0xfffffffffffffffa, 0x4, 0x7, 0xffffffff]}, {0x9c2, 0xfffffffffffffffa, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0xfa04, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, <r0=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r1=>0xffffffffffffffff, 0x6, 0x5, 0x81})
ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000440)={0x200, 0x3, &(0x7f0000000140)=[0x2, 0xffc0, 0x4], &(0x7f0000000340)=[0x7, 0x3f, 0x712, 0x9, 0x1c4, 0x9, 0x6, 0x20, 0x3], &(0x7f0000000380)=[0x3, 0x3], &(0x7f0000000400)=[0x2, 0x9, 0x2, 0x1, 0x8, 0x9, 0x0, 0x1f, 0x7]})
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x8, 0x6, 0x9, 0x0, 0x6, 0x20, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x5, 0x1}, 0x40001, 0x8, 0x108000, 0x4, 0x0, 0xe4, 0x0, 0x0, 0x10}, r0, 0xa, r1, 0xd)
chdir(&(0x7f0000000240)='./file0\x00')
r2 = open(&(0x7f0000000300)='./file1\x00', 0x14f141, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r3, 0x0, 0x401ffc007)
ftruncate(r2, 0x200)

[  931.394228][ T8528] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  931.587794][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  931.614277][ T8528] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  931.648008][ T8528] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.706345][ T8528] usb 6-1: Product: syz
[  931.728208][ T8528] usb 6-1: Manufacturer: syz
[  931.751987][ T8528] usb 6-1: SerialNumber: syz
[  932.124633][ T8528] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  932.213235][ T8528] usb 6-1: USB disconnect, device number 19
[  932.833745][ T5612] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  933.073580][ T5612] usb 6-1: Using ep0 maxpacket: 16
[  933.193947][ T5612] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  933.364201][ T5612] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  933.373269][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.382677][ T5612] usb 6-1: Product: syz
[  933.390588][ T5612] usb 6-1: Manufacturer: syz
[  933.396034][ T5612] usb 6-1: SerialNumber: syz
11:44:09 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000300)={0xa2df, 0x2, {r0}, {0xffffffffffffffff}, 0x7, 0x8})
lseek(0xffffffffffffffff, 0x8001, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000180)=0x7)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff)
r2 = socket$unix(0x1, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10150}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0900000000000000180012800e0001007769726567756172640000", @ANYRESHEX=r3, @ANYBLOB="868ace1799d49edef84f1db0fa252fb04142dd0bb7910d3d810f3ebe439bb0b49d0d13482e264ecad0c258d66007d16619d09f731f1898cf9ee29ad0fd85f3060c5a877dbb755c8887da65ea4e5045372728f30f3024044f90afe1b7711532f2178a3296575785afbb02fc9bd0230520ce50f1e88ec12e1bfabc4578be398cb003c8296151e0abf19aba9b2fef73d90dfa2c06a27e77c057955d028d08f2158d445b38080691e7ef00fec610e36ab9e1d6c1e41ce81f31ca65b84af7"], 0x40}}, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4000)

11:44:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:44:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:09 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x600)

11:44:09 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x23}, 0x0, 0x0)

11:44:09 executing program 0:
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESDEC])
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000480)=ANY=[@ANYBLOB="fa925e4a413f6ec82f2ca1078bb6f74d2b210397d29ce906d4a7ff79f38677de3c2910c12d6419d320ed823812f63ae6b28d6e8949e55f60cec23baf36d6", @ANYBLOB, @ANYRESDEC, @ANYBLOB="bc9f93e64fd4bc7266c9979c68c3e4483d3708af74dcb42c0e01bda10f4051d131ab287dd323cb0e80be46a95a5247bba35b1ed7244d9919708f815ee84db09697d1be3febbcd7716dc84cce1769b220bc42a36147f38ce6c1e0a0011a72"])
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000bc0)={0x6, 0x0, {0x1, @struct={0x101, 0x1}, 0x0, 0x80, 0x8001, 0x4, 0x80000000, 0x1ff, 0xa9, @usage=0x101, 0x0, 0x4, [0x3, 0x7ff, 0x6, 0x0, 0x0, 0x3f]}, {0x6, @struct={0x9, 0x2}, 0x0, 0x3, 0x11cee623, 0x1f, 0x0, 0x200, 0x21, @struct={0x0, 0x8}, 0x40, 0x4, [0x6, 0x2, 0x1, 0x7b5, 0x0, 0x5]}, {0x0, @usage=0x7fff, 0x0, 0x3, 0x8, 0x1, 0x8, 0x0, 0xb0, @usage=0x5, 0x6, 0x6, [0xfffffffffffffffa, 0x4, 0x7, 0xffffffff]}, {0x9c2, 0xfffffffffffffffa, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0xfa04, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, <r0=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r1=>0xffffffffffffffff, 0x6, 0x5, 0x81})
ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000440)={0x200, 0x3, &(0x7f0000000140)=[0x2, 0xffc0, 0x4], &(0x7f0000000340)=[0x7, 0x3f, 0x712, 0x9, 0x1c4, 0x9, 0x6, 0x20, 0x3], &(0x7f0000000380)=[0x3, 0x3], &(0x7f0000000400)=[0x2, 0x9, 0x2, 0x1, 0x8, 0x9, 0x0, 0x1f, 0x7]})
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x8, 0x6, 0x9, 0x0, 0x6, 0x20, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x5, 0x1}, 0x40001, 0x8, 0x108000, 0x4, 0x0, 0xe4, 0x0, 0x0, 0x10}, r0, 0xa, r1, 0xd)
chdir(&(0x7f0000000240)='./file0\x00')
r2 = open(&(0x7f0000000300)='./file1\x00', 0x14f141, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r3, 0x0, 0x401ffc007)
ftruncate(r2, 0x200)

[  933.743786][ T5612] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  933.743959][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  933.762256][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  933.845771][ T5612] usb 6-1: USB disconnect, device number 20
11:44:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  933.950115][ T6992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  934.120232][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  934.135129][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
11:44:10 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x24}, 0x0, 0x0)

[  934.183082][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:44:10 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x700)

[  934.291924][ T7028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  934.338807][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  934.353511][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:44:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  934.397217][ T7032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc)
mlock(&(0x7f0000480000/0x2000)=nil, 0x2000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f00000004c0)=""/163, 0xa3}], 0x4, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}], 0x40}, 0x40)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x20, 0xf5, 0x5, 0x0, 0x4a3, 0x40020, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x80, 0x7, 0x8, 0x8, 0x5, 0x0, 0x4, 0x0, 0x98, 0x0, 0x8000}, r1, 0x0, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f00002c1000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x80, &(0x7f000051e000/0x1000)=nil)
ptrace$setopts(0x4206, 0x0, 0x6, 0x4e)
shmat(0x0, &(0x7f00008a7000/0x1000)=nil, 0x6000)
shmctl$SHM_UNLOCK(0x0, 0xc)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff)
shmat(0x0, &(0x7f00004d1000/0x2000)=nil, 0x9000)
shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmat(r3, &(0x7f00000ae000/0x13000)=nil, 0x4000)
readv(r2, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x31)

[  934.654856][ T7028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:10 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mprotect(&(0x7f0000a4e000/0x3000)=nil, 0x3000, 0x7)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f00002c1000/0x4000)=nil)
set_mempolicy(0x3, &(0x7f0000000100)=0x7, 0xfff)
getpid()
wait4(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0))
set_mempolicy(0x0, &(0x7f00000000c0)=0x2, 0x6)
shmat(0x0, &(0x7f00008a7000/0x1000)=nil, 0x6000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02fb47002300000027bd7000ffdbdf2504000400810000000100000001000000c36c0000000000000500000000000000020013000000000026bd7000023500000800180000003800dce8660e512bf520fc76e91ee1b56e9faa3e1eb95644b0d3062b2b4b260e63274e353a3f98f726515ee864058543501ad1b982bfdf117f1605001a00ac1414bb000000000000000000000000000000000000000000000000000000002100001005401a0020010000000000000000000000000002fe8000000000000000000000000000aa2c000414010014000500000004000400090000000700000000000000"], 0x118}}, 0x40800)
readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x31)

[  935.484176][ T1159] device hsr_slave_0 left promiscuous mode
[  935.500104][ T1159] device hsr_slave_1 left promiscuous mode
[  935.524414][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  935.553613][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0
[  935.575253][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  935.582798][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1
[  935.655881][ T1159] device bridge_slave_1 left promiscuous mode
[  935.662138][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state
[  935.692900][ T1159] device bridge_slave_0 left promiscuous mode
[  935.716474][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state
[  935.764287][ T1159] device veth1_macvtap left promiscuous mode
[  935.770370][ T1159] device veth0_macvtap left promiscuous mode
[  935.795720][ T1159] device veth1_vlan left promiscuous mode
[  935.801567][ T1159] device veth0_vlan left promiscuous mode
[  936.134704][ T1159] team0 (unregistering): Port device team_slave_1 removed
[  936.151238][ T1159] team0 (unregistering): Port device team_slave_0 removed
[  936.170124][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  936.185728][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  936.259427][ T1159] bond0 (unregistering): Released all slaves
[  938.555680][ T7076] chnl_net:caif_netlink_parms(): no params data found
[  938.657862][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state
[  938.666039][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state
[  938.676884][ T7076] device bridge_slave_0 entered promiscuous mode
[  938.686715][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state
[  938.694999][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.703761][ T7076] device bridge_slave_1 entered promiscuous mode
[  938.741990][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  938.757332][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  938.798578][ T7076] team0: Port device team_slave_0 added
[  938.808362][ T7076] team0: Port device team_slave_1 added
[  938.846150][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  938.853760][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  938.882180][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  938.896953][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  938.904438][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  938.930900][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  938.980382][ T7076] device hsr_slave_0 entered promiscuous mode
[  938.988896][ T7076] device hsr_slave_1 entered promiscuous mode
[  938.996183][ T7076] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  939.004916][ T7076] Cannot create hsr debugfs directory
[  939.116861][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.123997][ T7076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.131364][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.138531][ T7076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.202820][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0
[  939.222689][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  939.231250][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.240294][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.249167][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  939.265445][ T7076] 8021q: adding VLAN 0 to HW filter on device team0
[  939.279664][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  939.288113][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.295263][ T5612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.308705][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  939.317631][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.324790][ T5612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.349675][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  939.362215][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  939.384293][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  939.392845][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  939.410547][ T7076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  939.422406][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  939.432156][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  939.464515][ T7076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  939.472022][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  939.480991][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  939.505550][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  939.529779][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  939.538264][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  939.546299][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  939.560764][ T7076] device veth0_vlan entered promiscuous mode
[  939.575236][ T7076] device veth1_vlan entered promiscuous mode
[  939.607191][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  939.617196][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  939.631605][ T7076] device veth0_macvtap entered promiscuous mode
[  939.643400][ T7076] device veth1_macvtap entered promiscuous mode
[  939.664364][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  939.675091][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  939.686558][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  939.697601][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  939.707917][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  939.718775][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  939.731199][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  939.740561][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  939.749283][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  939.758058][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  939.767760][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  939.780235][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  939.791390][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  939.801724][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  939.812399][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  939.822944][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  939.834134][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  939.845870][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  939.855563][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  939.865291][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  939.955062][ T1489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  939.981004][ T1489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  940.019225][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  940.027193][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  940.040286][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  940.053244][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  940.134916][ T7407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.149456][ T7406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.173189][ T8541] wlan1: authenticate with 08:02:11:00:00:00
[  940.194267][ T8541] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  940.314174][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  940.403963][ T8541] Bluetooth: hci2: command 0x0409 tx timeout
[  940.423821][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:44:16 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x900)

11:44:16 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x25}, 0x0, 0x0)

11:44:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:16 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="024a0ed1baa484ce3e71000000000000"]})
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000002c0))

11:44:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc)
mlock(&(0x7f0000480000/0x2000)=nil, 0x2000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f00000004c0)=""/163, 0xa3}], 0x4, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}], 0x40}, 0x40)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x20, 0xf5, 0x5, 0x0, 0x4a3, 0x40020, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x80, 0x7, 0x8, 0x8, 0x5, 0x0, 0x4, 0x0, 0x98, 0x0, 0x8000}, r1, 0x0, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f00002c1000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x80, &(0x7f000051e000/0x1000)=nil)
ptrace$setopts(0x4206, 0x0, 0x6, 0x4e)
shmat(0x0, &(0x7f00008a7000/0x1000)=nil, 0x6000)
shmctl$SHM_UNLOCK(0x0, 0xc)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff)
shmat(0x0, &(0x7f00004d1000/0x2000)=nil, 0x9000)
shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmat(r3, &(0x7f00000ae000/0x13000)=nil, 0x4000)
readv(r2, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x31)

[  940.541644][ T2577] wlan1: authentication with 08:02:11:00:00:00 timed out
[  940.588611][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7b00080200000000000000ff02090010"], 0x4240a2a0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x1, 0x100000})
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x40800)
write$binfmt_misc(r4, &(0x7f0000000a40)={'syz0', "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"}, 0x1004)
ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000640)={"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"})

[  940.661244][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00f0ff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000200", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:16 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xb4c)

11:44:16 executing program 5:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x141042, 0x0)
flistxattr(r1, &(0x7f00000001c0)=""/56, 0x38)
bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x1}, 0x20)
sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="656f1a784e6ae054c26df0110d106b6736a6513d7cc98bb119214fe530183899073257e2", 0x24}, {&(0x7f0000000080)="3176a3ff3f7a9b6a106f731d4d7a951e1cbd2c8586a9483218158e8e004d490c70eeddc3aa4d12650c1dd14d59", 0x2d}, {&(0x7f0000000300)="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", 0x55c}], 0x3}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x2, 0x4008000)

[  940.953621][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:16 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x26}, 0x0, 0x0)

11:44:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:44:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000300", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:17 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5241408f71403002df9010203010902120001000000000904", @ANYRES64], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x10, &(0x7f0000000200)={0x0, 0x0, 0x6, "381a9380e1e1"}, 0x0, 0x0})

[  941.155815][ T7450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.202640][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.237976][ T5613] wlan1: authenticate with 08:02:11:00:00:00
11:44:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000400", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  941.260897][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.278373][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  941.314820][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  941.330608][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:17 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xe00)

11:44:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000500", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  941.454577][ T1489] wlan1: authentication with 08:02:11:00:00:00 timed out
[  941.501480][ T7450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.533200][ T8541] usb 6-1: new high-speed USB device number 21 using dummy_hcd
11:44:17 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
lseek(r0, 0x2fa5, 0x0)
io_setup(0x81, &(0x7f0000000100)=<r1=>0x0)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[], 0x10)
lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0)
fcntl$setstatus(r0, 0x4, 0x6800)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])

11:44:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000600", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:17 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x27}, 0x0, 0x0)

11:44:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:44:17 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xf00)

[  941.808276][ T7479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.823027][ T8541] usb 6-1: Using ep0 maxpacket: 8
[  941.852870][ T7481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.883770][ T7065] wlan1: authenticate with 08:02:11:00:00:00
[  941.895684][ T7065] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\a\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  941.973476][ T8541] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  941.983192][ T8541] usb 6-1: config 0 has no interface number 0
11:44:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\b\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  942.013872][ T8541] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  942.041582][ T8541] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  942.055321][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  942.084003][ T8541] usb 6-1: config 0 interface 255 has no altsetting 0
[  942.128055][ T7479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  942.163777][   T10] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:18 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x28}, 0x0, 0x0)

[  942.283050][ T2577] wlan1: authentication with 08:02:11:00:00:00 timed out
[  942.304168][ T8541] usb 6-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d
[  942.324701][ T8541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.359724][ T8541] usb 6-1: Product: syz
[  942.365732][ T7500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  942.370143][ T8541] usb 6-1: Manufacturer: syz
[  942.405556][ T8541] usb 6-1: SerialNumber: syz
[  942.419879][ T8541] usb 6-1: config 0 descriptor??
[  942.493261][ T8528] Bluetooth: hci2: command 0x041b tx timeout
[  942.703621][ T7500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  942.736074][ T8541] usb 6-1: USB disconnect, device number 21
[  943.453417][ T8541] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  943.713006][ T8541] usb 6-1: Using ep0 maxpacket: 8
[  943.853003][ T8541] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  943.861212][ T8541] usb 6-1: config 0 has no interface number 0
[  943.867780][ T8541] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  943.879493][ T8541] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  943.893770][ T8541] usb 6-1: config 0 interface 255 has no altsetting 0
[  944.054592][ T8541] usb 6-1: New USB device found, idVendor=14f7, idProduct=0003, bcdDevice=f9.2d
[  944.063718][ T8541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.071697][ T8541] usb 6-1: Product: syz
[  944.076173][ T8541] usb 6-1: Manufacturer: syz
[  944.080797][ T8541] usb 6-1: SerialNumber: syz
[  944.091787][ T8541] usb 6-1: config 0 descriptor??
11:44:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0)

11:44:20 executing program 0:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r1, 0x0, 0x1f, 0x9)
r2 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x40, 0x1b)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x38c8, 0x4)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r5)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x800}, 0x8)
r8 = dup2(r3, r3)
sendfile(r8, r2, 0x0, 0xffffffff)

11:44:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:20 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1100)

11:44:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\t\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:20 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x29}, 0x0, 0x0)

[  944.257038][ T8541] usb 6-1: USB disconnect, device number 22
[  944.309665][ T7532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  944.318073][ T7539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  944.333739][ T8528] wlan1: authenticate with 08:02:11:00:00:00
[  944.340415][ T7538] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  944.341210][ T8528] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000e00", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  944.419212][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:20 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x29, 0x6, 0xa8cb)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
mkdir(&(0x7f0000000300)='./file0\x00', 0x20)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getqdisc={0x44, 0x26, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0xd}, {0x0, 0x4}, {0x7, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000)
ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)
link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00')
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)

[  944.462586][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  944.498318][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000f00", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  944.604001][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  944.604285][ T8541] Bluetooth: hci2: command 0x040f tx timeout
[  944.688449][ T7539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:20 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1200)

11:44:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00`\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  944.733954][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:20 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xfd, 0x4, 0xd0, 0x6, 0x0, 0x9, 0x40000, 0x14, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10001, 0xce6659d8a9338b30, @perf_bp={&(0x7f00000002c0)}, 0x1001, 0x7, 0x3ff, 0x0, 0x1000, 0x7, 0x8, 0x0, 0xae3, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r0, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x1f, 0xfa, 0x5e, 0x0, 0x1, 0x380, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4, 0x2}, 0x8400, 0xe46, 0xbb, 0x7, 0xee9e, 0x6, 0x200, 0x0, 0x8000, 0x0, 0x1a}, 0xffffffffffffffff, 0x8, r0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x13, 0x0, 0x0, 0x0, 0x0, 0x8000ffff}}}]}}]}, 0x58}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000003c0)={0x3, 'netdevsim0\x00', {0x8}, 0x25})

11:44:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:20 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x48}, 0x0, 0x0)

11:44:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00f000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  944.852960][ T1489] wlan1: authentication with 08:02:11:00:00:00 timed out
[  944.932041][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  944.937570][ T7567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  944.965127][ T8528] wlan1: authenticate with 08:02:11:00:00:00
[  944.972231][ T8528] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  944.982616][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  944.996974][ T7571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  945.016692][ T1159] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  945.049877][ T7565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  945.058539][ T7575] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  945.067927][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000003", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  945.193902][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  945.302916][ T2577] wlan1: authentication with 08:02:11:00:00:00 timed out
[  945.315629][ T7575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  945.343244][ T7567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:21 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1400)

11:44:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000005", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  945.481551][ T7575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:21 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x4c}, 0x0, 0x0)

[  945.587395][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  945.612244][ T7578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  945.662368][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  945.676670][ T7590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000006", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  945.703907][ T7594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  945.714864][ T8528] wlan1: authenticate with 08:02:11:00:00:00
[  945.717361][ T7590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  945.731561][ T8528] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  945.735471][ T7596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:21 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xfd, 0x4, 0xd0, 0x6, 0x0, 0x9, 0x40000, 0x14, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10001, 0xce6659d8a9338b30, @perf_bp={&(0x7f00000002c0)}, 0x1001, 0x7, 0x3ff, 0x0, 0x1000, 0x7, 0x8, 0x0, 0xae3, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r0, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x1f, 0xfa, 0x5e, 0x0, 0x1, 0x380, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4, 0x2}, 0x8400, 0xe46, 0xbb, 0x7, 0xee9e, 0x6, 0x200, 0x0, 0x8000, 0x0, 0x1a}, 0xffffffffffffffff, 0x8, r0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x13, 0x0, 0x0, 0x0, 0x0, 0x8000ffff}}}]}}]}, 0x58}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000003c0)={0x3, 'netdevsim0\x00', {0x8}, 0x25})

[  945.789466][ T2577] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  945.826567][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\a', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  945.912486][ T7604] sch_tbf: burst 0 is lower than device lo mtu (65550) !
11:44:21 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1500)

[  945.972651][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  946.089539][ T7594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  946.103136][ T1159] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3)
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2c181105}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x50, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xe53b}, @NL80211_ATTR_PMKID={0x14, 0x55, "4f4a31bdd6df68e62fab011b36e4eae6"}, @NL80211_ATTR_SSID={0x17, 0x34, @random="6f8cb9eb21ed0dd6528c620e2d9072c03b6b65"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x80)

11:44:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\t', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  946.234020][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:44:22 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x60}, 0x0, 0x0)

[  946.381329][ T7604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  946.436429][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  946.449289][ T7624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  946.470131][ T7626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:22 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1600)

[  946.507898][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  946.536964][ T7629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00d20d", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  946.586740][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:44:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="5c00011be0bc46bbeb9100002c0020002abdd800ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02000f000d00f3ffe0ff1000060005003f5900000600050004280000060005009a05000006000500a97f0000060005003f000000060005000507000008000b0001000000"], 0x5c}}, 0x4000080)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x100000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, r3, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb1e7}, 0x0, 0x4, 0xdf96, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xf, r4, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
signalfd(r3, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
read(r5, &(0x7f0000000440)=""/4096, 0x1000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  946.642965][ T8528] Bluetooth: hci2: command 0x0419 tx timeout
[  946.669035][ T7615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  946.717290][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  946.737756][ T7628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000e", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  946.805694][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:22 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x68}, 0x0, 0x0)

11:44:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000f", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:22 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1700)

[  947.078601][ T7654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:23 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x4, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffff81000e220e227f040001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

[  947.141146][ T7624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.160109][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  947.173764][ T7065] wlan1: authenticate with 08:02:11:00:00:00
[  947.184268][ T7065] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  947.212555][ T7631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="5c00011be0bc46bbeb9100002c0020002abdd800ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02000f000d00f3ffe0ff1000060005003f5900000600050004280000060005009a05000006000500a97f0000060005003f000000060005000507000008000b0001000000"], 0x5c}}, 0x4000080)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x100000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, r3, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb1e7}, 0x0, 0x4, 0xdf96, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xf, r4, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
signalfd(r3, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
read(r5, &(0x7f0000000440)=""/4096, 0x1000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  947.332940][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00?', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:23 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
fcntl$setstatus(r1, 0x4, 0x40800)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x880, 0x81000000000000})
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "15442c06dcc34351", "fdfa9d88223aff8bfcc976a635e19c17", "c10ad498", "15c0f128cb4b1e7e"}, 0x28)
sendfile(r1, r0, 0x0, 0x7ffff000)

11:44:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x127}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x9, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000700), &(0x7f00000007c0), 0x2, 0x3)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x19e)
fcntl$dupfd(r0, 0x0, r3)
syz_80211_inject_frame(0x0, 0x0, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)

[  947.405173][ T7654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.453104][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:23 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x6c}, 0x0, 0x0)

[  947.541289][ T7680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.572828][ T1159] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00`', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:23 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1800)

[  947.642126][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  947.671570][ T7684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.730215][ T7680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  947.789114][ T7689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000dd2", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  947.851594][ T7672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:23 executing program 5:
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000280)=""/177)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x80da1, 0xab0)
io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000100)="afd2648864b6d36509d6defb17806aba59e7f5a97c4e4ac0461d022eba35780c2097c251156645f0d07f21bf9b702bea99aa1eb2c8348a4fe3", 0x39, 0x0, 0x0, 0x2}, 0x0])
r1 = dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
setresgid(0x0, 0x0, 0x0)
fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, 0x0, 0xffffffffffffff02)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x404900, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1, 0x1, 0x200)
madvise(&(0x7f00000ac000/0x1000)=nil, 0x1000, 0x16)
mmap(&(0x7f0000168000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x0)

11:44:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000f0", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:23 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
fcntl$setstatus(r1, 0x4, 0x40800)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x880, 0x81000000000000})
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "15442c06dcc34351", "fdfa9d88223aff8bfcc976a635e19c17", "c10ad498", "15c0f128cb4b1e7e"}, 0x28)
sendfile(r1, r0, 0x0, 0x7ffff000)

[  948.139050][ T7689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  948.190788][ T7688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:24 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1900)

[  948.261893][ T7688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  948.263142][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:44:24 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x74}, 0x0, 0x0)

11:44:24 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x3, 0x401, 0x1ff, 0x20}, 0x8)
connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000)
socket$inet6(0xa, 0x800, 0xfff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000104010100000000000000000000400000000000755f0000000008000540020080000800034000000000f16db76f270aaa754268b807e017298d718abae403e96dd0088fb5569474e745d193bcc8112714d71334e89671223f8fe0caa74db6f08eaf7d3c9f6f4a1cd9f72febb01cad1b02b3ec569f9dc74bdbf64dd3c6891830de112fdb9b9d34bd415844"], 0x2c}}, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg1\x00', 0x4)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/schedstat\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "fcb2496a8e98b2f5", "50e1e962cb19082c90c2d3c943764740", "101ef2cc", "5fe0676723fe47ed"}, 0x28)
sendmmsg(r0, 0x0, 0x0, 0x0)

[  948.422196][ T7680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  948.481705][ T7723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/162, 0xa2}], 0x3, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x28}, 0x2)
accept4(r3, 0x0, &(0x7f0000001640), 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, r1, 0x304, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x60}, @void, @val={0xc, 0x99, {0x911e, 0xc}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  948.724470][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  948.835707][ T7723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00@', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  948.881867][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
11:44:24 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1a00)

[  948.976765][ T7733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  949.012880][ T5613] wlan1: authenticate with 08:02:11:00:00:00
11:44:24 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x7a}, 0x0, 0x0)

[  949.028540][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x127}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x9, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000700), &(0x7f00000007c0), 0x2, 0x3)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x19e)
fcntl$dupfd(r0, 0x0, r3)
syz_80211_inject_frame(0x0, 0x0, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)

[  949.177999][   T10] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  949.228510][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  949.293505][   T10] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  949.310566][ T7747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  949.355376][ T4033] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  949.355611][ T7735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  949.379452][ T7747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  949.404817][ T4033] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:25 executing program 5:
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b)

11:44:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000003", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  949.450736][ T7747] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:44:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x58, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="2f98b02cea28"}, @NL80211_ATTR_PMKID={0x14, 0x55, "73932c45c1eb4eafdf9a7129f5c9111e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "984bd8766c9902d8e3dd2651443d7d09"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}]}, 0x58}}, 0x8024)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac10]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00008021100"/16], 0x1e)
syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7ffb}, @initial, @device_a, @device_a, {0x1, 0x38d}}, @a_msdu=[{@device_b, @device_b, 0x44, "276ffb86107c04c099eaa873dfba1e7084f0679186cfab9238129e862c6dd8efe30cf8684b3109492b1a85924c9ac8531cd44c822dd77b07f8754b99c51c56ace7b85a0f"}, {@device_a, @broadcast, 0xd4, "ce675c8741635d7a47fe9aab984c0028ba50b6a1ea7584491ad863e4691215c78e9ea7e49108795618219e2f062f07ded467cdda466a3b2adc8ce9c77357ca039364023e360e8d24e839ee2e7ca819bf74d226b6f96219a86fc790887f43344b7617220999ad3373b4ce3365972443de8a9eae8521bded520bf0065915d18038293fac7938fa72fad6603fe4e7e9e660fd7d9f167d57f9e54152d0a4526b20a31de15fc5dee8e585c170a45da5d7dbd4320cdcb074295098b36ad9c01a22b38fa3a1abcfe95d5529ee4b76c24478827026741612"}, {@device_a, @device_a, 0x6, "0f88ffbf8ec7"}, {@broadcast, @device_a, 0x9b, "1da205116a6627286c26d2d0d6217db0b049638da6abd693ffadb92d2b2ea9675a6c677bd49c56ebdb201ae5ca569c775d9c69327d9c09248e23a0e4eade2c3f1cbfbbbd5bef706f55af44d80d4790f60daca2750b0b386ede009234bd776be3d8642e6deecbe8fe11e5a8b464845049150a4eb64d6378a26843b6e2eb24634fbebf61ff454ce0540b31a2ee3cc9a5afd33584d5b347eb6df4c8f8"}, {@broadcast, @device_a, 0x60, "9ad4d09d88c434e5d06a33e9599c6d1775bad0464b7143f941bdcac70cb242ba1d20e80315900de201218e3d90236864ae56bafd8ed42d7b284db9feed800b340f37fb492ed8fa054835244edc5d3be0858ef5dd99f8ecd9b3dc7612aa60f028"}, {@broadcast, @broadcast, 0x8b, "1dca24e512f68d1eef198a62da19cd985213bfaa6a1da42132b66c0a33bf7f703f2667ee179fbc581ea38fd1b08eeacf226767dfe1b4d072ca7c327b0ded22e52d90f43ab6d8f6886458adf4ae9fc95358bba15ff870f292dadc90d500be49578d66465a078aaa091031ff2e10162548da89f0aba27d82cce1d88a7867c9fe4cfe233ab544de9d3cda0439"}, {@broadcast, @broadcast, 0xaf, "c5be1d46697ddb708a40dbaedaeed5e51b7424cfd66c3fd8aba70410fb7915adfc582835377cbd9fab4d8448f52e85607175ead68a3cdfd8f9b37f3a9173dc2196614456dab4a74571fd5c8a2eb15d0893134d9198898c2e9156cc254e551edf531a19b55d781b09b4188000f0b3f937d0c19dc2d610280007a67aab9396aa5cc11d9006b5136e7db4f873475fdb3e3cafb997853f4fb1fee22a965acb72e949004089a1a7425e03ed8cec26da7d36"}, {@device_b, @device_a, 0xe0, "6251db4489dc56f36814fdabe4ed1ebb3fcdba332482fab2061905f17cc4e27430cf9170438b26f463a76920eb8c13008732b853706b9d67a9e4b27c34b5aa0b916dd41f433f75f4aae56508708c47db992ebdc97bf7c4f5f19f998a8e057503f554b10ed17e37e351bae52644c31b06598d4ed822b10fd571fec66114bfe101dc99bbcd06b4b59b3a9658a627c8b52ccdc2af9f2e97b8147f80dd53302cc7033393a3595719a781323d759dcbfc5b0be569a359ecc8652669ad128a03b0be4e030ff9e5337f6fe9c64c62f7f3798d8b65cf8953e21e278f7ec023a48c5de3ac"}, {@broadcast, @broadcast, 0x2c, "0bb370d63409ba65fd729573bf5be60d1a26df88a46def913565d87d057d3e897b82c9bfd36a0ffac122f20d"}]}, 0x508)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x201, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r4, 0x700, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x401, 0x2, 0x3, 0x9}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44804}, 0x20008008)

[  949.495527][ T7747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  949.530012][ T7753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:25 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1b00)

[  949.590824][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00ffff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  949.694201][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:25 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0xc0}, 0x0, 0x0)

[  949.741434][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:25 executing program 5:
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b)

[  949.791242][ T7764] vcan0: MTU too low for tipc bearer
[  949.801557][ T7764] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  949.861509][ T7769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:25 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0)

11:44:25 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1c00)

11:44:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x127}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x9, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000700), &(0x7f00000007c0), 0x2, 0x3)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x19e)
fcntl$dupfd(r0, 0x0, r3)
syz_80211_inject_frame(0x0, 0x0, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)

11:44:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  950.171175][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.190448][ T7769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.205225][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.228921][ T7788] vcan0: MTU too low for tipc bearer
[  950.235883][ T7787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.254813][ T7788] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
11:44:26 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x0}, 0x0, 0x0)

[  950.280075][ T7787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  950.347360][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  950.363352][ T5613] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  950.372215][ T7792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x38}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000440)={{r0}, "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"})
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {0x7ffd}, @device_b, @device_a, @from_mac, {0x0, 0x7}}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  950.395962][ T7793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.421943][ T7787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  950.513019][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:26 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1d00)

[  950.555574][ T7785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.573016][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.596943][ T7797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.602800][ T5613] usb 6-1: Using ep0 maxpacket: 8
11:44:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  950.733617][ T5613] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  950.748533][ T7792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:26 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x2}, 0x0, 0x0)

11:44:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  950.877586][ T7815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.913346][ T5613] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  950.921456][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.939121][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  950.944277][ T5613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.974154][ T5613] usb 6-1: Product: syz
[  950.984021][ T5613] usb 6-1: Manufacturer: syz
[  950.994756][ T5613] usb 6-1: SerialNumber: syz
[  951.228016][ T7815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  951.274975][ T5613] cdc_ether: probe of 6-1:1.0 failed with error -71
[  951.304577][ T5613] usb 6-1: USB disconnect, device number 23
[  951.692458][ T8528] Bluetooth: hci2: command 0x0405 tx timeout
[  952.032556][ T5613] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  952.282456][ T5613] usb 6-1: Using ep0 maxpacket: 8
[  952.402863][ T5613] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  952.592582][ T5613] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  952.603582][ T5613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.611670][ T5613] usb 6-1: Product: syz
[  952.617579][ T5613] usb 6-1: Manufacturer: syz
[  952.622204][ T5613] usb 6-1: SerialNumber: syz
11:44:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x58, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="2f98b02cea28"}, @NL80211_ATTR_PMKID={0x14, 0x55, "73932c45c1eb4eafdf9a7129f5c9111e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "984bd8766c9902d8e3dd2651443d7d09"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}]}, 0x58}}, 0x8024)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac10]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00008021100"/16], 0x1e)
syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7ffb}, @initial, @device_a, @device_a, {0x1, 0x38d}}, @a_msdu=[{@device_b, @device_b, 0x44, "276ffb86107c04c099eaa873dfba1e7084f0679186cfab9238129e862c6dd8efe30cf8684b3109492b1a85924c9ac8531cd44c822dd77b07f8754b99c51c56ace7b85a0f"}, {@device_a, @broadcast, 0xd4, "ce675c8741635d7a47fe9aab984c0028ba50b6a1ea7584491ad863e4691215c78e9ea7e49108795618219e2f062f07ded467cdda466a3b2adc8ce9c77357ca039364023e360e8d24e839ee2e7ca819bf74d226b6f96219a86fc790887f43344b7617220999ad3373b4ce3365972443de8a9eae8521bded520bf0065915d18038293fac7938fa72fad6603fe4e7e9e660fd7d9f167d57f9e54152d0a4526b20a31de15fc5dee8e585c170a45da5d7dbd4320cdcb074295098b36ad9c01a22b38fa3a1abcfe95d5529ee4b76c24478827026741612"}, {@device_a, @device_a, 0x6, "0f88ffbf8ec7"}, {@broadcast, @device_a, 0x9b, "1da205116a6627286c26d2d0d6217db0b049638da6abd693ffadb92d2b2ea9675a6c677bd49c56ebdb201ae5ca569c775d9c69327d9c09248e23a0e4eade2c3f1cbfbbbd5bef706f55af44d80d4790f60daca2750b0b386ede009234bd776be3d8642e6deecbe8fe11e5a8b464845049150a4eb64d6378a26843b6e2eb24634fbebf61ff454ce0540b31a2ee3cc9a5afd33584d5b347eb6df4c8f8"}, {@broadcast, @device_a, 0x60, "9ad4d09d88c434e5d06a33e9599c6d1775bad0464b7143f941bdcac70cb242ba1d20e80315900de201218e3d90236864ae56bafd8ed42d7b284db9feed800b340f37fb492ed8fa054835244edc5d3be0858ef5dd99f8ecd9b3dc7612aa60f028"}, {@broadcast, @broadcast, 0x8b, "1dca24e512f68d1eef198a62da19cd985213bfaa6a1da42132b66c0a33bf7f703f2667ee179fbc581ea38fd1b08eeacf226767dfe1b4d072ca7c327b0ded22e52d90f43ab6d8f6886458adf4ae9fc95358bba15ff870f292dadc90d500be49578d66465a078aaa091031ff2e10162548da89f0aba27d82cce1d88a7867c9fe4cfe233ab544de9d3cda0439"}, {@broadcast, @broadcast, 0xaf, "c5be1d46697ddb708a40dbaedaeed5e51b7424cfd66c3fd8aba70410fb7915adfc582835377cbd9fab4d8448f52e85607175ead68a3cdfd8f9b37f3a9173dc2196614456dab4a74571fd5c8a2eb15d0893134d9198898c2e9156cc254e551edf531a19b55d781b09b4188000f0b3f937d0c19dc2d610280007a67aab9396aa5cc11d9006b5136e7db4f873475fdb3e3cafb997853f4fb1fee22a965acb72e949004089a1a7425e03ed8cec26da7d36"}, {@device_b, @device_a, 0xe0, "6251db4489dc56f36814fdabe4ed1ebb3fcdba332482fab2061905f17cc4e27430cf9170438b26f463a76920eb8c13008732b853706b9d67a9e4b27c34b5aa0b916dd41f433f75f4aae56508708c47db992ebdc97bf7c4f5f19f998a8e057503f554b10ed17e37e351bae52644c31b06598d4ed822b10fd571fec66114bfe101dc99bbcd06b4b59b3a9658a627c8b52ccdc2af9f2e97b8147f80dd53302cc7033393a3595719a781323d759dcbfc5b0be569a359ecc8652669ad128a03b0be4e030ff9e5337f6fe9c64c62f7f3798d8b65cf8953e21e278f7ec023a48c5de3ac"}, {@broadcast, @broadcast, 0x2c, "0bb370d63409ba65fd729573bf5be60d1a26df88a46def913565d87d057d3e897b82c9bfd36a0ffac122f20d"}]}, 0x508)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x201, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r4, 0x700, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x401, 0x2, 0x3, 0x9}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44804}, 0x20008008)

11:44:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x127}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x9, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000700), &(0x7f00000007c0), 0x2, 0x3)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x19e)
fcntl$dupfd(r0, 0x0, r3)
syz_80211_inject_frame(0x0, 0x0, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)

11:44:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x101, 0x4101, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:28 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1e00)

11:44:28 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x3}, 0x0, 0x0)

[  952.907097][ T5613] cdc_ether: probe of 6-1:1.0 failed with error -71
[  952.967497][ T5613] usb 6-1: USB disconnect, device number 24
[  952.986484][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  952.988359][ T7848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.020101][ T7848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.023525][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.078568][ T7844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.118447][ T7855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:44:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  953.128685][ T7855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  953.176190][ T7859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.215528][ T7859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.233964][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.237958][ T7859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.268099][ T7842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:29 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1f00)

[  953.293335][ T7859] vcan0: MTU too low for tipc bearer
[  953.298682][ T7859] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  953.310213][ T7852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  953.368339][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:29 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x0)

[  953.434289][ T7848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.445008][ T7858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.462142][ T7873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000440)={0x0, <r4=>0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)={{r4, 0x4, 0x8, 0x3, 0x80000000, 0xa69, 0x0, 0x1, 0x100, 0x9, 0x9, 0x9, 0x8, 0x31, 0xf7b2}, 0x10, [0x0, 0x0]})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0x2, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r7 = dup(r6)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000000))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:29 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f742e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffffc654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000037c0)=ANY=[@ANYBLOB="c000000024003b0d00000000000000006c000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff1000000008000100706965000c0002050800010000000000280008801c00010000000000000000000000000000000000000000000200000007e602000000000009000100706c756700000000040002"], 0xc0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x908, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0x7}, {0x3, 0xa}, {0xc973276e4b8bdb1, 0xc}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x8000)

11:44:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x101, 0x4101, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  953.623464][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  953.650192][ T7880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:29 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2000)

[  953.740063][ T7880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.775632][ T7873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.776834][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.815126][ T7890] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'.
11:44:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:29 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x5}, 0x0, 0x0)

[  953.875904][ T7894] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'.
11:44:29 executing program 5:
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x19, "89f6261bb04539aa"})
ftruncate(0xffffffffffffffff, 0x3ff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000))
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/106, 0x6a}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000a00)=""/118, 0x76}, {0x0}, {0x0}], 0x5, &(0x7f0000000dc0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x70}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000001980)={0x77359400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)

[  953.979609][ T7899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  954.138950][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00ffff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x101, 0x4101, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:30 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2100)

[  954.305856][ T7899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000007c0)={0x688, 0x0, 0x500, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x3f, 0x4, 0x8}, {0x1, 0x0, 0x6, 0x6}, {0x5, 0xff, 0x9, 0x5}, {0x5, 0x2, 0x2, 0x1d57}, {0x6, 0xf8, 0x40, 0x9}, {0x4fc, 0x1, 0x2, 0x5}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x10c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x12, 0x8}, {0x5, 0xf9, 0x9, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0xf1, 0x70, 0x1}, {0x8, 0x1, 0x5, 0x9b9a}, {0x6, 0x1, 0x2, 0x9}, {0x7, 0x5, 0x7, 0x8}, {0xba8c, 0x3c, 0xc1, 0x200}, {0x80, 0x4f, 0x1, 0x2}, {0xfffc, 0x5, 0xbb, 0x81}, {0x6, 0x9, 0x1, 0x8}, {0x3, 0x7f, 0x20, 0xfffffffe}, {0x6, 0x1, 0x1, 0x8}]}}}]}}]}, 0x688}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="5000000008021100001c08021100000008021100000000000000000000000000640001005a00060202020202020107008b960c121800"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:30 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x6}, 0x0, 0x0)

[  954.473145][ T5612] wlan1: authenticate with 08:02:11:00:00:00
[  954.480269][ T5612] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  954.509210][ T7923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.549052][ T7923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.587227][ T7919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.608276][ T7927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.616400][ T7930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.645578][   T10] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00ffff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  954.648170][ T7927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.673619][   T10] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  954.693797][   T10] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  954.710193][ T4033] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:30 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2200)

11:44:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000f0", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c007fff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  954.953914][ T7930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  955.063026][ T7931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000007c0)={0x688, 0x0, 0x500, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x3f, 0x4, 0x8}, {0x1, 0x0, 0x6, 0x6}, {0x5, 0xff, 0x9, 0x5}, {0x5, 0x2, 0x2, 0x1d57}, {0x6, 0xf8, 0x40, 0x9}, {0x4fc, 0x1, 0x2, 0x5}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x10c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x12, 0x8}, {0x5, 0xf9, 0x9, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0xf1, 0x70, 0x1}, {0x8, 0x1, 0x5, 0x9b9a}, {0x6, 0x1, 0x2, 0x9}, {0x7, 0x5, 0x7, 0x8}, {0xba8c, 0x3c, 0xc1, 0x200}, {0x80, 0x4f, 0x1, 0x2}, {0xfffc, 0x5, 0xbb, 0x81}, {0x6, 0x9, 0x1, 0x8}, {0x3, 0x7f, 0x20, 0xfffffffe}, {0x6, 0x1, 0x1, 0x8}]}}}]}}]}, 0x688}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="5000000008021100001c08021100000008021100000000000000000000000000640001005a00060202020202020107008b960c121800"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:31 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x7}, 0x0, 0x0)

11:44:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x101, 0x4101, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c009eff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202020202020107008b960c121800ef9833e4fb570421452cfbd3ab4db15640ede4c666484f346b563ae29c8232695e5bf408409eb1895a8f67b3d9e22b923df797918255cfe2db526c"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:31 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2300)

[  955.900530][ T7964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  955.905664][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  955.920080][ T7967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  955.944087][ T8528] wlan1: authenticate with 08:02:11:00:00:00
11:44:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00f0ff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  955.955083][ T8528] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  955.968010][ T7961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  955.985921][ T7963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  956.024547][ T7974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.050712][ T7974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  956.076423][ T7970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00ffff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  956.125095][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:32 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2400)

[  956.243906][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  956.264923][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.309581][ T7967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.352243][ T1159] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:32 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6c060000)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4620000700a80f0000000000000200000000000000000000000000000040000000000000000000000000000000000000000000380000000000ff8100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"/888], 0x378)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x94, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffff7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0xfffffffffffffeba}]}, 0x94}}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x8000, @empty}, 0x1c)
unshare(0x52040680)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x13)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b25000000000000f10f00000546", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r2, 0x1)
splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0)
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0x412, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})

11:44:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000007c0)={0x688, 0x0, 0x500, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x3f, 0x4, 0x8}, {0x1, 0x0, 0x6, 0x6}, {0x5, 0xff, 0x9, 0x5}, {0x5, 0x2, 0x2, 0x1d57}, {0x6, 0xf8, 0x40, 0x9}, {0x4fc, 0x1, 0x2, 0x5}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x10c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x12, 0x8}, {0x5, 0xf9, 0x9, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0xf1, 0x70, 0x1}, {0x8, 0x1, 0x5, 0x9b9a}, {0x6, 0x1, 0x2, 0x9}, {0x7, 0x5, 0x7, 0x8}, {0xba8c, 0x3c, 0xc1, 0x200}, {0x80, 0x4f, 0x1, 0x2}, {0xfffc, 0x5, 0xbb, 0x81}, {0x6, 0x9, 0x1, 0x8}, {0x3, 0x7f, 0x20, 0xfffffffe}, {0x6, 0x1, 0x1, 0x8}]}}}]}}]}, 0x688}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="5000000008021100001c08021100000008021100000000000000000000000000640001005a00060202020202020107008b960c121800"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:32 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x8}, 0x0, 0x0)

11:44:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x2061, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0xfffffffffffffd20, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  956.477297][ T7998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.482558][ T8000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.526015][ T7998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.561738][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
11:44:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  956.601266][ T8009] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'.
[  956.640937][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.676598][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.718493][ T8003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.746300][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
11:44:32 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2500)

[  956.769954][ T8001] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'.
11:44:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  956.842156][ T8000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:32 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6c060000)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4620000700a80f0000000000000200000000000000000000000000000040000000000000000000000000000000000000000000380000000000ff8100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"/888], 0x378)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x94, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffff7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0xfffffffffffffeba}]}, 0x94}}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x8000, @empty}, 0x1c)
unshare(0x52040680)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x13)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b25000000000000f10f00000546", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r2, 0x1)
splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0)
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0x412, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})

[  956.912999][ T7998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:32 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x18}, 0x0, 0x0)

11:44:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x6081, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xc4, r4, 0x12, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x40)

11:44:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000007c0)={0x688, 0x0, 0x500, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x3f, 0x4, 0x8}, {0x1, 0x0, 0x6, 0x6}, {0x5, 0xff, 0x9, 0x5}, {0x5, 0x2, 0x2, 0x1d57}, {0x6, 0xf8, 0x40, 0x9}, {0x4fc, 0x1, 0x2, 0x5}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x10c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x12, 0x8}, {0x5, 0xf9, 0x9, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0xf1, 0x70, 0x1}, {0x8, 0x1, 0x5, 0x9b9a}, {0x6, 0x1, 0x2, 0x9}, {0x7, 0x5, 0x7, 0x8}, {0xba8c, 0x3c, 0xc1, 0x200}, {0x80, 0x4f, 0x1, 0x2}, {0xfffc, 0x5, 0xbb, 0x81}, {0x6, 0x9, 0x1, 0x8}, {0x3, 0x7f, 0x20, 0xfffffffe}, {0x6, 0x1, 0x1, 0x8}]}}}]}}]}, 0x688}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="5000000008021100001c08021100000008021100000000000000000000000000640001005a00060202020202020107008b960c121800"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  957.121273][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  957.143067][ T8062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.194630][ T8056] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'.
[  957.243467][ T8068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.272665][ T5612] wlan1: authenticate with 08:02:11:00:00:00
[  957.285078][ T5612] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:33 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2600)

[  957.311960][ T8077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.333633][ T4033] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  957.379481][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  957.410209][ T8078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.440629][ T8078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.473114][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x2061, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0xfffffffffffffd20, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  957.521426][ T8062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.532562][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:33 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x25}, 0x0, 0x0)

11:44:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  957.659407][ T8088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.663105][ T1489] wlan1: authentication with 08:02:11:00:00:00 timed out
[  957.714191][ T8068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.735122][ T8090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/95, 0x5f}, {&(0x7f0000001580)=""/68, 0x44}, {&(0x7f0000001600)=""/6, 0x6}, {&(0x7f0000001640)=""/22, 0x16}, {&(0x7f0000001680)=""/111, 0x6f}, {&(0x7f0000001700)=""/238, 0xee}, {&(0x7f0000001800)=""/98, 0x62}], 0x9}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001940)=""/60, 0x3c}], 0x1, &(0x7f00000019c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/182, 0xb6}], 0x1}}, {{&(0x7f0000001b80)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001c00)=""/169, 0xa9}, {&(0x7f0000001cc0)=""/87, 0x57}], 0x2, &(0x7f0000001d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001dc0)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001e40)=""/77, 0x4d}, {&(0x7f0000001ec0)=""/130, 0x82}], 0x2, &(0x7f0000001fc0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002000)=""/198, 0xc6}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, &(0x7f0000003140)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000031c0), 0x6e, &(0x7f0000003380)=[{&(0x7f0000003240)=""/253, 0xfd}, {&(0x7f0000003340)=""/44, 0x2c}], 0x2, &(0x7f00000033c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000003480)=@abs, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000003500)=""/82, 0x52}, {&(0x7f0000003580)=""/198, 0xc6}, {&(0x7f0000003680)=""/187, 0xbb}, {&(0x7f0000003740)=""/131, 0x83}, {&(0x7f0000003800)=""/104, 0x68}, {&(0x7f0000003880)=""/98, 0x62}, {&(0x7f0000003900)=""/43, 0x2b}, {&(0x7f0000003940)=""/224, 0xe0}], 0x8, &(0x7f0000003ac0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003b00), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003b80)=""/172, 0xac}, {&(0x7f0000003c40)=""/186, 0xba}, {&(0x7f0000003d00)=""/182, 0xb6}, {&(0x7f0000003dc0)=""/35, 0x23}, {&(0x7f0000003e00)=""/188, 0xbc}], 0x5, &(0x7f0000003f40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000004000), 0x6e, &(0x7f0000006480)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/124, 0x7c}, {&(0x7f0000006100)=""/68, 0x44}, {&(0x7f0000006180)=""/146, 0x92}, {&(0x7f0000006240)=""/65, 0x41}, {&(0x7f00000062c0)=""/115, 0x73}, {&(0x7f0000006340)=""/138, 0x8a}, {&(0x7f0000006400)=""/120, 0x78}], 0x9, &(0x7f0000006540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0xa, 0x40010101, &(0x7f0000006800)={0x77359400})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000006900)={&(0x7f0000006840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000068c0)={&(0x7f0000006880)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x44000)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  957.783148][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x6081, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xc4, r4, 0x12, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x40)

11:44:33 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2700)

[  957.935534][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.972689][ T5613] wlan1: authenticate with 08:02:11:00:00:00
11:44:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  957.976870][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.979622][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  958.026447][ T8102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.046005][ T8099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.068791][ T8102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x2061, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0xfffffffffffffd20, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  958.118680][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.142769][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:34 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc, 0x2, 0x11, 0x0, 0x0, 0x6d}, 0x0, 0x0)

[  958.252148][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  958.289682][ T8113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.328130][ T8113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.353909][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.364753][ T4033] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  958.387604][ T8105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.413733][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:34 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2800)

[  958.450922][ T8105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x6081, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xc4, r4, 0x12, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x40)

11:44:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  958.634029][ T8128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.674316][ T8128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.701525][ T8130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.712647][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.732981][ T5613] wlan1: authenticate with 08:02:11:00:00:00
[  958.740010][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  958.783281][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  958.786093][ T8136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  958.794559][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:34 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x2)

11:44:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x2061, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0xfffffffffffffd20, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  958.852239][ T4033] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:34 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2900)

[  958.973891][ T8139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  959.003473][ T8144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  959.055892][ T8144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x6081, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xc4, r4, 0x12, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x40)

[  959.190531][ T8130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  959.223733][ T5613] wlan1: authenticate with 08:02:11:00:00:00
[  959.237701][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  959.265002][ T8155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x4f4, r4, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x465, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {}, @broadcast, @device_b, @random="4a1ab2544a97", {0x5, 0x7f}}, 0x24, 0x2, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x40, 0x0, 0x4, 0x0, {0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x2, 0x7f}}, [{0xdd, 0x58, "1d501de8ad3f3463435500fbadaf2409b49557c39c5dc696de322ebac5ff187a83a2124451feaa8e2af959c69ee0ae368ec1316e9719e847c61a97dbe83818fb06df23d26a8b6a30b46c1ec16cece3aef5f007b27b2be239"}, {0xdd, 0xf6, "e58b42ded246b3b777c09b960e2ebfac84f40679ade3ba56d465ca2ac2a50e9b394cc10fd998c4729fc830acb625cc21a3215a858aa550414c71bec7a8846a6d3b22ded4e55525e60b8fe5b600623b3ea8d26025f6fec10c283038f4e13b71c7c6f6f0bd50f8bc53f3aac67c0b64a0124d28746c24069a516b0df6c54c8aa9c86bb7a56ba15e316f87a7cfd09fb236691f0f5b859cfb36198a8c5913e57b23afbd21e8af5ca00a201607cfcab97ea46c70a8ca3a86770cf7172191357db97d49f3af729109962633f9686ddbe3fd7865d0a0adb79a99a8109b9b7e8c2caa3109ee7f193120614fe11ee4440711163da67c20a218af5b"}, {0xdd, 0x37, "fcda3f6f0bf2e649c290efc54de2d50c6f4c9eea5796847a2a0131f3870523c204dc2ab1ab8161b63c411854228713c0feb2c8fc845d37"}, {0xdd, 0xda, "8eb3a095207e6c860f5bdf2db6ece37eac296316b5c8faf088320729275311f2f2a652fed1ddf6deadd2966a4812dcc9f0ebbacc57c9cf5fb1231d1cb5cb3bcff0f5281b3bde3e556070db11908e245d5e29da7d261cb3509b891c5aeae24841711438596045c142ff55ab5bb2960d5a7637f046cd8a2743f4ea2eb9a7289d45d50c0f1293d680a57a8b6abdf0dbf7a2ad00e17495b91fbc1d9766ed225d2e183fae65feaac04959b723c304edeec5f761d9fbf0f6ed8583d219ed4706b73d44949fc1e7d20e0799c18d306cf95c069c7335ff7907fb59313e82"}, {0xdd, 0xc1, "94f9e69aa35aa5a5726936e27d1c85514979427bb496994975c0ae6b55ab05480097eb78a61554f6abdae6fa8e171c392049c26b9593c4678a09d7b7c3c7feee23d8c62da2196ac830f4dc295aecd00fb295efc539590a7691788ceddc9142ef3d185576d3a511a1bd94fa225631b855028c4ba889ba9bba030feb0c863cfdb4b1e8aae704791cc998da7bf820f48a950dc01c27c6391f64ef2a78436190ea0485f6335075f8fc6efec21c252f5bf57f9d195a96cdc862053d9cfdb0df2b7c0b19"}, {0xdd, 0x46, "b39a32e0a2afe409a8402e58da029ab99ddfd585518f19f86a5a2c24fc4a4a945c10157b834798694d3c9d04289feda134a9e2fed9ded2523f319cdda1264022eb42f791288c"}, {0xdd, 0xad, "000efe9d068af031c98e9e0edf4519e0f58155f1f631dd145da735e4f34ddb1686b4f4c719c90cdaf6f673dbf0e1f810ccbd9859c36172c7b4e0de63654946c2b5ae48b0b4c78b7a84ef77387c92c781f1704b39b4c7e34c3e7dcd7a6ea33e985df3f92b7e30aa995bb9d1a0705cf7a7b369c9ff731bfe491edb19278a1e46ecb4f3e9973095d44a1a2ee4c38863ae004a1cdda700b2c27ac40bfd5aced84ad9ccd9fce04ee61f0b4150c63e5e"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xde}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x253}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x55c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x40010}, 0x40408c1)

[  959.311707][ T8139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  959.335401][ T8157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  959.393014][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:35 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x3)

11:44:35 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x3f00)

11:44:35 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000100)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10)
dup3(r2, r1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

11:44:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  959.496048][ T8163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  959.505965][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  959.506258][ T4033] wlan1: authentication with 08:02:11:00:00:00 timed out
[  959.586200][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  959.596973][ T8164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  959.631188][ T8165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:35 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r0, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0)

11:44:35 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$inet6(0xa, 0x80000, 0xad8a)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x9, 0x4)

[  959.927445][ T8164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:35 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x4800)

[  959.983824][ T8163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  960.001004][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  960.022816][ T5612] wlan1: authenticate with 08:02:11:00:00:00
11:44:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  960.044050][ T5612] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  960.076933][ T8170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:35 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x33, 0x0, 0x8363}})
r1 = socket$netlink(0x10, 0x3, 0xe)
sendfile(r0, r1, 0x0, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getchain={0x2c, 0x66, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x9, 0xfff1}, {0xd, 0x10}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x91)

11:44:35 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$inet6(0xa, 0x80000, 0xad8a)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x9, 0x4)

[  960.202165][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  960.231760][ T8200] netdevsim netdevsim5: Direct firmware load for cƒ failed with error -2
11:44:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000f0", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:36 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x4)

11:44:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="1c003400ac8702020202020200000a00060008580f0000000000080026006c09"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  960.264822][ T8200] netdevsim netdevsim5: Falling back to sysfs fallback for: cƒ
[  960.332977][ T8204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  960.372964][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  960.375405][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
11:44:36 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$inet6(0xa, 0x80000, 0xad8a)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x9, 0x4)

[  960.457003][ T8200] netdevsim netdevsim5: Direct firmware load for cƒ failed with error -2
[  960.465098][ T8214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000002", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  960.504798][ T8200] netdevsim netdevsim5: Falling back to sysfs fallback for: cƒ
[  960.515046][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:36 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x4c00)

11:44:36 executing program 5:
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}], 0x1, 0x0, 0x0)

[  960.657107][ T8204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:36 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$inet6(0xa, 0x80000, 0xad8a)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x9, 0x4)

11:44:36 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x5)

11:44:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000003", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  960.864659][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  960.905048][ T8209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  960.920022][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:36 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$inet6(0xa, 0x80000, 0xad8a)

11:44:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000004", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="1c003400ac8702020202020200000a00060008580f0000000000080026006c09"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:37 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x4c0b)

11:44:37 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b)

[  961.170564][ T8246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  961.243439][ T8251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  961.259410][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  961.270976][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000005", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  961.285782][ T8249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:37 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x6)

[  961.353260][ T8257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:37 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0)

[  961.486801][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000006", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  961.605808][ T8246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:37 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0)

11:44:37 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x6000)

11:44:37 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_bp={0x0, 0xb}, 0x1b20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getpid()
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x32, 0x0, 0x0, {0x0, @hdata="51449fe33404f72bed8b105c87e027f1fd447a345d853d501c50ecfdacccd3c8fd9f12d16eb777b8ae3fdb6a985ab0b396ffc0d8", {0x0, @local}, @usr_ip6_spec={@mcast1, @remote}}}})
fcntl$getown(r4, 0x9)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="c4c235aa1066ba2100b000ee440f070f3235002f0400d4d4910091b8010000000f01d9b90e020000b805000000ba00800000b9800000c00f3235010000000f30420f38c9ee420f928e00000000c48181c6080066baa000ecb0e3ee", 0x5b}], 0x1, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000))
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000180)=""/119, 0x77}], 0x2, 0xfff, 0x5e)
mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x4c6b0000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:44:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000040))

11:44:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\a', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  961.817029][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:37 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x7)

11:44:37 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)

[  961.924290][ T8277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\b', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  961.984868][ T8283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  962.023282][ T8275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  962.054692][ T8284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:38 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)

11:44:38 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x6800)

11:44:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\t', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  962.356116][ T8277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:38 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  962.415224][ T8284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000440)=@mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @device_b, @broadcast, @initial, {0x4, 0x3}}, 0x0, 0x0, 0x14, @void, [{0xdd, 0x38, "8111dc63bfec6bdf8c8681dffc0443c2144c7a557c2f388939083ac7380a86db3641796094ee5266443efd6ec76fe4182bb5c5de016001c2"}, {0xdd, 0x29, "ba657db41aee80d7dc53d113a26662b50b1fade212b0c0a2e44dc7f1a1c55b673fdf1823d869d2e468"}, {0xdd, 0xa1, "cc1acd3f49cc887f3574be384226884005665c33b1f65944d9211b6ce5db04ef7f9e926d0d5a23d1cdb6612c558d7f7bb7cb5c464d7434a66572ece9cb6c450496bc3353cb89e9d7bcde2c1bdc6b6733af0b1c94823a7a112a9952b50b19255312ce16e79545e05e157ded837eb82f287ddac4a28769055fb1e673cb916f768d379d733c9e88afa8cc34a1bde18dbeebb67e8d3f378480bdfff40fb6fc1e09b1bc"}, {0xdd, 0x6c, "df9f84b277ca484f3bd7fe2eb8f04c41eeea4dc32cc655910e52eabb28464339b175c5abb69c85d66cab0214559155df19e27662db5745fd5a6d7105c7cfcb3b367ae60256f88e229e18d7681a862d042381195f284f683f213dab83eec33c2fab13211c83af1a82c912ed59"}]}, 0x194)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:38 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x8)

[  962.618442][ T8309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  962.656070][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  962.680181][ T8307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  963.003729][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  963.019229][ T8316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  963.042024][ T8309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  963.457099][ T8279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  963.504269][ T8279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:39 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_bp={0x0, 0xb}, 0x1b20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getpid()
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x32, 0x0, 0x0, {0x0, @hdata="51449fe33404f72bed8b105c87e027f1fd447a345d853d501c50ecfdacccd3c8fd9f12d16eb777b8ae3fdb6a985ab0b396ffc0d8", {0x0, @local}, @usr_ip6_spec={@mcast1, @remote}}}})
fcntl$getown(r4, 0x9)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="c4c235aa1066ba2100b000ee440f070f3235002f0400d4d4910091b8010000000f01d9b90e020000b805000000ba00800000b9800000c00f3235010000000f30420f38c9ee420f928e00000000c48181c6080066baa000ecb0e3ee", 0x5b}], 0x1, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000))
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000180)=""/119, 0x77}], 0x2, 0xfff, 0x5e)
mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x4c6b0000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:44:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000e", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:39 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x6c00)

11:44:39 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="9ac3061e42ccad35153e0e53998154d9fb8b6cf73b68c9a54d6581a341e943a10280e281372578f598298037477808ee5c4cd52e69de71376500f91deae68dd011b65adeb46336f58e81afcbb4bbd0ab9b362e50bc680bac546d211c0e638eb67f2c5e46d27e037bef9b1f02bb62df8126b379439ef00440571deb1b2861a720579cd5a867c431020d5caa297a723d8f138fd288", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)

11:44:39 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x9)

11:44:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000006f060000d0afd08600", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000300)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @device_b, @multi={{0x1, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x3, {0x4, 0x8}, "54a7e210ba06b5ea"}, {0x0, 0x0, {0x4, 0x22b}, "d869f78f15131f71"}, {0x0, 0x6, {0x7, 0x21d}, "47b0b14b990d800a"}, {0x0, 0x2, {0x7}, "70e6c5c7fa66d8a5"}, {0x0, 0x1, {0x3, 0xb3}, "e6c2046ec7bcde56"}, {0x0, 0x6, {0x6, 0x5}, "5f15373b0e32b809"}, {0x0, 0x2, {0x1}, "ab1d1a1c5483ee82"}, {0x0, 0x0, {0xe, 0x1f}, "b83ca741e2f6f74d"}], {0x0, 0xc, {0x6, 0x486}, "d89b952719cdbbe6"}}}, 0x7e)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000004f080211000001080211000000080211000000efbe0000000000"], 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xbc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x80}}}}}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
syz_80211_inject_frame(0x0, 0x0, 0x0)
lseek(r4, 0xa48, 0x1)

[  963.739222][ T8325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  963.770786][ T8333] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
11:44:39 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c356c78d8f3947b78d3b848c1af400da09d4448a926ced824fa95c79f771929b206754be5904bffa35ee8d9b88fc1c749d665be7c0969925ed5db3f581b6e62efa5d85298d8", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000090000001800018014000200776c616e3000"/38], 0x2c}}, 0x0)

11:44:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000f", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  963.803189][ T8333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  963.852085][ T8333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  963.902135][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:39 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

11:44:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00`', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:39 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x7400)

11:44:39 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

[  964.094332][ T8325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.266776][ T8333] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  964.280372][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.326305][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  965.020212][ T8335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  965.076139][ T8335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000006f060000d0afd08600", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000300)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @device_b, @multi={{0x1, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x3, {0x4, 0x8}, "54a7e210ba06b5ea"}, {0x0, 0x0, {0x4, 0x22b}, "d869f78f15131f71"}, {0x0, 0x6, {0x7, 0x21d}, "47b0b14b990d800a"}, {0x0, 0x2, {0x7}, "70e6c5c7fa66d8a5"}, {0x0, 0x1, {0x3, 0xb3}, "e6c2046ec7bcde56"}, {0x0, 0x6, {0x6, 0x5}, "5f15373b0e32b809"}, {0x0, 0x2, {0x1}, "ab1d1a1c5483ee82"}, {0x0, 0x0, {0xe, 0x1f}, "b83ca741e2f6f74d"}], {0x0, 0xc, {0x6, 0x486}, "d89b952719cdbbe6"}}}, 0x7e)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000004f080211000001080211000000080211000000efbe0000000000"], 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xbc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x80}}}}}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
syz_80211_inject_frame(0x0, 0x0, 0x0)
lseek(r4, 0xa48, 0x1)

11:44:41 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0xe)

11:44:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000f0", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:41 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:41 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x7a00)

[  965.675841][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  965.697577][ T8377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  965.736967][ T8377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  965.751377][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
11:44:41 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  965.780056][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  965.788951][ T8380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  965.842548][ T8380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  965.897312][ T8379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:41 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:41 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xc000)

[  966.018962][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  966.122366][ T8377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000006f060000d0afd08600", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000300)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @device_b, @multi={{0x1, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x3, {0x4, 0x8}, "54a7e210ba06b5ea"}, {0x0, 0x0, {0x4, 0x22b}, "d869f78f15131f71"}, {0x0, 0x6, {0x7, 0x21d}, "47b0b14b990d800a"}, {0x0, 0x2, {0x7}, "70e6c5c7fa66d8a5"}, {0x0, 0x1, {0x3, 0xb3}, "e6c2046ec7bcde56"}, {0x0, 0x6, {0x6, 0x5}, "5f15373b0e32b809"}, {0x0, 0x2, {0x1}, "ab1d1a1c5483ee82"}, {0x0, 0x0, {0xe, 0x1f}, "b83ca741e2f6f74d"}], {0x0, 0xc, {0x6, 0x486}, "d89b952719cdbbe6"}}}, 0x7e)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000004f080211000001080211000000080211000000efbe0000000000"], 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xbc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x80}}}}}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
syz_80211_inject_frame(0x0, 0x0, 0x0)
lseek(r4, 0xa48, 0x1)

11:44:42 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0xf)

11:44:42 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @device_a, @from_mac=@broadcast, {0xd, 0x80}}, 0x3f, @void}, 0x1a)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xc2, 0x1f, 0xff, 0xff, 0x51, 0x2, 0x38, 0x20, 0x2d4, 0x38, 0x24b, 0x5, 0x8, 0x20, 0x1, 0x1000, 0x9, 0x7}, [{0x5, 0xfffffff8, 0x1, 0x1, 0x8, 0x36d, 0x10001, 0x8001}, {0x5, 0x7, 0x5, 0x5, 0x1, 0x7f, 0x5, 0x7fffffff}], "39615e5cf213cfdf404b8e03845dcbb7492ee14105613c2a6b6650a462fdca040e783ba81386b849d536490e3494fe2060900d61ef56b934fee5f1cfe4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab5)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  966.324339][ T8399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  966.388878][ T8404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  966.404719][ T8405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
11:44:42 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  966.432197][ T5613] wlan1: authenticate with 08:02:11:00:00:00
[  966.443172][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  966.480629][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  966.558464][ T8403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  966.565516][ T8404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:42 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xf000)

[  966.674674][ T8399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:42 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:42 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x11)

[  966.895966][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:42 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000d2", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000006f060000d0afd08600", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000300)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @device_b, @multi={{0x1, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x3, {0x4, 0x8}, "54a7e210ba06b5ea"}, {0x0, 0x0, {0x4, 0x22b}, "d869f78f15131f71"}, {0x0, 0x6, {0x7, 0x21d}, "47b0b14b990d800a"}, {0x0, 0x2, {0x7}, "70e6c5c7fa66d8a5"}, {0x0, 0x1, {0x3, 0xb3}, "e6c2046ec7bcde56"}, {0x0, 0x6, {0x6, 0x5}, "5f15373b0e32b809"}, {0x0, 0x2, {0x1}, "ab1d1a1c5483ee82"}, {0x0, 0x0, {0xe, 0x1f}, "b83ca741e2f6f74d"}], {0x0, 0xc, {0x6, 0x486}, "d89b952719cdbbe6"}}}, 0x7e)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000004f080211000001080211000000080211000000efbe0000000000"], 0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xbc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x80}}}}}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
syz_80211_inject_frame(0x0, 0x0, 0x0)
lseek(r4, 0xa48, 0x1)

11:44:42 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xff0f)

11:44:43 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  967.157311][ T8436] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[  967.231187][ T8436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  967.249153][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  967.317901][ T8434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  967.441993][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  967.551578][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  967.671594][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
[  968.658019][ T4033] device hsr_slave_0 left promiscuous mode
[  968.667525][ T4033] device hsr_slave_1 left promiscuous mode
[  968.679827][ T4033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  968.687498][ T4033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  968.696268][ T4033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  968.704234][ T4033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  968.715789][ T4033] device bridge_slave_1 left promiscuous mode
[  968.722927][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.731206][ T4033] device bridge_slave_0 left promiscuous mode
[  968.738197][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.751269][ T4033] device veth1_macvtap left promiscuous mode
[  968.757455][ T4033] device veth0_macvtap left promiscuous mode
[  968.763736][ T4033] device veth1_vlan left promiscuous mode
[  968.769605][ T4033] device veth0_vlan left promiscuous mode
[  968.958673][ T4033] team0 (unregistering): Port device team_slave_1 removed
[  968.978914][ T4033] team0 (unregistering): Port device team_slave_0 removed
[  968.991631][ T4033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  969.006758][ T4033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  969.081958][ T4033] bond0 (unregistering): Released all slaves
[  970.965674][ T8473] chnl_net:caif_netlink_parms(): no params data found
[  971.050272][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.058891][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.071363][ T8473] device bridge_slave_0 entered promiscuous mode
[  971.080140][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.088837][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.097726][ T8473] device bridge_slave_1 entered promiscuous mode
[  971.137453][ T8473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  971.154732][ T8473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  971.197592][ T8473] team0: Port device team_slave_0 added
[  971.207663][ T8473] team0: Port device team_slave_1 added
[  971.244061][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  971.251036][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  971.279885][ T8473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  971.296089][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  971.303223][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  971.329867][ T8473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  971.375976][ T8473] device hsr_slave_0 entered promiscuous mode
[  971.388317][ T8473] device hsr_slave_1 entered promiscuous mode
[  971.395730][ T8473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  971.404070][ T8473] Cannot create hsr debugfs directory
[  971.520600][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.527786][ T8473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  971.535190][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.542371][ T8473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  971.608412][ T8473] 8021q: adding VLAN 0 to HW filter on device bond0
[  971.624956][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  971.633526][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.641069][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.650093][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  971.667729][ T8473] 8021q: adding VLAN 0 to HW filter on device team0
[  971.680274][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  971.689336][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.696513][ T5613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  971.715156][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  971.723901][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.730960][ T8541] bridge0: port 2(bridge_slave_1) entered forwarding state
[  971.754311][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  971.764633][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  971.784250][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  971.792843][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  971.800989][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  971.813945][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  971.839783][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  971.847483][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  971.864833][ T8473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  971.889215][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  971.915877][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  971.925142][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  971.934971][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  971.947001][ T8473] device veth0_vlan entered promiscuous mode
[  971.966512][ T8473] device veth1_vlan entered promiscuous mode
[  971.996821][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  972.007219][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  972.021911][ T8473] device veth0_macvtap entered promiscuous mode
[  972.034197][ T8473] device veth1_macvtap entered promiscuous mode
[  972.055797][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  972.066862][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.077785][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  972.089733][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.100108][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  972.111027][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.123360][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  972.131422][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  972.139452][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  972.148383][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  972.157876][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  972.170249][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  972.181581][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.192898][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  972.203912][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.214121][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  972.224959][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  972.235937][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  972.245423][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  972.254858][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  972.370135][  T692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.379618][  T692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.426118][ T2577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.435977][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  972.441941][ T2577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.458588][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  972.535475][ T8808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  972.547391][ T8808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  972.560672][ T8808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  972.583770][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  972.589430][ T5613] wlan1: authenticate with 08:02:11:00:00:00
[  972.591613][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  972.606875][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  972.617155][ T8808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  972.640835][ T8807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  972.732187][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  972.801458][ T8541] Bluetooth: hci6: command 0x0409 tx timeout
[  972.842250][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  972.952315][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
[  972.970091][ T8808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  972.982778][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:44:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  972.994855][ T8811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:48 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x12)

11:44:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:48 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:48 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x30000)

11:44:48 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  973.092300][ T8814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.134803][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.150823][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:49 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  973.176651][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.188257][ T5613] wlan1: authenticate with 08:02:11:00:00:00
[  973.195561][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.201630][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  973.233354][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  973.235448][ T8817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.259381][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:49 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  973.402323][  T692] wlan1: authentication with 08:02:11:00:00:00 timed out
[  973.431506][ T8814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:49 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:49 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x34000)

[  973.582747][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.613285][ T5612] wlan1: authenticate with 08:02:11:00:00:00
[  973.620408][ T5612] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x3f}}, 0x0, 0x0, 0x59, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:49 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x14)

11:44:49 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @device_a, @from_mac=@broadcast, {0xd, 0x80}}, 0x3f, @void}, 0x1a)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xc2, 0x1f, 0xff, 0xff, 0x51, 0x2, 0x38, 0x20, 0x2d4, 0x38, 0x24b, 0x5, 0x8, 0x20, 0x1, 0x1000, 0x9, 0x7}, [{0x5, 0xfffffff8, 0x1, 0x1, 0x8, 0x36d, 0x10001, 0x8001}, {0x5, 0x7, 0x5, 0x5, 0x1, 0x7f, 0x5, 0x7fffffff}], "39615e5cf213cfdf404b8e03845dcbb7492ee14105613c2a6b6650a462fdca040e783ba81386b849d536490e3494fe2060900d61ef56b934fee5f1cfe4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab5)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:49 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  973.781281][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  973.791114][ T8848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.818901][ T8852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\r', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  973.835139][ T8854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:49 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  973.886759][ T8854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.896985][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:49 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x90000)

[  973.944789][ T8854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  974.011279][ T2577] wlan1: authentication with 08:02:11:00:00:00 timed out
[  974.013626][ T8864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  974.067532][ T8864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  974.129172][ T8848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:50 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  974.182292][ T8850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.196360][ T8852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.231937][ T5612] wlan1: authenticate with 08:02:11:00:00:00
[  974.244216][ T5612] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:50 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x15)

11:44:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x3}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:50 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  974.371262][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  974.399657][ T8881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.410313][ T8880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  974.481804][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @device_a, @from_mac=@broadcast, {0xd, 0x80}}, 0x3f, @void}, 0x1a)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xc2, 0x1f, 0xff, 0xff, 0x51, 0x2, 0x38, 0x20, 0x2d4, 0x38, 0x24b, 0x5, 0x8, 0x20, 0x1, 0x1000, 0x9, 0x7}, [{0x5, 0xfffffff8, 0x1, 0x1, 0x8, 0x36d, 0x10001, 0x8001}, {0x5, 0x7, 0x5, 0x5, 0x1, 0x7f, 0x5, 0x7fffffff}], "39615e5cf213cfdf404b8e03845dcbb7492ee14105613c2a6b6650a462fdca040e783ba81386b849d536490e3494fe2060900d61ef56b934fee5f1cfe4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab5)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:50 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x400300)

11:44:50 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  974.601332][ T2577] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  974.718274][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.741871][ T8880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.760107][ T8897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.782290][ T8885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000ff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  974.812258][ T5613] wlan1: authenticate with 08:02:11:00:00:00
[  974.812407][ T8881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.824853][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  974.842522][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:50 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x16)

[  974.869499][ T8897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  974.881278][ T8541] Bluetooth: hci6: command 0x041b tx timeout
[  974.923854][ T8897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x93b30dde873e535}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r3, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0xd}}}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="7899a411e5f8670144ba25"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000000090aa6f5200003c2c3e5323d64b919a2effecb71ee0cc0850c3cfd3836c73fb36b3616a94137493196255f3f5bef016da12ac66602729497ade3d6aedace1fafb2ad6f8b37914cbdbacac8f88187690fb2a04a0b7134e9a827b"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x23a, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x500}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xeb9d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x37ac0000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x24048404)

[  975.007796][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.011987][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:50 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xf0ffff)

11:44:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  975.055159][ T8895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.112027][ T8918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.142677][ T2577] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 43664 (expected 0) transact 21103 (expected 2)
[  975.143654][ T8918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.178014][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  975.209347][ T8917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  975.365975][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:51 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x17)

11:44:51 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @device_a, @from_mac=@broadcast, {0xd, 0x80}}, 0x3f, @void}, 0x1a)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xc2, 0x1f, 0xff, 0xff, 0x51, 0x2, 0x38, 0x20, 0x2d4, 0x38, 0x24b, 0x5, 0x8, 0x20, 0x1, 0x1000, 0x9, 0x7}, [{0x5, 0xfffffff8, 0x1, 0x1, 0x8, 0x36d, 0x10001, 0x8001}, {0x5, 0x7, 0x5, 0x5, 0x1, 0x7f, 0x5, 0x7fffffff}], "39615e5cf213cfdf404b8e03845dcbb7492ee14105613c2a6b6650a462fdca040e783ba81386b849d536490e3494fe2060900d61ef56b934fee5f1cfe4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab5)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:51 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:51 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1000000)

[  975.556924][ T8924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.567087][ T2577] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 43664 (expected 0) transact 21103 (expected 2)
[  975.600029][ T8934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.611943][ T8917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  975.648601][ T8941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf250a00000008000400594600002c00028006000b000a00000006000b0002000000080003000200000006000f000010000008000700030000001400018008000b0073697000060001000a000000240001800c000700040000000200000007000600736800000c000700010000001200000014000180060001000a00000008000900030000004cc3aaa923a8216c11a039eb1a6d253831ee32bd6ffdb91a4c2e1209b2b0052888907a8c364770a77075ab40928d1d87a433b355"], 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000500)=@ctrl_frame=@rts={{}, {0x2}, @broadcast, @broadcast}, 0x10)

[  975.695565][ T8941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.748738][ T8950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.772992][ T8941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:44:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  975.788231][ T8941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  975.844311][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  975.868259][ T8956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  975.898681][ T8960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.915259][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.916433][  T158] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  975.931345][ T8952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:51 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x2000000)

[  975.963409][ T8934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.986957][ T8937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:51 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x18)

[  976.130406][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  976.264750][ T8960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.278425][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.281584][ T2577] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
11:44:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x65}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5fe}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x9, 0x100, 0x80, 0xc0, 0x400, 0x8000]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x44004)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket(0x28, 0xa, 0xfc)

11:44:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x93b30dde873e535}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r3, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0xd}}}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="7899a411e5f8670144ba25"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000000090aa6f5200003c2c3e5323d64b919a2effecb71ee0cc0850c3cfd3836c73fb36b3616a94137493196255f3f5bef016da12ac66602729497ade3d6aedace1fafb2ad6f8b37914cbdbacac8f88187690fb2a04a0b7134e9a827b"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x23a, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x500}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xeb9d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x37ac0000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x24048404)

11:44:52 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x3000000)

[  976.463027][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.481221][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:52 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  976.539875][ T8983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.574535][ T5613] wlan1: authenticate with 08:02:11:00:00:00
11:44:52 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x19)

[  976.594581][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  976.599877][ T8985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.608736][ T8988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.631300][ T8981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.649398][  T692] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  976.671449][ T8990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  976.694289][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  976.733655][ T8994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:52 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x4000000)

[  976.831093][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  976.941026][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
[  976.961214][ T8541] Bluetooth: hci6: command 0x040f tx timeout
[  976.980107][ T8988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x93b30dde873e535}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r3, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0xd}}}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="7899a411e5f8670144ba25"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000000090aa6f5200003c2c3e5323d64b919a2effecb71ee0cc0850c3cfd3836c73fb36b3616a94137493196255f3f5bef016da12ac66602729497ade3d6aedace1fafb2ad6f8b37914cbdbacac8f88187690fb2a04a0b7134e9a827b"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x23a, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x500}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xeb9d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x37ac0000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x24048404)

[  977.041906][ T8983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.043265][ T8541] wlan1: authenticate with 08:02:11:00:00:00
[  977.052835][ T8994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.076373][ T8541] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:53 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1a)

11:44:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x70200, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000240))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x70, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x39}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x41}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="bd4230b77594e9b13a9209fe54e68127ae11e22d56ad9e"}, @NL80211_ATTR_SSID={0x7, 0x34, @random="f65154"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e9d8d828177b5e0c01a89b202fdd6cde"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x40001)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4a000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000007c0dafe143bb9567c302498feb0888a04b79b5dec9a8274c29018b3e0d8f86a06bad2bce2fcd49bcbeb76fa44e", @ANYRES64=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES16, @ANYRESOCT], 0x44}}, 0x800)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50004a8719895a96000008021100000108021100000008021100000000000000000000000000640001000006020202024202010700"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  977.215608][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.231110][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  977.247397][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  977.267007][ T9014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.340722][ T9020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.352081][ T9022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.371049][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  977.374757][ T9020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:53 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x5000000)

[  977.378048][ T1159] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  977.390543][ T9019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.484869][ T1159] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:53 executing program 0:
sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000ff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x93b30dde873e535}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r3, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0xd}}}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="7899a411e5f8670144ba25"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000000090aa6f5200003c2c3e5323d64b919a2effecb71ee0cc0850c3cfd3836c73fb36b3616a94137493196255f3f5bef016da12ac66602729497ade3d6aedace1fafb2ad6f8b37914cbdbacac8f88187690fb2a04a0b7134e9a827b"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x23a, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x500}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xeb9d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x37ac0000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x24048404)

[  977.675857][ T9022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:53 executing program 0:
sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:53 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1b)

[  977.797875][ T9020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  977.846519][ T9041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:53 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x6000000)

[  977.914157][ T9046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000004c0)=ANY=[@ANYBLOB="975c22bdab61530200010802110000000802110000000000000000000000e4a7ff07862fe02725ec890024aed9ac77d7e9c77fa57129c6995b86486c2cd4892969f101bea3005a2558a6df6060e6a90f4e5118d2b2cef03748967371a6ee706ce3e56293b0a8b844931ebb5aec5a956218140b3958541e7ed7ba9cf840b61bc272603f612f", @ANYRES64=r2], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000ff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:53 executing program 0:
sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  977.993101][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.094425][ T9054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  978.134884][ T9054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:54 executing program 0:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  978.182537][ T9053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00007f", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x70200, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000240))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x70, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x39}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x41}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="bd4230b77594e9b13a9209fe54e68127ae11e22d56ad9e"}, @NL80211_ATTR_SSID={0x7, 0x34, @random="f65154"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e9d8d828177b5e0c01a89b202fdd6cde"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x40001)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4a000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000007c0dafe143bb9567c302498feb0888a04b79b5dec9a8274c29018b3e0d8f86a06bad2bce2fcd49bcbeb76fa44e", @ANYRES64=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES16, @ANYRESOCT], 0x44}}, 0x800)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50004a8719895a96000008021100000108021100000008021100000000000000000000000000640001000006020202024202010700"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:54 executing program 0:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  978.326851][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:54 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x7000000)

11:44:54 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1c)

11:44:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00009e", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:54 executing program 0:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  978.526236][ T9077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.553366][ T9075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.576424][ T9075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.579096][ T9053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.634837][ T9081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000000000800030000", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000f0", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:54 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  978.819314][ T9097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.864440][ T9097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.871219][ T5613] wlan1: authenticate with 08:02:11:00:00:00
[  978.882603][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  978.889816][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  978.898252][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  978.905617][ T9095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.925184][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x70200, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000240))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x70, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x39}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x41}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="bd4230b77594e9b13a9209fe54e68127ae11e22d56ad9e"}, @NL80211_ATTR_SSID={0x7, 0x34, @random="f65154"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e9d8d828177b5e0c01a89b202fdd6cde"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x40001)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4a000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000007c0dafe143bb9567c302498feb0888a04b79b5dec9a8274c29018b3e0d8f86a06bad2bce2fcd49bcbeb76fa44e", @ANYRES64=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES16, @ANYRESOCT], 0x44}}, 0x800)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50004a8719895a96000008021100000108021100000008021100000000000000000000000000640001000006020202024202010700"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:54 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x8000000)

[  978.982798][ T9081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  979.040939][ T8541] Bluetooth: hci6: command 0x0419 tx timeout
11:44:54 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1d)

[  979.126704][ T9112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.152914][ T9112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.178474][ T9110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.189388][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000ff", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  979.237597][ T9097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.253334][ T9118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.271167][ T5613] wlan1: authenticate with 08:02:11:00:00:00
[  979.282696][ T5613] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  979.306933][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  979.326259][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$can_raw(r3, &(0x7f0000000540)={&(0x7f0000000480), 0x10, &(0x7f0000000500)={&(0x7f00000004c0)=@can={{0x4, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "94e325179ad90594"}, 0x10}, 0x1, 0x0, 0x0, 0x4014}, 0x20004810)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x41)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  979.354855][ T4033] wlan1: authentication with 08:02:11:00:00:00 timed out
[  979.434492][ T9125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.461542][ T7065] wlan1: authenticate with 08:02:11:00:00:00
[  979.472944][ T7065] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:55 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x9000000)

[  979.478335][ T9125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.507964][  T158] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  979.509694][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  979.529378][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.544544][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x70200, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000240))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x70, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x39}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x41}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="bd4230b77594e9b13a9209fe54e68127ae11e22d56ad9e"}, @NL80211_ATTR_SSID={0x7, 0x34, @random="f65154"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e9d8d828177b5e0c01a89b202fdd6cde"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x40001)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4a000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000007c0dafe143bb9567c302498feb0888a04b79b5dec9a8274c29018b3e0d8f86a06bad2bce2fcd49bcbeb76fa44e", @ANYRES64=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES16, @ANYRESOCT], 0x44}}, 0x800)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50004a8719895a96000008021100000108021100000008021100000000000000000000000000640001000006020202024202010700"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  979.638934][ T9125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:55 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:55 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1e)

[  979.731921][ T9123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.738075][ T9134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  979.801095][ T9134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.823534][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  979.835615][ T9133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:55 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xe000000)

11:44:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  980.080386][ T9125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  980.174692][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.219850][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:44:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @device_a, @from_mac=@broadcast, {0xd, 0x80}}, 0x3f, @void}, 0x1a)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xc2, 0x1f, 0xff, 0xff, 0x51, 0x2, 0x38, 0x20, 0x2d4, 0x38, 0x24b, 0x5, 0x8, 0x20, 0x1, 0x1000, 0x9, 0x7}, [{0x5, 0xfffffff8, 0x1, 0x1, 0x8, 0x36d, 0x10001, 0x8001}, {0x5, 0x7, 0x5, 0x5, 0x1, 0x7f, 0x5, 0x7fffffff}], "39615e5cf213cfdf404b8e03845dcbb7492ee14105613c2a6b6650a462fdca040e783ba81386b849d536490e3494fe2060900d61ef56b934fee5f1cfe4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab5)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  980.260554][ T9164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  980.296109][ T9168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:56 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x21)

[  980.330453][ T9164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.340885][ T4033] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
11:44:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  980.372498][ T9162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.403971][ T9174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:56 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xf000000)

[  980.451699][ T9174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.460153][ T9175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.480850][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  980.487505][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
[  980.525835][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  980.573443][ T9179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:56 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  980.646365][ T9171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.708774][ T9185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.737864][ T9168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.749618][ T8528] wlan1: authenticate with 08:02:11:00:00:00
[  980.761951][ T8528] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  980.793210][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:44:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000366b74d6b80200000000004dc1d32bc28139ebbf438d000000000064000100"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  980.806674][ T9175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.849754][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  980.864205][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
11:44:56 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x22)

11:44:56 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x11000000)

[  980.913476][ T9194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.953081][ T9194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  981.032372][ T9193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.105585][ T9203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.152789][ T9212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  981.211219][ T9215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.252643][ T9209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:57 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x12000000)

[  981.396247][ T9222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.434605][ T9194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x54, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xff}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x15, 0x0, @random="7ab346f224616a1b8522a6c8b8f3cb6396"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x8000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  981.461073][ T9203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  981.608167][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  981.643952][ T9231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  981.666076][ T9232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:57 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:57 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x23)

11:44:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000366b74d6b80200000000004dc1d32bc28139ebbf438d000000000064000100"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  981.702018][ T9231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.728314][ T9229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.767217][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.778234][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  981.795267][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:57 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x14000000)

[  981.830264][ T9234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  982.068728][ T9256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.090481][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:58 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x24)

11:44:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x7fc, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x478, 0x11d, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4c9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x5}, {0x4, 0xa}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x6, 0x3}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0x6}, {0x7}, {0x6, 0x4}, {0x3, 0x7}, {0x6, 0x5}, {0x1}, {0x5}, {0x1, 0x7}, {}, {0x3, 0xa}, {0x2, 0x1}, {0x4, 0x7}, {0x6}, {0x3, 0xa}, {0x0, 0x5}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x2}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x4, 0x2, 0x0, 0x40, 0xa0b2, 0x98f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5909, 0x20, 0x7, 0x4, 0x80, 0x800, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x6, 0x2, 0x36, 0x36, 0x5, 0x2, 0x6, 0x4, 0x2, 0x1, 0x6c, 0x4, 0x2, 0xb, 0xb, 0x24, 0x1b, 0x48, 0x2, 0x30, 0x6, 0x18, 0x1, 0x4, 0x24, 0x9, 0xc]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xb, 0x6, 0xc, 0x12, 0x16, 0x16, 0x12, 0xb, 0x12, 0x51, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x48, 0x0, 0x60, 0x9, 0x6, 0x48, 0x1, 0x2, 0x24, 0xc, 0x36, 0x6, 0x6c, 0x48, 0x4, 0x36, 0x6c, 0x18, 0x1b, 0x60, 0x16, 0x12]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x7}, {0x4, 0x4}, {0x6, 0x7}, {0x7, 0xa}, {0x7, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x5}, {0x2, 0x6}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x6}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xaf4, 0xec, 0x135, 0xdf9e, 0x1f, 0x80, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x0, 0x40, 0x4, 0x9, 0x5, 0x4bf6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb8, 0x200, 0x9, 0x32, 0xa8b, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3ff, 0x8000, 0x1, 0x100, 0xfffc, 0x1, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35, 0x3, 0x1f, 0x33, 0x9f5, 0x9, 0x7c, 0x3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x3}, {0x2}, {}, {0x5, 0x8}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x12, 0x48, 0x4, 0x2, 0xf, 0x36, 0x1853a1680f0096d, 0x1b, 0x9, 0x5, 0x5, 0xb, 0x36, 0x1, 0xb, 0x48, 0x2, 0x60, 0x36, 0x0, 0x1, 0x2, 0x9, 0x12, 0x6, 0x5, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x4}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x8}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x9}, {0x2, 0x2}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x6}, {0x3, 0xa}, {0x3, 0x2}, {0x6, 0x6}, {0x2, 0x1}, {0x2, 0x4}, {0x6, 0xa}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x11}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x8}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x16, 0x12, 0x3, 0x1b, 0x1, 0x24, 0x1b, 0xc, 0x4, 0x5, 0x18, 0x6c, 0x24, 0x60, 0x4, 0x2, 0x1, 0x24, 0x24, 0x1, 0x9, 0x2, 0x5, 0xc]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x5}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x3}, {0x4, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x1}, {0x2, 0x4}, {0x1}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x2}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x4}, {0x3, 0x2}, {0x0, 0x8}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x6}, {}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x1}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x1}, {0x6, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x5, 0x6}, {0x1, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0xa}, {0x4, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x5}, {0x1, 0x6}, {0x2, 0x9}, {0x5, 0xa}, {0x1, 0x7}, {0x6}, {0x7, 0x6}, {0x6, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x9}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x6}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x6}, {0x7}, {0x1, 0x7}, {0x3, 0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x4, 0x3}, {0x2, 0x3}, {0x5}, {0x1}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x4, 0x6}, {0x5, 0x5}, {0x0, 0x8}, {0x3, 0x7}, {}, {0x3, 0x9}, {0x3, 0x8}, {0x6}, {0x3, 0x5}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x2}, {}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x1}, {0x2, 0x1}, {0x3, 0x4}, {0x7}, {0x0, 0x3}, {0x2, 0x1}, {0x4, 0x3}, {0x1}, {0x3, 0x8}, {0x2, 0x3}, {0x2, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x7, 0x2}, {0x4, 0x7}, {0x2}, {0x0, 0x4}, {0x4}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x30, 0x18, 0x48, 0x60, 0xc, 0x18, 0xc, 0x6c, 0x1b, 0x0, 0xc, 0x16, 0x6c, 0x24, 0x36, 0x24, 0x6c, 0x18, 0x48, 0x18, 0x5d61caa9ead2a46c, 0x36, 0x18, 0xb, 0x36, 0x36, 0xdfca07db40f7c262]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x6c55, 0x0, 0x7891, 0x29, 0x6, 0xa66]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x495, 0x0, 0x3, 0x1000, 0x32, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x7, 0x9, 0x6, 0x8, 0x2, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0xa}, {0x2, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x9}, {0x6, 0x2}, {0x4, 0x9}, {0x5, 0xa}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x9}, {0x6}, {0x2, 0x5}, {0x2, 0xa}, {0x5, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x7, 0x5}, {0x5, 0xa}, {0x0, 0x7}, {0x6, 0x3}, {0x3, 0x8}, {0x2, 0x5}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b0, 0x11d, 0x0, 0x1, [{0x27c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x254, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x4, 0x0, 0x6, 0x1, 0xf801, 0x1]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x4}, {0x6, 0x6}, {0x4, 0x8}, {0x6, 0x3}, {0x7, 0x8}, {0x3, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x8}, {0x2, 0x1}, {0x7, 0x8}, {0x4, 0x6}, {0x4, 0x3}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {}, {0x3, 0x8}, {0x7, 0x4}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0x3}, {0x4}, {0x3, 0x9}, {0x6, 0x4}, {0x7, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x5, 0x12, 0x1b, 0x36, 0x1b]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x3}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x9}, {0x6, 0x1}, {0x3, 0x5}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x1}, {0x3, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x5}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x7}, {0x1}, {0x4, 0x5}, {0x2, 0x9}, {0x6, 0x2}, {0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x7, 0x9}, {0x3, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0x2}, {0x4, 0x7}, {0x4, 0x2}, {0x3, 0x8}, {0x1}, {0x7, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x3}, {0x2}, {0x4, 0x2}, {0x3, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x7}, {0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x60, 0x3, 0x0, 0x9, 0x101, 0x6, 0x0, 0x3]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x3, 0x5, 0x36, 0x3, 0x1b, 0x265387aacc5b9edd, 0x6, 0x9, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x7}, {0x5, 0x6}, {0x3, 0x9}, {0x6, 0x3}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x6, 0x2}, {0x7, 0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x9}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x2}, {0x7, 0xa}, {0x1, 0xa}, {0x2, 0x9}, {0x5, 0x3}, {0x4, 0x3}, {0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x6}, {0x5, 0x3}, {0x6, 0x7}, {0x3, 0xa}, {0x5, 0xa}, {0x2, 0x8}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x4, 0x9}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x7, 0x5}, {0x5}, {0x4}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x4}, {0x0, 0x5}, {}, {0x2, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3ff, 0x5, 0x0, 0xffff, 0x8000, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x3c8, 0x1, 0x7, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9d5, 0x5, 0x0, 0x3, 0x9, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x6, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x4}, {0x7, 0x2}, {0x2}, {0x2, 0x6}, {0x3, 0x4}, {0x7, 0x2}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x4}, {0x7, 0x1}, {}, {0x3, 0x2}, {0x6}, {0x7, 0x9}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0xa}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0x9}, {0x6, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x3}, {0x2, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x5, 0x8}, {0x3}, {0x0, 0x7}, {0x3}, {0x4, 0x4}, {0x5, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0xa}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x12, 0xb, 0x3a, 0x30, 0x60, 0xc, 0x24, 0x3, 0x2, 0x16, 0x48, 0x5, 0x48, 0x3, 0x2e, 0x16, 0xb, 0x6c, 0x5a, 0x19, 0x6c]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xdee0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffc1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x44001}, 0x804)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000c40)=@ctrl_frame=@rts={{}, {0x1}}, 0x10)
syz_80211_inject_frame(&(0x7f0000000c80)=@broadcast, &(0x7f0000000cc0)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @initial, @device_b, @broadcast, {0x9}}, @a_msdu=[{@broadcast, @broadcast, 0x43, "1c84a144f34c22d694b89695484854043878fcabb2cb63a08054ddb15f57d82ef654eea26a0528bcd2da43ca5dde940fea461fd2ba50d4bfa4237c8a1fb02f7e8e5a6b"}, {@device_a, @device_b, 0xd9, "97b8af5e849c0374f62668ea2527fe4fdc27d3872a57aa972babf4a9368221b2d767d81857d67d5d50d51570a9608260bf50e16691949de887bcf2cccb087633f4fcf72b9672c0153dc86387eaffeff27af3cafdec5c8d9efa69260e40c022b0549d2bedc8c2ccd04d0101eb21717049a52a50c4b1643e94e5d453effca87fbf54f445719b13cc9e3b601623bfc13ca3c1ecc261c2f07bbc5560117da946d3f2e07174b4195af61e4ce1d58c47179f158d16595feeb4a6ac4c6ef1477e0402a7eb2ef1a970759d7a6b2f63b2ed090fd991540d6ab3c84b9123"}, {@broadcast, @device_b, 0x6e, "485df21b792412396fe331ac7e4d1ac4585a22c08da5641d47345506863d2ef9b240518698b8eaa6c9375293907629273f4f246cbb8080026f875bcf9022767699703cb8d48c1551b1f8e8f81d356e70a8bbe08aca2a6ae2212d62992e42bec341e1cf074ccc6aad3c1de94f2f57"}, {@device_a, @device_a, 0x23, "3121262b8704f20e458024c0e51106bc9f51790bd4bc6580b932a4bc56350a7c5113bb"}, {@device_a, @device_a, 0x1, "e2"}, {@broadcast, @device_a, 0x6d, "2996b1b0ede5439bc47c76dbf61c44952c71ad9e8e23d89337d76c41959c7c7a8e0bc747e3a7c513f49331ccdde0032f506ade7d2f50cc65ad5a090b8c450225d239759a4dde8071ba5e97dfcdaaabd6fd338deef2cbb9723da99aba9ef31149ef8970ccb5e4c31f3f92b74029"}, {@device_b, @broadcast, 0x3e, "5ceccdf7df44a2e51187e1fbd0e91b57736fb771c7e7425d18ac85cf0e647a3ada59dbcf232d61320c53d735d46a764915e3dd0350c8c85773bfd4cc3cd4"}, {@broadcast, @broadcast, 0x95, "86eb6d2ae0ee3de6bfa07398658ebacd948748763018a8b800fd0f980185f384d7eb1addbaab43bbaed6f713b1dce080aac88b79e934ad6b4ae7e461e2e372d9a3627e53912caddbdb3e78e7e2e42a2c126d84ad52b85df4477cef8a5601925476d838ac0433cdc2e74c0c6066a995bab94a534c1534a51d867b698085bb12e09322a1938e9af3eb20c35101be7ca91d188f317da7"}]}, 0x380)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000366b74d6b80200000000004dc1d32bc28139ebbf438d000000000064000100"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  982.288680][ T9265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:58 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x15000000)

[  982.384601][ T9272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.400283][ T9274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.431472][ T7065] wlan1: authenticate with 08:02:11:00:00:00
[  982.442888][ T9274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.445248][ T7065] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  982.473054][ T9274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.493042][  T692] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[  982.503492][ T9274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.513561][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  982.530898][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  982.533339][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.540191][  T692] wlan1: authentication with 08:02:11:00:00:00 timed out
[  982.617283][ T9265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:58 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:58 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x25)

[  982.746727][ T9281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000366b74d6b80200000000004dc1d32bc28139ebbf438d000000000064000100"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  982.868623][ T9274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:58 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x16000000)

[  982.911039][ T7065] wlan1: authenticate with 08:02:11:00:00:00
[  982.923176][ T7065] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:44:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
socket(0x2c, 0xa, 0xe2)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  982.961466][ T9296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.961600][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  982.998986][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:44:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  983.005161][ T9296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  983.024127][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
[  983.043878][ T9294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  983.072766][ T9303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  983.083485][ T9281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  983.107388][ T9303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:59 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x26)

[  983.144121][ T9301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2e0000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  983.274461][ T9310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6a0000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:59 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x17000000)

[  983.486191][ T9303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  983.531481][ T7065] wlan1: authenticate with 08:02:11:00:00:00
[  983.539333][ T7065] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  983.556245][   T10] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  983.566887][   T10] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  983.584494][   T10] wlan1: authentication with 08:02:11:00:00:00 timed out
[  983.599671][ T9310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:59 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:44:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x7fc, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x478, 0x11d, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4c9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x5}, {0x4, 0xa}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x6, 0x3}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0x6}, {0x7}, {0x6, 0x4}, {0x3, 0x7}, {0x6, 0x5}, {0x1}, {0x5}, {0x1, 0x7}, {}, {0x3, 0xa}, {0x2, 0x1}, {0x4, 0x7}, {0x6}, {0x3, 0xa}, {0x0, 0x5}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x2}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x4, 0x2, 0x0, 0x40, 0xa0b2, 0x98f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5909, 0x20, 0x7, 0x4, 0x80, 0x800, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x6, 0x2, 0x36, 0x36, 0x5, 0x2, 0x6, 0x4, 0x2, 0x1, 0x6c, 0x4, 0x2, 0xb, 0xb, 0x24, 0x1b, 0x48, 0x2, 0x30, 0x6, 0x18, 0x1, 0x4, 0x24, 0x9, 0xc]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0xb, 0x6, 0xc, 0x12, 0x16, 0x16, 0x12, 0xb, 0x12, 0x51, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x48, 0x0, 0x60, 0x9, 0x6, 0x48, 0x1, 0x2, 0x24, 0xc, 0x36, 0x6, 0x6c, 0x48, 0x4, 0x36, 0x6c, 0x18, 0x1b, 0x60, 0x16, 0x12]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x7}, {0x4, 0x4}, {0x6, 0x7}, {0x7, 0xa}, {0x7, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x5}, {0x2, 0x6}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x6}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xaf4, 0xec, 0x135, 0xdf9e, 0x1f, 0x80, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x0, 0x40, 0x4, 0x9, 0x5, 0x4bf6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb8, 0x200, 0x9, 0x32, 0xa8b, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3ff, 0x8000, 0x1, 0x100, 0xfffc, 0x1, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35, 0x3, 0x1f, 0x33, 0x9f5, 0x9, 0x7c, 0x3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x3}, {0x2}, {}, {0x5, 0x8}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x12, 0x48, 0x4, 0x2, 0xf, 0x36, 0x1853a1680f0096d, 0x1b, 0x9, 0x5, 0x5, 0xb, 0x36, 0x1, 0xb, 0x48, 0x2, 0x60, 0x36, 0x0, 0x1, 0x2, 0x9, 0x12, 0x6, 0x5, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x4}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x8}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x9}, {0x2, 0x2}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x6}, {0x3, 0xa}, {0x3, 0x2}, {0x6, 0x6}, {0x2, 0x1}, {0x2, 0x4}, {0x6, 0xa}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x11}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x8}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x16, 0x12, 0x3, 0x1b, 0x1, 0x24, 0x1b, 0xc, 0x4, 0x5, 0x18, 0x6c, 0x24, 0x60, 0x4, 0x2, 0x1, 0x24, 0x24, 0x1, 0x9, 0x2, 0x5, 0xc]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x5}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x3}, {0x4, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x1}, {0x2, 0x4}, {0x1}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x2}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x4}, {0x3, 0x2}, {0x0, 0x8}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x6}, {}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x1}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x1}, {0x6, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x5, 0x6}, {0x1, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0xa}, {0x4, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x5}, {0x1, 0x6}, {0x2, 0x9}, {0x5, 0xa}, {0x1, 0x7}, {0x6}, {0x7, 0x6}, {0x6, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x9}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x6}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x6}, {0x7}, {0x1, 0x7}, {0x3, 0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x4, 0x3}, {0x2, 0x3}, {0x5}, {0x1}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x4, 0x6}, {0x5, 0x5}, {0x0, 0x8}, {0x3, 0x7}, {}, {0x3, 0x9}, {0x3, 0x8}, {0x6}, {0x3, 0x5}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x2}, {}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x1}, {0x2, 0x1}, {0x3, 0x4}, {0x7}, {0x0, 0x3}, {0x2, 0x1}, {0x4, 0x3}, {0x1}, {0x3, 0x8}, {0x2, 0x3}, {0x2, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x7, 0x2}, {0x4, 0x7}, {0x2}, {0x0, 0x4}, {0x4}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x30, 0x18, 0x48, 0x60, 0xc, 0x18, 0xc, 0x6c, 0x1b, 0x0, 0xc, 0x16, 0x6c, 0x24, 0x36, 0x24, 0x6c, 0x18, 0x48, 0x18, 0x5d61caa9ead2a46c, 0x36, 0x18, 0xb, 0x36, 0x36, 0xdfca07db40f7c262]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x6c55, 0x0, 0x7891, 0x29, 0x6, 0xa66]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x495, 0x0, 0x3, 0x1000, 0x32, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x7, 0x9, 0x6, 0x8, 0x2, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0xa}, {0x2, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x9}, {0x6, 0x2}, {0x4, 0x9}, {0x5, 0xa}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x9}, {0x6}, {0x2, 0x5}, {0x2, 0xa}, {0x5, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x7, 0x5}, {0x5, 0xa}, {0x0, 0x7}, {0x6, 0x3}, {0x3, 0x8}, {0x2, 0x5}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b0, 0x11d, 0x0, 0x1, [{0x27c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x254, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x4, 0x0, 0x6, 0x1, 0xf801, 0x1]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x4}, {0x6, 0x6}, {0x4, 0x8}, {0x6, 0x3}, {0x7, 0x8}, {0x3, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x8}, {0x2, 0x1}, {0x7, 0x8}, {0x4, 0x6}, {0x4, 0x3}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {}, {0x3, 0x8}, {0x7, 0x4}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0x3}, {0x4}, {0x3, 0x9}, {0x6, 0x4}, {0x7, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x5, 0x12, 0x1b, 0x36, 0x1b]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x3}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x9}, {0x6, 0x1}, {0x3, 0x5}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x1}, {0x3, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x5}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x7}, {0x1}, {0x4, 0x5}, {0x2, 0x9}, {0x6, 0x2}, {0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x7, 0x9}, {0x3, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0x2}, {0x4, 0x7}, {0x4, 0x2}, {0x3, 0x8}, {0x1}, {0x7, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x3}, {0x2}, {0x4, 0x2}, {0x3, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x7}, {0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x60, 0x3, 0x0, 0x9, 0x101, 0x6, 0x0, 0x3]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x3, 0x5, 0x36, 0x3, 0x1b, 0x265387aacc5b9edd, 0x6, 0x9, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x7}, {0x5, 0x6}, {0x3, 0x9}, {0x6, 0x3}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x6, 0x2}, {0x7, 0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x9}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x2}, {0x7, 0xa}, {0x1, 0xa}, {0x2, 0x9}, {0x5, 0x3}, {0x4, 0x3}, {0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x6}, {0x5, 0x3}, {0x6, 0x7}, {0x3, 0xa}, {0x5, 0xa}, {0x2, 0x8}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x4, 0x9}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x7, 0x5}, {0x5}, {0x4}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x4}, {0x0, 0x5}, {}, {0x2, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3ff, 0x5, 0x0, 0xffff, 0x8000, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x3c8, 0x1, 0x7, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9d5, 0x5, 0x0, 0x3, 0x9, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x6, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x4}, {0x7, 0x2}, {0x2}, {0x2, 0x6}, {0x3, 0x4}, {0x7, 0x2}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x4}, {0x7, 0x1}, {}, {0x3, 0x2}, {0x6}, {0x7, 0x9}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0xa}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0x9}, {0x6, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x3}, {0x2, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x5, 0x8}, {0x3}, {0x0, 0x7}, {0x3}, {0x4, 0x4}, {0x5, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0xa}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x12, 0xb, 0x3a, 0x30, 0x60, 0xc, 0x24, 0x3, 0x2, 0x16, 0x48, 0x5, 0x48, 0x3, 0x2e, 0x16, 0xb, 0x6c, 0x5a, 0x19, 0x6c]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xdee0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffc1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x44001}, 0x804)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000c40)=@ctrl_frame=@rts={{}, {0x1}}, 0x10)
syz_80211_inject_frame(&(0x7f0000000c80)=@broadcast, &(0x7f0000000cc0)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @initial, @device_b, @broadcast, {0x9}}, @a_msdu=[{@broadcast, @broadcast, 0x43, "1c84a144f34c22d694b89695484854043878fcabb2cb63a08054ddb15f57d82ef654eea26a0528bcd2da43ca5dde940fea461fd2ba50d4bfa4237c8a1fb02f7e8e5a6b"}, {@device_a, @device_b, 0xd9, "97b8af5e849c0374f62668ea2527fe4fdc27d3872a57aa972babf4a9368221b2d767d81857d67d5d50d51570a9608260bf50e16691949de887bcf2cccb087633f4fcf72b9672c0153dc86387eaffeff27af3cafdec5c8d9efa69260e40c022b0549d2bedc8c2ccd04d0101eb21717049a52a50c4b1643e94e5d453effca87fbf54f445719b13cc9e3b601623bfc13ca3c1ecc261c2f07bbc5560117da946d3f2e07174b4195af61e4ce1d58c47179f158d16595feeb4a6ac4c6ef1477e0402a7eb2ef1a970759d7a6b2f63b2ed090fd991540d6ab3c84b9123"}, {@broadcast, @device_b, 0x6e, "485df21b792412396fe331ac7e4d1ac4585a22c08da5641d47345506863d2ef9b240518698b8eaa6c9375293907629273f4f246cbb8080026f875bcf9022767699703cb8d48c1551b1f8e8f81d356e70a8bbe08aca2a6ae2212d62992e42bec341e1cf074ccc6aad3c1de94f2f57"}, {@device_a, @device_a, 0x23, "3121262b8704f20e458024c0e51106bc9f51790bd4bc6580b932a4bc56350a7c5113bb"}, {@device_a, @device_a, 0x1, "e2"}, {@broadcast, @device_a, 0x6d, "2996b1b0ede5439bc47c76dbf61c44952c71ad9e8e23d89337d76c41959c7c7a8e0bc747e3a7c513f49331ccdde0032f506ade7d2f50cc65ad5a090b8c450225d239759a4dde8071ba5e97dfcdaaabd6fd338deef2cbb9723da99aba9ef31149ef8970ccb5e4c31f3f92b74029"}, {@device_b, @broadcast, 0x3e, "5ceccdf7df44a2e51187e1fbd0e91b57736fb771c7e7425d18ac85cf0e647a3ada59dbcf232d61320c53d735d46a764915e3dd0350c8c85773bfd4cc3cd4"}, {@broadcast, @broadcast, 0x95, "86eb6d2ae0ee3de6bfa07398658ebacd948748763018a8b800fd0f980185f384d7eb1addbaab43bbaed6f713b1dce080aac88b79e934ad6b4ae7e461e2e372d9a3627e53912caddbdb3e78e7e2e42a2c126d84ad52b85df4477cef8a5601925476d838ac0433cdc2e74c0c6066a995bab94a534c1534a51d867b698085bb12e09322a1938e9af3eb20c35101be7ca91d188f317da7"}]}, 0x380)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:44:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050200000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:44:59 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x27)

11:44:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8931, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
r5 = fcntl$dupfd(r0, 0x0, r0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000020c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004a0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="b79b6df87d"], 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000002080)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f0000002140)={0x240, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xfffd}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x34}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9c1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0x963}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x1f}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe8b}, {0x6, 0x16, 0x1fc0}, {0x5, 0x12, 0x1}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000004}, 0x51)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c40), r3)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001d80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8100100}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x84, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40804}, 0x2004c081)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0x1ff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000440)="e418ceb4d9e7e38210cf5d3e6e49e124d0a4d6fb3b12aaf624995db20c144da9a0af2ea8a057a35c271e66726cd9c710ccb6f10acddffa26a9af4bb27355bec0a2a76797683bdbd142a8284e08204b6a034c635470e89f200ce8953a5f9b3dc17767611c2cabc33a51c0066d8b804984454643baf0ca523425f5c811a2e906c3f3d751060a1ac869735063f5369fe78b68410bd38b4f96fbd5adcc5a1d8d64d1", 0xa0}, {&(0x7f0000000500)="0845bd0f1126cfd5fc180043670642293d5e8e8aad5f47f8f003754e76389871b8658e28469abf2dc2b24444c820650ebbbdc405dd13f418401eb471dce7811c0dec44116ee7ec42e03dc58e50daa58a04c0d8dc66f82ed95a3fe37524f845859cddd2a63dbf414007bb593f2dc28fcb79c54bfa1178a0ac7dd193eb37619f13003cd871359403bdd37cf1341073200dfd53b18dacb4614ae3ab5aee08b1ba104197b8ffe29d4629a68536d5c8f0c65693619fc947ad7b86fd80b53ff7", 0xbd}, {&(0x7f00000005c0)="b3206b7d6a35d96c9087c10d75a6d5c935ea17da51a6d6dc622b1e740aaa8a7c0adc3df7d947a06bef0b8ee2ddbfb877fcc70a6e1c56312bd420ce9f71a01258eee41319fadd55af83e42c10505ea189969dece48a145d607414daf9f9eda995cf580f777ea0518edcb99a0930a02d2fd2afb2aac5d23b12940143ef4eae3336ee9f3b34c71369e44afe8f3afc94497bc0", 0x91}, {&(0x7f0000000680)="af3b651be18ae41dff5b641ae41091eca2a5f4f6e945193ca614881e5f21c2852f84b8754030250f115e79f8900589a829bb25d36e9803072f004fcbea795bf6f35bfaf000c8cbe28ca1dcabc16283abec10", 0x52}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="bca7eced540944ea466fe740ab9dfa6c1c43fbffd29a5f5148db88d24ab7f0b5a114bf6e76f72cf08c2adddc5f6dc5ddcb55808b3b2b7bec7439954577b95f9df18131cf9e567e793f22ba0ff512db2610038db9f28927", 0x57}, {&(0x7f0000001780)="eb8cc7ba9e14bd8326987f2ebaf842b871a88f3bcbc8fa86d853816992b2e94865b6845e7884cd0c7c822311533787fc70f11e555f491ee0a8cb05da633257d11bb6834b218ca0fb08666f1454145d5056aec556bf93dd92c7429c5eb44bb11638cb407a0d055ebbd0907043d3ec5956d3810e7566fd0c97994b1163845bab7d5046b0c8c219797b30edae4eb613ad9f03c71574cc27516e9ebd2cc5a38a0d6eef8fe8b2742d1bee5a6c62c74df85acdacb52fa615b6732e1f864e5083371c68626f4f6d4805d4ad65274a577cb3e5d3f8ad", 0xd2}, {&(0x7f0000001880)="56718f8b90bf165fbbaffc33d618c1a25da84f74be72fda2f5531bd9998aa6b36dd0eaf580701ebb2fbab858b372aa124e7a657bb8866fba6762f9fd800f06a9ac82bca43b176dd083b28dfae55eba00767c765526b503f3112a009fb015793c91013093a28fcbcc7c70b158aba5fb9f31d650e688cdcd00fb3f7ad410e100227121fca457daa6467386c83fb8c2a5e3178f09dc5c9f5a832e0b9e0e2d37b31ba4e33af96a5ac9cf84f2233073483d90cc6be37f5b1c17230d3bf01ecc60b35854d867c8513416cdb76840e3d989986e9222fdffbd338e", 0xd7}, {&(0x7f0000001980)="80edec44462ec3fdae896ccae4f2de96794a080d07d06b7da6c18f79170522fc18146c04df37837b839c396259cd59cecba36f094e78137742740f809fe0f460379c1d84c5ce00fa1fffcc530620ff2027e0951fa4fe7015bdd8498ab408019fa2f803506c162f9175644e53e5c10343ebcb473700bb4bc1422b1a33435d5dad8f6959532498ccccfd02915230f0684bc045166975162d13330031f80e450c9f2bc14dbe8121b0346409d812f4a9cdce2a079ccb8014dff547952485949e892cf770cef48e6ddd9d675c5e", 0xcb}], 0x9, &(0x7f0000001b40)=ANY=[@ANYBLOB="d00000000000000029000000ffff00001c7cad01578063154fc9a786aead000000000000000257a6a218823ff950e0ce3866892b2a08bfefa930482c4b24e93f9b1ce7d9bb97034b2e67514c8c7ecd3ffaaf9dd04c3569fa597e7305dc0216f2d2f2fd73b0a04d5fc534c6f9b1feac714a87186d7af9d193b8e4d576c98115ffa1d52329ed624fc684d0f8f3eaee548c6193a1ff7bcccddc0f3b355b719e3443269a0dec246a011248719872ebdcf79cafa5d019a7d63c98f7ba0e562cda4dd2eb3192fe0d5ae166811bf58100000000"], 0xd0}, 0x40)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000400", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @val={0x4, 0x6, {0x9, 0x4, 0x401, 0x401}}, @void, @void, @void, @void}, 0x3d)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  983.737529][ T9331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  983.743529][ T9329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050300000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  983.787312][ T9331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:59 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x18000000)

[  983.843683][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  983.907119][ T9336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:44:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050400000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  983.971421][ T9340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:44:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020205dbbce87830d50200000a00f4ff0802110000000000080035000000000008"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)

[  984.083480][ T9329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  984.116945][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  984.197535][ T9359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050500000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  984.246908][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:45:00 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x28)

[  984.323006][ T9358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:00 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x19000000)

[  984.377605][ T9365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:00 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  984.689862][ T9365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  984.750651][ T9359] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  984.762801][ T9358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  986.651902][   T10] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  986.715262][   T10] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  986.757100][   T10] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  986.798339][   T10] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.205894][   T10] device hsr_slave_0 left promiscuous mode
[  988.213725][   T10] device hsr_slave_1 left promiscuous mode
[  988.220548][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  988.228366][   T10] batman_adv: batadv0: Removing interface: batadv_slave_0
[  988.238391][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  988.246932][   T10] batman_adv: batadv0: Removing interface: batadv_slave_1
[  988.259543][   T10] device bridge_slave_1 left promiscuous mode
[  988.267131][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.277226][   T10] device bridge_slave_0 left promiscuous mode
[  988.283684][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  988.298789][   T10] device veth1_macvtap left promiscuous mode
[  988.304943][   T10] device veth0_macvtap left promiscuous mode
[  988.311214][   T10] device veth1_vlan left promiscuous mode
[  988.317001][   T10] device veth0_vlan left promiscuous mode
[  988.607884][   T10] team0 (unregistering): Port device team_slave_1 removed
[  988.622868][   T10] team0 (unregistering): Port device team_slave_0 removed
[  988.636162][   T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  988.655284][   T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  988.725791][   T10] bond0 (unregistering): Released all slaves
[  988.987032][ T9458] chnl_net:caif_netlink_parms(): no params data found
[  989.092606][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state
[  989.100932][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.109127][ T9458] device bridge_slave_0 entered promiscuous mode
[  989.119332][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.126596][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.135495][ T9458] device bridge_slave_1 entered promiscuous mode
[  989.175605][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  989.188431][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  989.261910][ T9458] team0: Port device team_slave_0 added
[  989.271845][ T9458] team0: Port device team_slave_1 added
[  989.307137][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  989.315540][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  989.341867][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  989.365825][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  989.372912][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  989.400113][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  989.465034][ T9458] device hsr_slave_0 entered promiscuous mode
[  989.472645][ T9458] device hsr_slave_1 entered promiscuous mode
[  989.479416][ T9458] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  989.490439][ T9458] Cannot create hsr debugfs directory
[  989.869688][ T9458] 8021q: adding VLAN 0 to HW filter on device bond0
[  989.910311][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  989.918311][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  989.947085][ T9458] 8021q: adding VLAN 0 to HW filter on device team0
[  989.968663][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  989.984181][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  989.997971][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state
[  990.005287][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state
[  990.028650][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  990.042066][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  990.060232][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  990.068726][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state
[  990.075888][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  990.092203][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  990.110686][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  990.130331][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  990.142516][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  990.151654][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  990.162848][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  990.181622][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  990.190916][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  990.206215][ T9458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  990.220839][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  990.231150][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  990.261203][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  990.268679][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  990.289218][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  990.316345][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  990.326636][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  990.356356][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  990.366113][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  990.377823][ T9458] device veth0_vlan entered promiscuous mode
[  990.386134][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  990.395369][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  990.411966][ T9458] device veth1_vlan entered promiscuous mode
[  990.445651][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  990.455056][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  990.464428][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  990.473579][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  990.486977][ T9458] device veth0_macvtap entered promiscuous mode
[  990.502961][ T9458] device veth1_macvtap entered promiscuous mode
[  990.527396][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  990.538032][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.548773][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  990.560145][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.571050][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  990.582506][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.595146][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  990.606001][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  990.616475][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  990.625921][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  990.635734][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  990.650005][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  990.662106][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.673916][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  990.685739][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.696576][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  990.708341][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.722322][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  990.733097][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  990.744369][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  990.800036][ T8541] Bluetooth: hci5: command 0x0409 tx timeout
[  990.881033][  T692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  990.889103][  T692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  990.993025][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  991.006653][ T4033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  991.022701][ T4033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  991.039229][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  991.143417][ T9789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.157461][ T9789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.171683][ T9789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.183488][ T8541] wlan1: authenticate with 08:02:11:00:00:00
[  991.184783][ T9789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.203362][ T8541] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  991.211253][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  991.235831][ T9788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.319835][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  991.429583][   T10] wlan1: authentication with 08:02:11:00:00:00 timed out
11:45:07 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x29)

11:45:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050600000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020205dbbce87830d50200000a00f4ff0802110000000000080035000000000008"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)

11:45:07 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1a000000)

11:45:07 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x63c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xcb, 0x2a, [@measure_req={0x26, 0xc5, {0x5, 0xc9, 0x0, "d8932e708817dc6fdd1b30656b54c1bb374e333d6bb6433e256ae9d9087eb29b5867d7742755bc4322839debc4b577800755b9815d2e6db1b353ca1f778f05eb5573c090651002fb6cd61fc7656920d1890a358500d1ec871e565aa0b5545ace3e9f4b9f121160d4b30542faa9a1d4a55b3507fe95788fdd3de65564622f4e27fbce4aaceb9f140958b9c23e9a5f39fe6f3758fbb055536030c43cd46b919f7b2d5504cda95a5f25a0a95e34bd18ca6f0aa3f59031579af28c535d156184f9a0213f"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xde, 0xfc, "9fa43f004b112acafb93d1a959eb0c867179500bb1013fc0fd190bc00c88e98957fd8653a5c14cc156951afe2e34ecfd67b2726630ff520824da3c4670fb4d983da0807afa157cca6a67291058a99d686073aeea09f6f9e8afc5cd00384430cd259a3bf9f33d8239b5b88d5fa4072c10ed1f4b0ae1ea0d6ab869159251aaebdacbd807cc9087e1c762d32f1a9d9b39ed901fc983957410a4dc637ef31c6075504a84e26f18de14bb99e05546e1ba8d1f5732e36084f171d4e516015c479f50a520d73fb67987360a0c159bf11051fd595829b10e6df0a983551b"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3ff}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_RRK={0xa0, 0xfc, "f1eb605a2a8d94bf2524776651dc9b8b15a6167dff47b5be178576d67afcefd755280ef0b2cd92a0b559cefdfe5668350b0637eb58359bc0468fbab64e23cc9ecb6584222c91f0394794ceee67549306f69bb53e21384df9e8235d36028efdbff8b4e1817dd3d073c2f73d4af1f85c3659ecb98f1af47e33cd26550196db53a580f26000f169354bfdeb60aef4013bce07ec32b1ea4cb0ae9248b2e4"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "0f38eaeb0c897bb66952fc738a3ecc"}, @NL80211_ATTR_FILS_ERP_RRK={0xc6, 0xfc, "3241ca5e2a5302950b7046eb30c0361289033e2b0a1be75be18b462b5642446e0dfbf21ac4986645a2cffaf69b71269ded7d281d21be92d2dff6fadf0856edcaa2de8c1de529d0e5548a6aadd2ec35a67a49566641c43ec690bc8f318b2937b402b54da640fdba64cd124b49f4a15e2b8ece8f3d3b8a378e267e280bc842f608baffc23a2bd3c7ab8164415c03451ba5b55b60ad578ab796d48ec521222291e2875b42c56af48bf03cd67d59c3f9c653961f11a1323cbf43c60b4c7967a21c1be249"}, @NL80211_ATTR_FILS_ERP_REALM={0xf, 0xfa, "eef84f180e8af3daaf3e8a"}, @NL80211_ATTR_FILS_ERP_REALM={0xb8, 0xfa, "acc248ff4f4a2c204cac5cb4ae3537eb85b90f26ecf50344007cd0c9344d02e50b33857761fb44b526e416dd01e77c8138b57109b0485206630ff0f9654cf6d38daafca3bd20da19b6142c4b5626c845eff6ff946cd59619f8d6bef2cc64f7cc83975dcacb8cc438266ab93cea412746ef9bd74287490a2b172fd7a1c899e8c46846038d273316600768ae992524c2b7029075478c857f53525a6e7d80b434ec031d575f8f926f7d8c27e866ed98a47fd0017d27"}, @NL80211_ATTR_FILS_ERP_RRK={0x47, 0xfc, "36b7b6591376e3971c8149eab1f6d8a37a49497517f0fe1b5ae148470848d837dd507f9aa16d3b1e3318da7e3c29111c00798864ce3479d9de191dfbeb19e0a039987d"}, @NL80211_ATTR_FILS_ERP_RRK={0xef, 0xfc, "d85419ae91fd61578ca43f7e49e03eb28246e3181b88a03f62ab49ea760dbd07080e10523a468f7a90c1e92e8363df03f83958388ea71e404d37eea00b9b2c34a5d7d79d539c3e62967958adf7c4f7df47a1a981890eb750fb5242597a303ca6ad26b4887aac228a90fa9cf460e693cf48b6d7153fef90bdb6af7580f408337e1f5c497c4cf676592aa45da5590b5376c4c339bc1a9f3273c98081064dfe2ee7b88bfb937b466d1f06e4c55704e6fab8c9852d80eca5a948a6f8bf789a7ab00ad414710095cc9a2860879cae9ee1906908b6ef64fa4c3fe53e871006d3802fa78318fd49be967e77db0be4"}], @NL80211_ATTR_IE={0x84, 0x2a, [@peer_mgmt={0x75, 0x18, {0x1, 0x7f, @val=0xff81, @val=0xb, @val="face0af1aab9e1433a130c0e0261d513"}}, @ssid={0x0, 0x13, @random="0a33ed9b86c1f4668000cf62a6724be8c2b750"}, @ibss={0x6, 0x2, 0x7f}, @ssid={0x0, 0x6, @default_ibss_ssid}, @challenge={0x10, 0x1, 0x5a}, @gcr_ga={0xbd, 0x6}, @chsw_timing={0x68, 0x4, {0x2, 0x7}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0x22, {0x20, 0x2, [@not_ext={{}, @device_b, 0x3, "", 0x20}, @ext={{}, @broadcast, 0x7, @device_b, 0x38}]}}, @cf={0x4, 0x6, {0xff, 0x29, 0x1, 0x3e16}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x38, 0xfc, "e49e53732fcb7dc9f049c7f544fdc2538d22148c510460ec6bdc91da9b44c584554965a6565ee533e81f05683651f2911e1f9c17"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "17e4e51e903ccd506c62fa"}, @NL80211_ATTR_FILS_ERP_REALM={0xd, 0xfa, "64f677330997509c18"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "5c4dda"}]]}, 0x63c}, 0x1, 0x0, 0x0, 0x90}, 0x20000004)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  991.620904][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  991.632973][ T9790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.649149][ T9795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  991.670061][ T9799] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[  991.679137][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  991.702761][ T9795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050700000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  991.735357][ T9805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.749781][ T9795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.765744][ T9799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.779701][ T9795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.804722][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  991.814048][ T9791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  991.826377][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  991.842470][ T9799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050800000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  991.913919][ T9796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050900000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:07 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1b000000)

[  991.959972][ T9790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:07 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x48)

11:45:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050e00000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  992.113292][ T9821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  992.144093][ T9802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  992.166412][ T9802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  992.220156][ T9795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050f00000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
socket(0x2c, 0xa, 0xe2)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:08 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1c000000)

[  992.444673][ T9821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  992.447197][ T9837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  992.475941][ T9838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:08 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:08 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x4c)

[  992.526723][ T9838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  992.560249][ T1356] ieee802154 phy0 wpan0: encryption failed: -22
[  992.566669][ T1356] ieee802154 phy1 wpan1: encryption failed: -22
11:45:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="056000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  992.637439][ T9845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05f000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  992.879350][T10290] Bluetooth: hci5: command 0x041b tx timeout
[  992.939570][ T9843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  992.950897][ T9845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
socket(0x2c, 0xa, 0xe2)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:08 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1d000000)

11:45:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050005000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:08 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x60)

11:45:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x64, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8420ec0}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  993.197376][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  993.233142][ T9874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  993.253995][ T9867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  993.269562][ T9870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  993.336965][ T9870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050006000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  993.385454][ T9869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:09 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:09 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1e000000)

[  993.571028][ T9874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:09 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x68)

[  993.784690][ T9869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050007000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[  993.825243][ T9897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050009000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:09 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x1f000000)

[  994.149978][ T9897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  995.419012][  T158] device hsr_slave_0 left promiscuous mode
[  995.442887][  T158] device hsr_slave_1 left promiscuous mode
[  995.459622][  T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  995.467056][  T158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  995.491353][  T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  995.508793][  T158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  995.528486][  T158] device bridge_slave_1 left promiscuous mode
[  995.546752][  T158] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.556050][  T158] device bridge_slave_0 left promiscuous mode
[  995.563176][  T158] bridge0: port 1(bridge_slave_0) entered disabled state
[  995.591723][  T158] device veth1_macvtap left promiscuous mode
[  995.598473][  T158] device veth0_macvtap left promiscuous mode
[  995.618881][  T158] device veth1_vlan left promiscuous mode
[  995.624738][  T158] device veth0_vlan left promiscuous mode
[  996.069664][  T158] team0 (unregistering): Port device team_slave_1 removed
[  996.108398][  T158] team0 (unregistering): Port device team_slave_0 removed
[  996.137539][  T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  996.179581][  T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  996.278166][  T158] bond0 (unregistering): Released all slaves
[  998.157313][ T9947] chnl_net:caif_netlink_parms(): no params data found
[  998.260833][ T9947] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.269834][ T9947] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.277751][ T9947] device bridge_slave_0 entered promiscuous mode
[  998.287826][ T9947] bridge0: port 2(bridge_slave_1) entered blocking state
[  998.298329][ T9947] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.306194][ T9947] device bridge_slave_1 entered promiscuous mode
[  998.345970][ T9947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  998.367227][ T9947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  998.414278][ T9947] team0: Port device team_slave_0 added
[  998.424536][ T9947] team0: Port device team_slave_1 added
[  998.471068][ T9947] batman_adv: batadv0: Adding interface: batadv_slave_0
[  998.478033][ T9947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  998.505536][ T9947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  998.520442][ T9947] batman_adv: batadv0: Adding interface: batadv_slave_1
[  998.527409][ T9947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  998.555582][ T9947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  998.632646][ T9947] device hsr_slave_0 entered promiscuous mode
[  998.640277][ T9947] device hsr_slave_1 entered promiscuous mode
[  998.646840][ T9947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  998.658344][ T9947] Cannot create hsr debugfs directory
[  998.747426][  T158] device hsr_slave_0 left promiscuous mode
[  998.776246][  T158] device hsr_slave_1 left promiscuous mode
[  998.790033][  T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  998.801567][  T158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  998.834462][  T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  998.842142][  T158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  998.853078][  T158] device bridge_slave_1 left promiscuous mode
[  998.861201][  T158] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.870212][  T158] device bridge_slave_0 left promiscuous mode
[  998.876380][  T158] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.892538][  T158] device veth1_macvtap left promiscuous mode
[  998.898693][  T158] device veth0_macvtap left promiscuous mode
[  998.905034][  T158] device veth1_vlan left promiscuous mode
[  998.913553][  T158] device veth0_vlan left promiscuous mode
[  999.096471][  T158] team0 (unregistering): Port device team_slave_1 removed
[  999.110295][  T158] team0 (unregistering): Port device team_slave_0 removed
[  999.125968][  T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  999.142928][  T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  999.211922][  T158] bond0 (unregistering): Released all slaves
[  999.518616][T10216] chnl_net:caif_netlink_parms(): no params data found
[  999.637311][T10216] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.649726][T10216] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.657946][T10216] device bridge_slave_0 entered promiscuous mode
[  999.688234][T10216] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.695835][T10216] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.704900][T10216] device bridge_slave_1 entered promiscuous mode
[  999.764851][T10216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  999.808940][T10216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  999.886604][ T9947] 8021q: adding VLAN 0 to HW filter on device bond0
[  999.899330][T10216] team0: Port device team_slave_0 added
[  999.919665][T10216] team0: Port device team_slave_1 added
[  999.933675][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  999.941691][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  999.954860][ T9947] 8021q: adding VLAN 0 to HW filter on device team0
[  999.991996][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1000.002318][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1000.012889][T10290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.020054][T10290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1000.044330][T10290] Bluetooth: hci5: command 0x0409 tx timeout
[ 1000.072614][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1000.082738][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1000.093807][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1000.103492][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1000.110637][ T8541] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1000.120101][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1000.129507][T10216] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1000.136457][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1000.165949][T10216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1000.194060][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1000.204257][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1000.215358][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1000.226129][T10216] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1000.236527][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1000.276582][T10216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1000.303169][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1000.313689][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1000.334859][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1000.349789][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1000.359506][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1000.437731][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1000.447729][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1000.472936][T10216] device hsr_slave_0 entered promiscuous mode
[ 1000.488434][T10216] device hsr_slave_1 entered promiscuous mode
[ 1000.495144][T10216] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1000.504491][T10216] Cannot create hsr debugfs directory
[ 1000.512396][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1000.603906][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1000.611744][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1000.626252][ T9947] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1000.678474][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1000.687259][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1000.750748][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1000.762876][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1000.774991][ T9947] device veth0_vlan entered promiscuous mode
[ 1000.794530][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1000.798280][ T7065] Bluetooth: hci6: command 0x0409 tx timeout
[ 1000.810404][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1000.850084][ T9947] device veth1_vlan entered promiscuous mode
[ 1000.919252][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1000.927479][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1000.938546][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1000.947196][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1000.958299][ T9947] device veth0_macvtap entered promiscuous mode
[ 1000.982487][ T9947] device veth1_macvtap entered promiscuous mode
[ 1001.036681][ T9947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1001.048131][ T9947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1001.059757][ T9947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1001.071212][ T9947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1001.083660][ T9947] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1001.100066][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1001.111509][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1001.119889][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1001.130643][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1001.144623][T10216] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1001.157360][ T9947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1001.170995][ T9947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1001.181870][ T9947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1001.193095][ T9947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1001.205510][ T9947] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1001.228077][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1001.238921][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1001.270205][T10216] 8021q: adding VLAN 0 to HW filter on device team0
[ 1001.278499][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1001.286434][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1001.318879][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1001.327636][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1001.339151][T10290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1001.346253][T10290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1001.355246][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1001.365338][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1001.374447][T10290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1001.381601][T10290] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1001.421123][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1001.439991][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1001.476464][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1001.508983][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1001.539262][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1001.558743][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1001.578477][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1001.587450][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1001.618832][ T1489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1001.626974][ T1489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.642153][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1001.651614][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1001.665245][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1001.694568][T10216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1001.712679][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1001.728040][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1001.738543][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1001.784766][ T1489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1001.790301][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1001.802068][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1001.816548][ T1489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.835646][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1001.851919][T10216] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1001.914808][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1001.935987][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1001.982550][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1001.994478][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1002.009059][T10606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1002.020600][T10216] device veth0_vlan entered promiscuous mode
[ 1002.026141][T10606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1002.047947][T31646] wlan1: authenticate with 08:02:11:00:00:00
[ 1002.054935][T31646] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1002.057155][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1002.071736][T10605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1002.077552][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1002.104020][T10216] device veth1_vlan entered promiscuous mode
[ 1002.111868][ T2959] Bluetooth: hci5: command 0x041b tx timeout
[ 1002.153565][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1002.163507][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1002.174173][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1002.192417][T10290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1002.200831][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1002.212714][T10216] device veth0_macvtap entered promiscuous mode
[ 1002.229791][T10216] device veth1_macvtap entered promiscuous mode
[ 1002.256894][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1002.268894][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.280339][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1002.291764][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.302331][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1002.313570][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.325347][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1002.335126][T10216] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1002.345748][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1002.354747][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1002.362955][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1002.371884][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1002.383129][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
11:45:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x54, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xff}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x15, 0x0, @random="7ab346f224616a1b8522a6c8b8f3cb6396"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x8000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:18 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x6c)

11:45:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05d20d000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:18 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1002.407380][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.420801][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1002.432233][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.442713][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1002.453425][ T1489] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1002.480309][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.492126][T10609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1002.515749][T10216] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1002.524064][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1002.533983][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1002.553633][T10614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1002.575022][T10614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1002.588302][T10614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1002.669483][T10614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1002.687110][T10614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1002.712470][T10613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1002.782070][  T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1002.803060][  T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1002.836362][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1002.864969][T10609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1002.878515][T10289] Bluetooth: hci6: command 0x041b tx timeout
[ 1002.891263][  T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1002.907776][  T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1002.946795][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1003.130052][T10643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1003.155630][T10643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1003.187209][T10643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1003.235381][T10643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1003.247401][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1003.269810][T10289] wlan1: authenticate with 08:02:11:00:00:00
[ 1003.276756][T10289] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1003.408262][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1003.518252][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:45:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000e000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:19 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x20000000)

11:45:19 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x74)

11:45:19 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
set_mempolicy(0x2, &(0x7f0000000040)=0x2, 0x1f)
r1 = eventfd2(0x18a9b187, 0x1)
io_submit(0x0, 0x4, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000180)="34ede9583e7c5525190fd5c657f652f9a7e4ebcb0b304d8fb2cba121f88aba4a7b5aa57356eb2dd7036559eb2565d93a1286dfcba60a99717716588da185d17fdfbeb08554fbd1388b92f4a34a699f95787f8041ba26e8b09f3ecba717675379c949accc7739c39118b7aee832ee69a549535bc4f5aa4ce8ca9f4bdb45d90492bf94a17335ba69dae64798edd40072214098eddd775851d1c0acbc63bd4a08c66bef03587082cecfa38ec59ab47e041dd0de232b515e1bf9e498f58f61b25196d9ea1595f52c46d285fdf57d9100ff6d5451e9c4", 0xd4, 0x80000000}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xf757b8e7dedb85ec, 0x1b, r0, &(0x7f0000000280)="05825af7433b65d1f5e2ba036781cf6dc0efa849c802e60d1372bd8577f8ed1a18cc2754d9a893e924fce7f38d4afbdd3eedb318de2946e6dd11173b004603c497150c82ce9584968214f12ebd98d42a1c573ab5840acbc94a23c02e4db944d7b77fd885e24f32fda3362aebe9f7cc6e9e548f2545e9767d04fefa9b450e1fa5cda439d1dd538717876c9b33cb60c40d93c8c9f2bd85b314a846350adc5aa404fe1aba9e3f4edcc4875dcc0942acc60ec570a3b094", 0xb5, 0xc69, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000000340)="8605e8585ad62ba2429fca6cfd63d1f15f78f5f3d302d1f81176705a2d0870e78ab4", 0x22, 0x6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000400)="6491262f73b00866cd95ef45f0e43767e3b7831c40123b92558e250e8852ffe209a9b84db9d08f6b19616e9bffafb5518d8f8d2d975cce8b0de968e142a118ac2741180ca46931c35ea55816b30cf143e049c61683405b307536052fd09f1c94d0c869212749ac28c8805f1aedc687583139fe2019a89598c81f248cbf9fc2ab612c24", 0x83, 0x0, 0x0, 0x5, r1}])
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
syz_open_dev$vcsa(&(0x7f0000000580), 0x80000001, 0x181900)
io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}])

[ 1003.565534][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1003.574551][T10646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1003.597315][T10646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:19 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:19 executing program 2:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r1, 0x0, 0x1f, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000340)=0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0008f50400"/18, @ANYRES32=r4, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x8c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xacc0}, {0x8, 0x15, 0x6}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x60000800}, 0x40015)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x46}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x11bf}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="1100000008028ec6732600060000004c265d2e788e7165f0bd67f0"], 0x1e)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000e7b83154046c38a19f1de26006c6b746a5f40dfdda6338f95c29213fa954abc11e94b88fd56ec5c428129791523c27de0a1caf2af5884f6952cdca578457a3a6e0f6930bf142df22dfc887f18ef862fc7b16ab1c0e2f7f36a43e42754c449fc0561eb35d01d21e5c1692de61cc86f25c6b5b037aa4", @ANYRES16=r3, @ANYBLOB="02002dbd7000ffdbdf25820000000c0099000200000056000000"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4)

[ 1003.655982][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1003.703265][T10648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1003.742971][T10658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1003.767142][T10658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000f000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1003.819674][T10658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1003.846842][T10658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1003.857804][T31646] wlan1: authenticate with 08:02:11:00:00:00
[ 1003.869244][T31646] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:45:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05003f000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:19 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x80, 0x0, 0x77, 0x3, 0x0, 0x4, 0x3000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25, 0x4, @perf_config_ext={0xf526, 0x3}, 0x4a000, 0x1, 0xffffffff, 0x4, 0x8000000000ffff, 0x81, 0x2, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x7, r2, 0x3)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, 0x3ff, 0x2)
r4 = socket(0x0, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000400)=""/216, 0xd8}, {&(0x7f0000000840)=""/52, 0x34}, {&(0x7f0000000500)=""/103, 0x67}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000000680)=""/51, 0x33}], 0x8, 0x47fa, 0x9)
preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1, 0x0, 0x0)
close(r3)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000980)="c20f", 0x2, 0x0, 0x0, 0x0)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000880), 0xffffffff, 0x8380)
ppoll(&(0x7f00000008c0)=[{}, {0xffffffffffffffff, 0x20}, {r0, 0x9120}, {r5, 0x4420}], 0x4, &(0x7f0000000900)={0x77359400}, &(0x7f0000000940)={[0x40]}, 0x8)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000800))
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x80, 0x7f, 0x4a, 0x1, 0x0, 0x1, 0x80100, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000001c0), 0xe}, 0x0, 0x0, 0x5, 0x9, 0x2, 0x6, 0x1, 0x0, 0x4, 0x0, 0x100}, 0xffffffffffffffff, 0x7, r3, 0x4f9f47250d3cc37c)
r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000007c0), 0x14e601, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0)

11:45:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050060000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1004.004070][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1004.041122][T10648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:19 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x21000000)

[ 1004.117474][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1004.158590][T10290] Bluetooth: hci5: command 0x040f tx timeout
11:45:20 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x7a)

[ 1004.200104][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.239988][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
11:45:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050dd2000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="010005000200000048f7354a97bdf71678b728a85237db89748fda5565262d12fbb26404628170691b4617216128830fe3e271703a6002f7cee5a0f2ba4ff713183bd7ddae39c7ca6bd3356190be4f42a4dc40bf522606f74db50bd8c9659a3814214ab5696764bcf6b4fbb3ecc0ca21bc5c4610cd7e4965205bcbeffe7393e28ef6c1a4831ae4b23128e31958965fa2a48b47459284b855faeb8cdc2e7a0b1c1b37d342e6f11b4a27d9121a5bf31e49081b6eebc2cc84ecb2e8219d96f6cd018d5e38fa808e0a2f439351d8a793ab1d37"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202020202020107008b960c121800e876883810df14a115fe0f14c7e64f831f617ce0fa13b19b398bc994114473aa1d2effca54f2b1a727bc15efd5dc5c177b"], 0x35)
syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@ctrl_frame=@ba={{}, {0x1}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x2, {0x7, 0x5}, "ab2431d4f7ac80f9"}, {0x0, 0x5, {0x3, 0x48}, "e73fc4d677e94834"}], {0x0, 0x5, {0x1, 0x1}, "7d636862358a8866"}}}, 0x36)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[ 1004.360187][T10687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f0000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1004.488762][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1004.545231][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.578447][T31646] wlan1: authenticate with 08:02:11:00:00:00
[ 1004.591333][T31646] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:45:20 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a0008", 0x15, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:20 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x22000000)

[ 1004.702447][T10687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.747517][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:45:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000030000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1004.857457][ T1489] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:45:20 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0xc0)

[ 1004.925005][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1004.936665][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1004.972357][T10290] Bluetooth: hci6: command 0x040f tx timeout
[ 1004.978567][ T1489] wlan1: authentication with 08:02:11:00:00:00 timed out
11:45:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050200000000000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008094}, 0x800)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[ 1005.077755][T10714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="010005000200000048f7354a97bdf71678b728a85237db89748fda5565262d12fbb26404628170691b4617216128830fe3e271703a6002f7cee5a0f2ba4ff713183bd7ddae39c7ca6bd3356190be4f42a4dc40bf522606f74db50bd8c9659a3814214ab5696764bcf6b4fbb3ecc0ca21bc5c4610cd7e4965205bcbeffe7393e28ef6c1a4831ae4b23128e31958965fa2a48b47459284b855faeb8cdc2e7a0b1c1b37d342e6f11b4a27d9121a5bf31e49081b6eebc2cc84ecb2e8219d96f6cd018d5e38fa808e0a2f439351d8a793ab1d37"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006400010000060202020202020107008b960c121800e876883810df14a115fe0f14c7e64f831f617ce0fa13b19b398bc994114473aa1d2effca54f2b1a727bc15efd5dc5c177b"], 0x35)
syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@ctrl_frame=@ba={{}, {0x1}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x2, {0x7, 0x5}, "ab2431d4f7ac80f9"}, {0x0, 0x5, {0x3, 0x48}, "e73fc4d677e94834"}], {0x0, 0x5, {0x1, 0x1}, "7d636862358a8866"}}}, 0x36)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050040030000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1005.216558][T10722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.240224][T10722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.285932][T10722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1005.300129][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1005.314932][T10722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:21 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x23000000)

[ 1005.345208][T10721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.361357][T10731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003400000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1005.390646][T10726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.411087][T10714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.430628][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:21 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0xf0)

11:45:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05fffff00000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1005.608381][T10739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:21 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a0008", 0x15, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000100000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1005.731523][T10722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1005.776225][T10745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1005.796505][T10745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:21 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x24000000)

11:45:21 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = gettid()
shmget$private(0x0, 0x3000, 0x200, &(0x7f00004ed000/0x3000)=nil)
shmat(0x0, &(0x7f000058d000/0x1000)=nil, 0x4000)
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)
r2 = shmget(0x2, 0x1000, 0xffe, &(0x7f0000000000/0x1000)=nil)
shmctl$IPC_RMID(r2, 0x0)
shmat(r2, &(0x7f0000ffb000/0x4000)=nil, 0x5000)

[ 1005.952795][T10739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000200000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x1a]}, 0x8, 0x80800)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x100, 0x30}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000006400010000060202020202020107008b960c121800"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)={0xe0, r1, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0xf, 0x34, @random="ee9bba1484bd7afe659de7"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c88a53761c"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "0846de2b9f0241"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1e5894982e17c37a8c05d928a2"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x90)

11:45:21 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x300)

[ 1006.054452][T10762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1006.074866][T10762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1006.107838][T10762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1006.130832][T10762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1006.201711][T10767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1006.237189][T10289] Bluetooth: hci5: command 0x0419 tx timeout
[ 1006.251810][T10761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000300000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:22 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x25000000)

11:45:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000400000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1006.543173][T10767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1006.611222][T10762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:22 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a0008", 0x15, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:22 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x500)

11:45:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000500000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:22 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x26000000)

[ 1006.943814][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.037953][T10289] Bluetooth: hci6: command 0x0419 tx timeout
11:45:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000600000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1007.291665][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:23 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = gettid()
shmget$private(0x0, 0x3000, 0x200, &(0x7f00004ed000/0x3000)=nil)
shmat(0x0, &(0x7f000058d000/0x1000)=nil, 0x4000)
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15)
r2 = shmget(0x2, 0x1000, 0xffe, &(0x7f0000000000/0x1000)=nil)
shmctl$IPC_RMID(r2, 0x0)
shmat(r2, &(0x7f0000ffb000/0x4000)=nil, 0x5000)

11:45:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000700000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:23 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x27000000)

11:45:23 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x600)

11:45:23 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000018c0)={{}, r2, 0x6, @inherit={0x70, &(0x7f0000001080)=ANY=[@ANYBLOB="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"]}, @subvolid})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002b00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r3=>0x0}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000040)={{}, r2, 0x2, @unused=[0x80, 0x20, 0x5, 0x6], @devid=r3})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x1, 0x2, {0x0, @struct={0x562c, 0x1}, 0x0, 0x0, 0x100000000, 0x5a, 0xfad, 0x5605, 0x411, @usage=0x3, 0xfffffff8, 0xfffffffc, [0xd8, 0x9, 0x5190f108, 0x5, 0x3, 0x401]}, {0x10000, @usage=0x7, 0x0, 0x8, 0x8, 0x7, 0xfffffffffffffff9, 0x0, 0x400, @usage=0x6, 0xfffffff7, 0x3, [0x9, 0x29c000000000, 0x8, 0x1, 0x0, 0x3f]}, {0x5fa3, @struct={0x6, 0x100}, <r4=>0x0, 0x7ff, 0x0, 0x2, 0xfff, 0x5, 0x21, @usage=0x6, 0x1, 0x8, [0x1, 0x6, 0x7fffffff, 0x7f, 0x10000, 0x56f1]}, {0x9, 0x80, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000018c0)={{}, r5, 0x6, @inherit={0x70, &(0x7f0000001080)=ANY=[@ANYBLOB="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"]}, @subvolid})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002b00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r6=>0x0}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000040)={{}, r5, 0x2, @unused=[0x80, 0x20, 0x5, 0x6], @devid=r6})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000840)={0x10, 0x0, {0xffffffff, @struct={0xffff, 0x5}, r3, 0x401, 0x9, 0x40, 0xfffffffffffffff8, 0x2, 0x0, @struct={0xf2, 0x1ff}, 0x2, 0x9, [0x5, 0x1, 0xb0, 0x1000, 0x100, 0x9]}, {0x4, @struct={0x1ff, 0xfffff001}, r4, 0x200, 0x5, 0x0, 0xb2, 0x1, 0x80, @struct={0x9, 0x3}, 0x8, 0x6, [0x4, 0x56, 0x3, 0x9, 0x8dd9, 0x6]}, {0x80, @usage=0x5b, r6, 0xffff, 0x35, 0x63474ed1, 0x80000000000, 0x1ff, 0x462, @usage=0x400, 0x10000, 0x80000001, [0x5, 0xb368, 0x9, 0xfffffffffffffff9, 0x3, 0x401]}, {0x9, 0x5, 0x7}})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000800000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1008.061450][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1008.074877][T10812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1008.113931][T10821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1008.153539][T10825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1008.184597][T10821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1008.199161][T10289] wlan1: authenticate with 08:02:11:00:00:00
[ 1008.216440][T10289] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1008.239675][T10815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1008.254714][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:45:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000900000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1008.284716][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:45:24 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x28000000)

[ 1008.406616][T10812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1008.430651][ T4033] wlan1: authentication with 08:02:11:00:00:00 timed out
11:45:24 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x700)

11:45:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000e00000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1008.609935][T10841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1008.621276][T10821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1008.657515][ T7065] wlan1: authenticate with 08:02:11:00:00:00
[ 1008.670444][ T7065] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:45:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x103000, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x424, 0x36, 0x4, 0x70bd2d, 0x25dfdbfc, {0x9}, [@nested={0x152, 0x38, 0x0, 0x1, [@generic="3e1c92b7a8e7871f7e2997262adc48327afa8a2f16649841ec2f72b61b325027c067a29122cf2e5c91ed78289a5ec03759a9ab9b580d548e1bd4e4e37d0f90782e831308e95e4f394fab17c543b414669cccc064e9448d712fc770f0ccc274c151156c2548fc210b447bdeea80ff24b0667912ffae415ae69b3d5243dd0fb3c254c5ab5101d84796", @generic="1cd3898d2614eb4eec45e0ce54a20899658d2e046b0146609e2e6659a6eb7196e7fc36d4174081dd6d7807c00c3affe6073cc21a24e19137eedcd327aa4607b2eb3fbcdf7b2e05432bc0f7979e8a4c72641abf43259f8874369d1e0c8e36cca9777360a6b8f088f0d9428e83b55539f1ce21e8699a7cc7a97597985fca596480cac539f845f372dc5af116353af8817ca6b0e0b72476cdbbf993f46c346ae7076f089d53c99eea60f940dde3d17fcbda270713c6a8e59f0d7ce76481d0ff3bef5939e5d5185d"]}, @generic="a4fa99264e4147104f47fe2d7b078fe2f622b0a4ff4fd0fdb053e2b60596e52cc790f6bcf4e00e9c309cc764681c667bdcd86f4f73a6df6cc3559ac6ff10e19caefd3ffb88800a52104475c672bf19c89a20832ab6423d14c0f5", @generic="0c8dc17a1d755cb53bb4a43794859943a3765b6751c06509cfa32a6846aabbd3662e0f2e61f52adc9069379cef4dda3e7754dd1040a7fe2b5ca1d3e87aa787e076b203307fcf4f75c63077e3d4ec7522e838b6815f9fa3e5bfacf108d8a0c9c3fa7f63a27d87ed6f7f2d752ea874f3f321d57b1bb431802c38505c948f9d6f0fc5512dda9c282057faca6c481a0ae92cce5bdf24eefd528f36f577694bfe55c4263cf505c11cebdc3dbf6d1435efe0eabe6246d9ce91c0502b8a7a8b49d22d43dfa0d0cf269467bf319ff8be17f573d8d4c442beb4081f5752a146f5", @generic="bc7570f496b0bd53cd8237589a4669a2b05e601bec5a14043f3d9570efdd05d9b0b74d8af8619174f778b7fe66d6612fafd82e9905f5fc5fddb45f650ab1a6844784fe5df6a5a304421883657e2df1fcbdacadc5c06e2712fe661d904b883e391f1f", @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@empty}, @typed={0x93, 0x2, 0x0, 0x0, @binary="a5972129aaa930732d2c5ea9a334ec9fb3ebb974066727969beb7b75fc1c03d30c2dd2e064a746a093b7a1825dd10ae42bbb5210355edfcc73779f8ff431f473ed5c86074f6a41e7b01636056086114ad201f39d3f5a4b387031e3aef05804cbc1384bd43bb62e036f5d856997a978eeb4b5b896c1898e30266b19492b94e8c44921f740f3d2a0168db2584fb5c389"}, @typed={0x8, 0xa, 0x0, 0x0, @uid=0xee00}, @nested={0x6a, 0x45, 0x0, 0x1, [@generic="488c67c59405f529fcb2f040ec519001d2150ea1aeffda3666f416aa218546bb19f4f10d9f485cc2ff6ab09308b92ed4c14fb0f839e8e0c80344904ec86d2102de96b65343074a7663feccf1ff50d1dc3efe", @typed={0x4, 0x59}, @typed={0x8, 0x90, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xe, 0x0, 0x0, @u32=0x7}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x14}, 0x8000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xfffffffffffffe9f, r2, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x40, 0x55}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="23c767684e21"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x801)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_b, @random="f3f18a099f3e"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f0000000500)=@ctrl_frame=@ack={{}, {0xf50}, @broadcast}, 0xa)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x84, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffd}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffc}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[ 1008.843150][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1008.921606][T10841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1008.977023][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1008.985232][T10851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.002931][T10851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.019945][T10851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1009.040095][T10851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1009.065804][ T4033] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 1009.066113][T10851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.097009][ T4033] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1009.103094][T10849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:25 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x29000000)

11:45:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000f00000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:25 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:25 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x900)

11:45:25 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xc0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x5, 0x0, <r1=>0x0, 0x0, &(0x7f00000002c0)={0x2, 0x5}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x9, 0x8001, 0xffc000}, &(0x7f0000000340)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=0x9}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r1}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x0)
clone(0x13050100, &(0x7f0000000380)="4342bb886a13a228f3bb0a579c391d03195b5ba03134ba1011e1885abd45c6d3a29a552da6c2181ab313a03b92fb8d991603c78157f980f98a98630aff74fe44bce4f141cf91fd18e10679dd3e7064192e830fa02ec94e7888ac52043f96603f4dfee2872da412c4a30fcdf77655f7be60e3e083115f11addc15c418be60b0d2e8a7e0016a1c450b54066df0f7c548edbf82b8fdca5fc51727c0fc71353a81fc8bf7845a5229e879e7bc0489fa56258648ce69dac7e14a44587f8a8c49a3990f1c338be15b9b111c926474556c2b7b21c13a26ad5074a69cee80e80da420be855dde95b9ed1367c545142c64929a2a1a4867283f64a481bab75588adf8479382f0a7526039d0fbd82f32175151d6c0b6b647b96be4a7ceced8b1d5d9efeabee04574a446b64afcd2a8a9d3a90d8461fea3dff3ff0704dac5f179f8d022e8f030ad8bd432ef9c080562d0130d5b65d91c89462779f1116a49123269985821beb53affcf7a6969e7f01d9bf6cdc9f525ced3fb08630680c1458882ddbe99f9ec2b2d57f1a28591b5637afca9a30a0fb4808e3434f43ef3f9abcec2fd89533f4584d6969d6abef448962cb7fee452fa3f8811c8c0e825ee9df94a6054912951a452a8ee5757b2a8f20c99694c1f47acb5ffe987f653e945aa06077ff92baf2a80cb8662dc24f6e39792b5159a43eed92942ab0d2a3d5b72063afe044b0d2f5cb3cc4145d27387e4e63715d3283fc5c65a4935241f00a1fd177d3011e6ea8d19f9ecfd719554670e4cc5b67b089b5ef8b3ef443f1bd41e8c01f63e2048179cc4a2e1fa51f013542b446ba402e48af33eaf131db066b5c9595614f0eca15a8686261d5f45ce928c943a5d051d8a05d17524d811969f01af2479f8d1a6f5b31290c9c8692829af261e9b745929bd6fb92692022ef4d9489b068a40fbde06a81809537165807503853c0cdab1489f3bfab7597308e536cc330c6dd0437fbb3e7bb2398d86f450ee8d38b340081858cbe720100536897269b7c456ce225e820a80f77f9da7ca89606f2e51fe0c7570f1f0f818404d3f5fa684bbfabf52b286cf7d6fd5b43930677d6744ebedf7028e456355e3fc9baa1f9954d2283eb7a05f71e25fd5767dc0057a9bb219a9e1a5665215083bbb27241ee5c90eaa3a469f89acbc1d7e10cddaf908e88551460b6b85dab2c7deeb49229055b8d5e5fbc02cafddd287c1a0bb6f109f85c5328547083ef331463cdd6519b0b3395b62120fdaf77aef90556a4db6dc564bacf722a1a44f0238748e6da75d2730b400e48cee52f9df57a957408e0327c9e5a40bed110eeb620ef125ddb78cf96715ef851f0d1ae0f75db96d9372d860a0361bfc8a6c394c8533a0810c898f57576e4e7e3bc3e5d6f1c5d44c3d5c272cf7fa6d27d1cbcb028c1a35770ed1dbbfc75468d91fc00afec331357ceed6eaa91e9bcc5227765196d9c9bdf8e67dfa198d6b043d364e4c94b89708a78cebf302d14247dec2a803bfa71e975fbffe7314efc045b82129dbd0157d96d4c21d044914c860a05f50e1e37785e5602a1ef817547befc04f4b5678b537669420301b9618399e0dfbcfe96c74a42cd1f6c4da6fb19c9d4262972df2cb0c2a33394efa6d18c18621198e17765572a37f9aaa688bfbe24da23543eabcecc6da5689bf98707b5cf86b888ed3ddec1e07bd74f0f4b9f1223bb8fcd9b36872e9340e8522861f86fb4f4d8b3c9720b26d82917f2911d910c4b013cd3161ed5f16fd68ea35b23f7d7509c3d86480548f1858d77b32366fc8fe85ad23afd1741a966da6dc8e47de440360438b686045f97b8aa984d40cb7dd2a089d95a6328f118c034b7edbcee8a7c51f45454ea6177bd8a70dde155d5cb995981600212b0e409e9e34068a87d4831d1244c59699ccc00e96d621017dabcdd0c31ff311d7b061e75b9a9a5a86757f9867ddb752da9cdc0a1a622fcb4fb5ebea62ddc49b2f5b4ed37aa34eb7ca550b64b6462407fd8008d448e55b5e6de036276cc168b917c43372f1b34d75a37073813394aea0c8c46fb3a5c59fac4fee285141f42cb53eb1b074dfa779e401943fb654c1ff0417a69ab92512749ed33959e25e625d6633111042c3edde35056825bcbbd2b572806425d3a46a10485ce3f37e5996b22b5d60ab396f98657e59ff556c0a72bf319b34820cbb4b5e6988aef434898050a54958a3b2e91d1c5c35acedf8269309cff3b8c3b20d10d40e322557f5445a082b2498dd5025e46a0542555726bd69e1cc23b8287516ac06e2494f28ecf73104cf955dfdf68a84ac0caa9b469a23eb9645a8b17a1edf4217947413e183d69d2b04e69233e4b2a64e23cd21f732c92586c85bd67ae53239a1c2cbba16511cd770ffd813fe9ea80a025fa782a997c7cc11499c8e4a18d21bd1468df8ec634183df04197dfbd547c6f5ba426827c75e3dc41621b255dc45d56c5353b331dcf9b7582df6e3b3c4ec5f606e0becfbdf0378f075dd8984b3c25e9746c0014a725ff1159f2e6d2b00292e29a9b9d73feceae22585094a7eb3f7e4895a374a229025064c739a0d1db71b406ee4890fa9438215bce7c5fbc5254368472e3645719d0cf4c46bbd52cec01af845874db09b60b91cbf897fb4b03527a016a0750a54dcd4e019b3403e4e961bf33b4dc08e528930829a65158ed888a00f59b9c388c54f37b991c8d4ba3d7d6a5e1de67d1bd900c81becd21c626bdaf290bcab7f87b79049ca46b1d69b75181a39c429964ed82895e16e0acc99219575c90b800a74536cb6bbdee9fafd75a5b26d7658bb0c915340f9d5b9a0f6881638779145702e528aa522d8f3717086cf7f948c37a95f17e7231ebf56aefeb7fbaa47bdce4e421367a06c31073910fb756710d33bb734827d060d92de649d21d1c6c8da7997e22881e016986337b9bf5e5a70c88aee76017651240a641935c743c98fdf411ee2f108a5df7bf0f9d63e8912229e4c965b012c70c26645d0e325732a2b40a16a402ef4f76b471ce92bee20cd8c1e709fca775e4f9412b5e8c34a09e17a5dc3fcb4c2dc098028e3beb840c1a5bd6c8e66b180ece341888580986c4a8d3e6c500bd5111d5bd046116af9b290bf5c96ff01d7ae74fa2b966969ff108bc5211b0d78be3bcf5a9ab10367c990ac1922d6b61b500e76574c00869a741c55e7ca01eb6b9d8f67f16bfebc4cd4db3abd869a5f6768601caf2beb33c9eb56b909215658f1bfb034bf931d9769ad9d6005ada76450f7d9db33b1b5cd968429ce9139566033a397c401e511ab5c60736997bc831de1bfa987bea42dba168c950533c6c41c3e1f53fb2ea9520047cdf9b4a329fdeb2d19c1f580965459797e8901e7aa695f4de0cd601e866294b3fbe44fa154d4f979aa2d18d71cf1506768dee60456e656bac15a9c649b07adc3067a654a505fe6d2a5f844f1c668eede84de842aeceba2d3d74f8de1a8ac46d74e588743d3c6ba00a636ca391a5ac6c61b2eda30d6fc0b0955b3835514ded7a7b7962c7e006fdc9bcb486b52f4ffc692405230bc73db9a3ee1a0462fe915d440d8f286b305b07f06449e5783de3e1a1fb7aecdcb7a321ae71ff8aae6f5ddc2ce3e0471f2cd4aeca6c9e845162d9ee9308b42132a112db1d9a3649096119bafcb0c29db3b0891126cc5f7d8bed79fb2a1e576abe02802f34b34494faa96979e2a9c5c1599c0fd6e7b55077619edff00ffffc8a4fc60f74c2d41806161b19e8e6a75f4f012bae62093d05ed36eb064c632d4ccaa187ccd6bdca22b0d2f707f280926c63956cde1d5cdbc38acc06e0021e28a4943f42a917dc8c3ae9d246db662c41d0df1a7c83982fdd504bf4f47ee7c29fdc183b2847431fb2e9b2d36813743f1b53bfc674e469cd680b3031867c9c79af2c178a6dcc46b915da751eb7ad8bd7fd302f7ee2801414bbfce8487b86e966dad237fc51f55bc541762f928caefa913d2476d2a617933f19694f3d57c5f47c2dfcaca920edac3abe29942e0c73106b3c1385c3500c74902e81abcdd96983624e76211a63df3fdaffb2ce844bc93eb867c1f33317b88695bac50f87b95ca618a80566537f018ef2e2b8ac70a368569ad9d5fce51a3c54844071cb413167f35129343852a681a19c42b9460b9805bc126a53d64669b99af2a8529eab25c2a95b59f2cfaff1be91ff520b76656136f47eedb3eed6df215bf9689b82e3478c72fe04e1ef49c10278762cb362245b1dca1780d4c63d7877eeedb2846734927d29eabd09b40534ea5015e311c179e1f148ccd15570cc805c2961189a299185469b7415e582de4d9cbd5199a4daf2c33fe46e4c53466538cd955628be29c138390b6c442ac7743266d8389a519e907b45407ff580b49cb01ea768ef44deb37df8ec44605f2f4cf119a062aa22e49a6f36bd90e166e151756bdf9414e53afc682d6b3a2354aeaae64966f89545737ee585799a08ff1493282ddbfb81671a0f5a820b5f5f0b08adf7f549feca898b3c6afc64a413c6f7f8dbb7b87dfbb0352375932fda69d511e8d688fe5e474d5d4804afa543211b5c5bafd896475fc96d05456136e47b77f3a4e653f420117eb19e0d20731a4d43f30af8231bb57c19fa4d2aa780f7645b864dfa5f25a90073575e3c850dcc57209f20d342372bd97dddd869e40f61617584c365a838a5abf27c607ceb62dd44f4ffff61e5bc9ab1d5a9cf61bb02843a648e6eac8bdd583feb8181d4ac6826b003e13c68ac343043da83150d07ceef9c0d1b2258f6c7bd3364639660f9d0e9749fde01cd053e6c6f826b5011489d886319534356c121211a4477c7ab62be985eaa3744c279888051d472cb44da019786a5984570d4589a25159516826aed3772d4ce68aa7c856870664764a5ee5ea32a34e15bd81b82b830ba3470ecb45b97ac6d0839a15d2ea91346c50694bac85d58876ecb6d3edb790ffc4a107d9bfc10ca785d1dd13ad834a1ecbff305f071ac4e85a6999ca9cf5e7ec2259252e6b9eb5b4a91e0078551de0baf1e8d20d5e057bf16c090df654189274fd33f1f5e62fd25404c63f4b1a191413ed5b3fcefd977bf343eb101ea6be94e13f9f4ed3bd2835900a206d69b698fdca710140efe97252064092616b8b217421554751645c490451cd99b8e7257d0576cf5e8dcfc6df6cef76e2b9e7a66c8013a853e9005b6d9eba97e9c10fc1759df4405bff0a6cf02c3162e69bb9ab212d1f064ee108559f7283b424854183d47def3d9031f7eaf5d969211bf725adf2f9b54f0b69b637f300a1b9656b7b7bfa79d7bb6acae57ee8eec4b17fe730855b3fe86b5ba9c1e44c14c6d1a96e9393a5cd02a0b949278fb5b2bc31655032b3992be2d191aef6aa49563368e82415517bb0eb3e59b2572b123b06d236878f5e3991b58e7232cd62901630b72707975bc9152945528905642ee6528f532b7e8e1b30002cce2d47ffa26bba24f26e41d9fd803486124ac6e2336eedf5e9c660c347a0334054c990ccafe45cf84ec685dd48b852ffdbe6925b72615c9e04f43b72803d2c3dd62c44fd9b2ebcef6c0015b1518adab09f6f99289e14e7a182b17ee44574550d5ea6c68dd7f06b4428705efcaf5fd651571e5df74f604336d9b4f2bd570ac329a3a0cf05823fd7493eec4b0b74eb206b511ff28fbd2496d6eed17e8d8d9ec0533520f5cf03d29138fda77fb8", &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000001380)="bdde5237198c1c6dfbf44eecc9daca4c2b49c670d66c236d66d901d939fcff5d2d3561c38ac624bebd0a36c1eaa28dab40b66597e7170cf6621b7ea301911b1262289547a0516506441a9d70bdb686f0d1cdc12dc76623dd500e5587932b887da42adb798f72a8ff8ba6d34533c97aff722cc25e2f1e080feb6717e10fe5564e4e8f39e0de30fda694fc8071d1b41da3bc7ba7fba02dddeec1da70c2cdd921b77367af7171b6b9022693b78c87947454527a602d78bc7f97fd93f32b81df1b53408de6fb353478d3b652a1e6aa7fd5f628fee84de06b93d06a39879a2634b78600cbedd56f041a9ae1bb0b81f0ef9bc1d2")
ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f0000000080))
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004103)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x26, 0x2, 0x20, 0x0, 0x5, 0x1cc00, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x5}, 0x4001c, 0x1, 0x0, 0x7, 0x9, 0x2, 0x6, 0x0, 0x2000, 0x0, 0x3}, r2, 0xf, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004d40)={0xffffffffffffffff, 0x0, 0x20, 0xa6, &(0x7f0000004d00)="0bb90fbc1db81cd2b48a1d625cf044fd795796451b7815b8aff21c8909153d9f", &(0x7f0000004a40)=""/166, 0x3f, 0x0, 0x88, 0xba, &(0x7f0000004b00)="d661defc131ced70ff55dfa97609b63b078850c2db150af0a5556a1b0e4ea770e44dfd2752a956d6a176edc3a30148e146073517efa1fcee4a13c164e7f596128413ab96100f0cd63babf094510ef7ef75b0cc2942f1ff49b36eca0f0981146da5c5eb134109ba8c2d6b6ccd20e4d7424588066775eb9c45159755d17be8d4ebfafdef3c35237570", &(0x7f0000004bc0)="1f4d909a4cbce18527351d5973fd622dc6468218fb9a1cf3a0de5733a019d3788d1bfdb90737081ebf55f8aa012891bebdedbc30592a81c9e5ec7df3f29a7ec61f6e400448aeec86ec2bde7238ed921dd84488a33e3eb3bd103dd96adcc8088ff499bbd5abf1a97c14007245ea60d00e5e7f2d04c90ec914c5cef0daa730f30823d6eec82fed211c66bdfd58aa2facba06c953c2e28927166bcb8da1144abf1d19fff7c7759c2ff9d8105c4bfb08a174f271394cb5cd740c9c66", 0x0, 0xb0}, 0x48)
r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xd8d8f4fe545c2be0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f00000014c0)={0x34, 0x0, 0x8000})
sendmsg$nl_route(r4, &(0x7f0000001480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001340)={&(0x7f0000000280)=@ipv6_deladdrlabel={0x1c, 0x49, 0x20, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x78}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r4)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f0000002380)={0x269c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x2500, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x1f}, @broadcast, @random="fcd42e98e694", @device_a, {0x9, 0x8}}, {0x6, 0x1, 0x2, 0x0, 0xff}}, {@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x20}, @device_a, @random="a2e277b7bd47", @from_mac=@device_b, {0x7, 0x199}}, {0x8, 0x0, 0x3, 0x1, 0x10}}}, @a_msdu=[{@device_a, @device_b, 0xe9, "65fe4da6f67ebf431c51451281b32d78308d343c18aa476c6f593c823d285f15d18713af171eef52c652342c4a648c403490855aa7b2e873446e374e4bfb6b70d279c49913c2ea2c77b0e2357a90fd8d2b8030144f65eeb65f243b0bec3ec1322c1e767d2e6b2022c802a91a38740d024747fe3188bd34538f4372899c78d6971ef351a5035e6a24d59da251ea3de5027fa1ae8480bd463aaa564fdbb1c7b6dcccaf069e57db6dc67231ef49a14e3af5ab5b9f2cbff2dabededfdc58b1c03b856cd36fada9c758e9030eac9d59dfdef5b3d0a8427a58bcb90a8c6b59f01a7691c16eaefbfb8a79a0ca"}, {@broadcast, @device_b, 0x1000, "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"}, {@broadcast, @broadcast, 0xc, "927e4a2b04ecca4e068d55fc"}, {@device_a, @device_a, 0xd, "7bf9c1f4c9869afce1f5145db7"}, {@broadcast, @broadcast, 0x56, "472b97d93f29608d71d70ee1f94231e6a9eb94bbdba1c9aaca8134b4cd75ed31e0d948cd89a80eb1f50f59940e359da542f8f06ccc9037957674b4d279019f8c2bb700c69fbe440d0122cdc66d222e486bb0e638d752"}, {@broadcast, @device_a, 0x70, "5afab870299a265d4f70a6bc8f94dd645705ac603b0428c97c76183271cf9758451059e5fc44f7af0b62c4808b267e8a3eadf67b2a33df789a4bd51b98c972f6d0471b60fec6d25678492846b90b339788d46803f435d01b5734650d969c758f7df8490f39295f8733257817c3e1704b"}, {@device_a, @device_b, 0x1000, "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"}, {@device_b, @device_a, 0xa6, "fc6aaf18e00db5913fdd33c87f2b6c810b634c07d616e4b7562a9d20d0f1d572779c897f38daa1d9c1ddd84ee6de7a5e768aee8bb46772712d53c12db7eb5afd898e80e6d8b5919677c2e0563fa21074bad358d216cb4029f9ca73aabf04d9b6aeb369dbbe33110f3c02dd6bb5d21f931ba83cd794f6c5f7b07bbc47b8d0b8b26c0c5873aee7f9420ab33d78f745a60f65c9b72609d72df10d81d90a10dabc68c055a3b6b1ce"}, {@device_a, @broadcast, 0xd8, "c143263d0bac4334cea1baed996b8dfe2bb011c6a42a85de4869ebb79c633741692c40af9c19c51798ac8b83f92d73754d4cdfa2a77c5fac1f0f7cbe48a39ff5d52a4c54cb834485003bb2495facf319c15d9f35d7ab374248bbde22dc32e80374f19e6d90153e7daa59cf5435f3ea72a053278f733cd5ea8aa6a7c1c1f54ed1d6480c393231111ef646cfef7f6063cd0f23fb697b981e9c88cabd69d6600c385e1c54a5c6a0485c3293d8d66898c5eb0e977ef11c22ad6e3444c4ec74aecf6ae455b68444427501c7f42bec2981d10514547eb5c7590a2d"}, {@device_a, @device_a, 0xe9, "668a13324c6a6c19a2e27f64826d3bff2dcb91a9e4046914d0d7d734785a0bb3616d9d3b46ddea41521a8c6720e1747b741095d8998611706dab1365bfd48d5274f6067a0b9ef66b9e3175a326ea3d2911cd7ef74556e48c1bc11c4940cb11b8591c0fced642e227b67978ed33eaf47468bab942fd07837d7f2a755d48f8a655eb77ff7fa3a73983c07aa18c581de0be2d4c73e50410775508c0e45f623c740d4a70548d07974a8a31b026ece8fbf321b4684fe997e035da5ad52bae3bd9d4a5a4806f39baf0ab5deda1877afbff8d986ef4c7fa052daffaa23050613c4048691646cc8d6b390300fc"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x20}, @broadcast}}, @NL80211_ATTR_FRAME={0x14f, 0x33, @mgmt_frame=@probe_response={@wo_ht={{}, {0x3}, @device_b, @device_b, @from_mac=@device_b, {0x5, 0x1f}}, 0xffffffff, @random=0x3, 0x801, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x43, 0x8, 0x800, 0x3ec}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xb2, 0x20}}, [{0xdd, 0x22, "4559e9f643d47c22658ddc1244bf146fced87c0cedc06d3abee6a2dae639f207915c"}, {0xdd, 0x93, "ba3bc4545d2413e435015e9f5a2beaee233351979931975926820824e4d035d92269ca57f83ceca39a3f10e1aefbbb0c957d5c01b96ce192c9773cd26af95bec0bea70916f213748105c5a0cffc23b0992166411d36843e75c4b754aefd0609eb75b4423f2aa5d3edd8b0aeb8d95f8150e686a3cdbba7f677931017c1363ee0e300fe27c97c59cb1cffce366074c5c51401c05"}, {0xdd, 0x4b, "540d216dfe9642ceff6c9fff0f1622ffb89ff6f98a570e0c558d0d114cc56deffc589fcdcbc819f19e5ecb5b7062163bf7c9f2516574733c10137e5102c0382c019794b2393e271e188c55"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x4}}}]}, 0x269c}, 0x1, 0x0, 0x0, 0x20000}, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)

11:45:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000003f00000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:25 executing program 5:
r0 = gettid()
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10c)
write$tun(r1, &(0x7f00000000c0)={@void, @val={0x1, 0x0, 0x4, 0x800, 0x7, 0x541}, @ipv4=@udp={{0xc, 0x4, 0x1, 0x1f, 0x3c, 0x0, 0x0, 0x1, 0x11, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0xec, [@multicast2, @loopback]}, @timestamp={0x44, 0x10, 0x3a, 0x0, 0x0, [0x0, 0x0, 0xfffffcc5]}]}}, {0x4e22, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x7, 0x0, @void}}}}}, 0x46)
prctl$PR_SET_PTRACER(0x59616d61, r0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000340)={0x32, 0x11, '\x00', [@generic={0x9}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @private2}, @generic={0xd7, 0x56, "6498750f90cbf83095e2e2fa8a03d20daa5070dd6cf77eb6f6629e933d5fcf677b09176bb454d019965aae080229181af80d465e2bb883d1bd959ffc2694262b6cef1810072e86de391cc5c6bdbedda20829e78ae8f3"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x5967, [0xb77]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x2}]}, 0x98)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(r1)
ptrace$setregs(0xf, r0, 0xffff, &(0x7f00000001c0)="49b3e6c5517089e08656913ce7f5c428df2b55049f0dc5d0146381a4a6664b7ed3e7f65dfaec11c36d6ad0aa6edc4a00e604ab589d3157fd8582307f5b5d7ab09156056a5a3fc7ccae43098a80dd26f3d6ff795a464ee1141f481ecd482f58fdb3715e27d6e783d6")
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r3 = gettid()
rt_sigqueueinfo(r3, 0xa, &(0x7f00000002c0)={0x1c, 0x6, 0xfffffffe})
ptrace$cont(0x7, r3, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x8}, 0x140, 0xfffffffffffffff8, 0x400000, 0x1, 0x40, 0x5, 0x2000, 0x0, 0xfffffff9, 0x0, 0x8000}, r3, 0xf, r4, 0x8)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x5, 0xdd, 0x3, 0x0, 0x800, 0x11804, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x40834, 0x1, 0xffffff81, 0x3, 0x4, 0x7, 0x9, 0x0, 0x0, 0x0, 0x6}, r3, 0x9, r2, 0x8)

[ 1009.436201][T10851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.496092][T10881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1009.506949][T10879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000006000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1009.533022][T10881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:25 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0xa35)

11:45:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000440)=@ctrl_frame=@ba={{}, {0x80}, @broadcast, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x5}, {0xc, 0x7f}, "85fe3ac9ce83a192a4bd0f95dd84bedc1e661ce3839529eaacea8616fd0210bd7d544c1f6c85a4a374fee01e91d4a745d18ed101d92e8a1b4e60811069694110c6c263c0357f47bc653c8ad6c4aa321c0a43e132466b4a34d18412a2968bf3b9c199e17a208d24bba44f6dba35b7d704a9ee2879a90bda9bff6845c4e0425a78"}}, 0x94)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:25 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x3f000000)

11:45:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05ffffff9e00000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1009.746997][T10893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.774087][T10893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.795994][T10893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.818052][T10890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000dd200000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05fffffff000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f0ffff00000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1010.154740][T10911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1010.189212][T10893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:26 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:26 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0xe00)

11:45:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="057fffffff00000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x7bc, r4, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_IE={0x33, 0x2a, [@gcr_ga={0xbd, 0x6}, @preq={0x82, 0x25, @not_ext={{0x1, 0x1, 0x1}, 0x4, 0x3, 0x9d, @device_b, 0xde, "", 0x8, 0x7, 0x1, [{{0x1}}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xab, 0xfa, "379ca7038c95783333e14a3eb383cf56900d9af8239895064c5d0f002eca7d847c4f339bbccfa837fe7fdec02c3902099a042a88308e7e092d983abd58148ef18e7849eb10a0bf88e08664fea5bd0b8f398aa5c8c13bfd3e3d18b300543b6278f3928b3ee97c91b6912b74fe453fc1c8a9d18a1a791fe6c46baaf0d1733c53b28ebbd8aa85751d47a10866d09d413508d194eaa5d4f9f94e1e161762fdbacf7ba73b299beec11d"}, @NL80211_ATTR_FILS_ERP_RRK={0xe8, 0xfc, "bf4bf913dd4c9d7cc03631f70db19f314675b07fc9110b283d6b1ad7725c5fdfd2d11fa63581142c928e7deba75af2e79f9dda446d92f735778f3ba966b630ab80708c341d36200b98002ecb35572f8ac7fa1c13ae713bf8681c4c266d12a26783b97da16fc70d140818846bd2c771737540fb69691ddb99c494c383d339131a334521f51d798fc6397d58e3a307e7a4928b1651bb32bb56214ec586c6596faa0c4ea6bae249a65fe776f08dc07d778764e545192532225a82f504596ee0064722f78764d258b4996d60f1a23b0c705cec8d80a6aa1415734df52fb63b7955fc43e21f15"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "c6f49f45"}], @NL80211_ATTR_IE={0x49, 0x2a, [@mic={0x8c, 0x18, {0x229, "50ff22e229c0", @long="3544c04299c4236daac330b3ba1a9d0a"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @ssid={0x0, 0x6, @default_ap_ssid}, @peer_mgmt={0x75, 0x16, {0x1, 0x3, @val=0x101, @void, @val="2f16b8fc4b1995a9483a3ea948ee0740"}}]}, @NL80211_ATTR_IE={0x14c, 0x2a, [@tim={0x5, 0xb7, {0x3f, 0xe5, 0x0, "d609a2c5baa6fb9cf138224f95248d709030819f2f2f827a7653536a90a3f0d9dde41df0c472401408a8840dfc0f24e6d7308375bd852e427f9b5bed65b4854261e6d53bd71aa9d1d8ff30fa57ba7552b41e56baf0884161696e0fd1c5a673d7986e148341a55f7080fc38aa5ef52884d03344a4f25623c8f1f9d16a8b3470975e6d9b7fb37b9a4c2af24502a85da7f3756e0fe56652442c7225b28b619bd6bb4b4dd5e5abebd6ecb6970a632f726c023dd593bd"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x3, [{0x60, 0x1}, {0x1b}, {0x12}]}, @ssid={0x0, 0x4, @random="dcc2eba0"}, @preq={0x82, 0x41, @ext={{0x0, 0x1, 0x1}, 0x3, 0x20, 0x4, @device_b, 0x0, @device_b, 0x6, 0xfffffffe, 0x3, [{{0x1}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b, 0x52e3a5ec}, {{0x0, 0x0, 0x1}, @device_b, 0x9}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x7, @broadcast, 0x9, "", 0x3, 0x3, @device_a, 0x401}}, @challenge={0x10, 0x1, 0x23}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5, 0x8}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9b, 0x20}}]}, @NL80211_ATTR_IE={0x6f, 0x2a, [@tim={0x5, 0x69, {0x3, 0xf0, 0x8, "21e372a534ec0dd7a6cb1b8f242cc5e70ca1339643be8ed09f8bd3ace3441e0883c11d8a0db24566a382cf3897143d9c1e04248da6babf110b6727b4ee2ca850590be9b77bb12cb7f27edaef3a128465c6144f837cadffccc1c7d439dbc094ec793baa45bc63"}}]}, @NL80211_ATTR_IE={0x108, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x1}}, @supported_rates={0x1, 0x3, [{0x6}, {0x2, 0x1}, {0x48}]}, @ibss={0x6, 0x2, 0x1}, @random={0x4, 0x5, "1a1ccc1520"}, @peer_mgmt={0x75, 0x6, {0x0, 0x0, @void, @val=0xb, @void}}, @supported_rates={0x1, 0x8, [{0x60, 0x1}, {0x2, 0x1}, {0x18}, {0x1b}, {0x24, 0x1}, {0x30, 0x1}, {0x6, 0x1}, {0x3, 0x1}]}, @tim={0x5, 0xd4, {0x3, 0xbe, 0x3, "655e4102e7291355383ea059e40a910411be32ae15f943846e630bfb5199503e399c1a58e54984af34b5ead0dbcc3be26ab210346681be3d1eeb8c1c1733e189ed17f2ee5ad47e867735c2c63c75eb5f5223ba5e2967c2c137be14ce78662409edfdb81ac8dd477db6ff2db3313d27935196bd4f80875df5ebe9327ebe359594ff241a0f2acda1d824873db0bba296a16d26316791aa5f6118178712bf4d7685c371a88676affd07c734fcec76d4c1e9f314bf0b8d01a57c3b492c748cde0cda83685d2257253e4e59492ee39aa5cb53a4"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0x2f, 0xfc, "14a2a8024b022ca195c085200b6ff7e89634dc5b2d46e88c9ed763e24943195bafaad9e2282244c30ee11f"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x15, 0xfc, "e865fec9a41e6f4a5670ac2ee7dc0fcd0a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0xf1, 0xfa, "28d05692049e18d27bba099040a4d99b49ff2259160fc3aa2fc88eceb0f4f19d8b0916383919a2d4469d84281efbe2d109babf80ef01b80811a378695e77f98b2bc2ef5cefc708f0742a16302bf3eb1ae3f69bcecbc3d46da0e83c4ca1ec89e1739ba99a5578c44668d890fd80d84736c772015282ec4dd86122531127781cab0aee724489dc0a38baae98662ccc81aa79f949b81cf4f7a2ac9a751960ec5fe57071f35e06b28ee347e81767c2da7fe644fdbbe2238683b988a29afa3b6f674b78912fa9caf0aaf09818a91df8dcc9f5373510d8dc4ef8703921e5257d9295e135b6d216b511008d86a59acf3d"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "d44863b50812"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xb6c4}, @NL80211_ATTR_FILS_ERP_RRK={0xf8, 0xfc, "5eba35aa631e551fbb20376eae94409260a4ce3ffa8a0109832965fce9cf2172d941f8025bbeb82b317d9e10385198d6c16f391c6d2312a5c973b0ecbdfc7353359959643d3bf755deae0426dc00472d640c7cd931d5e5f6a349494ca263af78c18c4bdb052dfad302173afb057ca70863a4e23534808dca2fc96903d78fd5854e4f0c6e42c83df2cce6d2f622ed2d579cc16080cf93087485becc1c29e94a31bcf68ecc0ca2d884086514a7fbcffbd6b5385f4258ec833291208e4aee858e10cffc595b60389cbdaa706ce639c58d36fb05b74d5e945868fd1a9d52ba68057fcb48e639be729f3a721d62280dd53ff0253ac3cb"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "d166b7f2f37df5c117a741db0affab"}], @NL80211_ATTR_IE={0x45, 0x2a, [@ibss={0x6, 0x2, 0x1}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x0, 0x0, {0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0xc9, 0x1}}, @link_id={0x65, 0x12, {@random="7fe1e59088d2", @device_b, @broadcast}}, @channel_switch={0x25, 0x3, {0x0, 0x68, 0x7}}, @mesh_id={0x72, 0x6}]}]}, 0x7bc}, 0x1, 0x0, 0x0, 0x4080}, 0x8041)

11:45:28 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x48000000)

11:45:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="059effffff00000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:28 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0xf00)

11:45:28 executing program 5:
r0 = gettid()
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10c)
write$tun(r1, &(0x7f00000000c0)={@void, @val={0x1, 0x0, 0x4, 0x800, 0x7, 0x541}, @ipv4=@udp={{0xc, 0x4, 0x1, 0x1f, 0x3c, 0x0, 0x0, 0x1, 0x11, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0xec, [@multicast2, @loopback]}, @timestamp={0x44, 0x10, 0x3a, 0x0, 0x0, [0x0, 0x0, 0xfffffcc5]}]}}, {0x4e22, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x7, 0x0, @void}}}}}, 0x46)
prctl$PR_SET_PTRACER(0x59616d61, r0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000340)={0x32, 0x11, '\x00', [@generic={0x9}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @private2}, @generic={0xd7, 0x56, "6498750f90cbf83095e2e2fa8a03d20daa5070dd6cf77eb6f6629e933d5fcf677b09176bb454d019965aae080229181af80d465e2bb883d1bd959ffc2694262b6cef1810072e86de391cc5c6bdbedda20829e78ae8f3"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x5967, [0xb77]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x2}]}, 0x98)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(r1)
ptrace$setregs(0xf, r0, 0xffff, &(0x7f00000001c0)="49b3e6c5517089e08656913ce7f5c428df2b55049f0dc5d0146381a4a6664b7ed3e7f65dfaec11c36d6ad0aa6edc4a00e604ab589d3157fd8582307f5b5d7ab09156056a5a3fc7ccae43098a80dd26f3d6ff795a464ee1141f481ecd482f58fdb3715e27d6e783d6")
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r3 = gettid()
rt_sigqueueinfo(r3, 0xa, &(0x7f00000002c0)={0x1c, 0x6, 0xfffffffe})
ptrace$cont(0x7, r3, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x8}, 0x140, 0xfffffffffffffff8, 0x400000, 0x1, 0x40, 0x5, 0x2000, 0x0, 0xfffffff9, 0x0, 0x8000}, r3, 0xf, r4, 0x8)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x5, 0xdd, 0x3, 0x0, 0x800, 0x11804, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x40834, 0x1, 0xffffff81, 0x3, 0x4, 0x7, 0x9, 0x0, 0x0, 0x0, 0x6}, r3, 0x9, r2, 0x8)

11:45:28 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1012.433899][T10934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1012.453020][T10934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1012.472586][T10934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1012.480421][T10290] wlan1: authenticate with 08:02:11:00:00:00
[ 1012.489056][T10934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1012.492344][T10290] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:45:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05f0ffffff00000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1012.535861][T10932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1012.544758][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1012.562769][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:45:28 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
recvfrom$inet(r0, &(0x7f00000000c0)=""/212, 0xd4, 0x2067, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001100290a0000000000000000070055f97c235befe5f6000051d3c791219ec32544187d6c0f79ae3f75da47dabc4650309e3a857d59d8158f504c8495816095f01cee4498463a7b7ff35049c988b8d769a5545997d7abbbb6c63bf3afa5a5ea4244bfaec80ae4a0da73570cc01a857eb21b2e0151f23bbec5f34a9191d237080017a7ce8618ac59f2eb8a505b16d1667307290a139f58f25bbaba778bf0027239c35e717432739badb997d7b889fc5ae9765731b813663378b8357a2e2346dc81102d135c42d8cde9298b04aae2bc2f7395", @ANYBLOB="52a6f5f51369075e06b084ff9d7579190f0c49df258ccf02a71c2844ec231406443b317a234e898dfbaf8082e811c0528b0374e67bece9769cdb5d2a036e3aacc29bfa69662448d10d8ea4685e91aa8955a191d38978373577e3a37ef9daffd556cede48ac5e7bec1e0d497db385750affc4821db62cfbeab256b51fc20ec0a8495029c67eba2f852deeef2a8396f776d1fb5913e68dfafbdf6314934911b14b2eaecb533a863c3a0a3285ccd3a47147dcf0958ee3c3edfcdc17a9f1b404cafc8385e6023d7a36e95af0124a8e785637abd2e4077cfdbac9a9c54be650cae6ea2ed6834f68befb4ee7a2b106", @ANYBLOB="8a6ca521c94a29e10000004be77fb4fe"], 0x28}}, 0x0)
bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x8, r2, 0x2b}, 0x10)
r4 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r4, r4)
lseek(r4, 0xf0, 0x0)

11:45:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000300002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:28 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
sendto$phonet(r0, &(0x7f0000000500), 0x0, 0xc5, &(0x7f00000002c0)={0x23, 0x0, 0x5, 0x7}, 0x10)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00')
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/114, 0x72}], 0x1, 0xb242, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00')
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, 0x0, 0xb0}, 0x20048000)

[ 1012.706411][ T1489] wlan1: authentication with 08:02:11:00:00:00 timed out
11:45:28 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1100)

11:45:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000034000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1012.894716][T10934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1012.916621][T10943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1012.938481][T10290] wlan1: authenticate with 08:02:11:00:00:00
[ 1012.948421][T10290] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1012.972643][T10943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000252db9d4d74620381e584a87dc1d45d80268b63c2efdcdac7d7f8bcc7bae00000000020000def9f06d4296b688000000000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'dummy0\x00'})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:28 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x4c000000)

11:45:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05fffffffffffff000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1013.086447][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1013.108758][T10972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1013.144584][T10972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1013.178494][T10977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000001002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1013.206300][  T158] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1013.213586][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1013.240653][T10979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:29 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1200)

11:45:29 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000002002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:29 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x4c0b0000)

11:45:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000003002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1013.617218][T10977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1013.655967][T10977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1013.680028][T10979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1013.700899][T10972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x7bc, r4, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_IE={0x33, 0x2a, [@gcr_ga={0xbd, 0x6}, @preq={0x82, 0x25, @not_ext={{0x1, 0x1, 0x1}, 0x4, 0x3, 0x9d, @device_b, 0xde, "", 0x8, 0x7, 0x1, [{{0x1}}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xab, 0xfa, "379ca7038c95783333e14a3eb383cf56900d9af8239895064c5d0f002eca7d847c4f339bbccfa837fe7fdec02c3902099a042a88308e7e092d983abd58148ef18e7849eb10a0bf88e08664fea5bd0b8f398aa5c8c13bfd3e3d18b300543b6278f3928b3ee97c91b6912b74fe453fc1c8a9d18a1a791fe6c46baaf0d1733c53b28ebbd8aa85751d47a10866d09d413508d194eaa5d4f9f94e1e161762fdbacf7ba73b299beec11d"}, @NL80211_ATTR_FILS_ERP_RRK={0xe8, 0xfc, "bf4bf913dd4c9d7cc03631f70db19f314675b07fc9110b283d6b1ad7725c5fdfd2d11fa63581142c928e7deba75af2e79f9dda446d92f735778f3ba966b630ab80708c341d36200b98002ecb35572f8ac7fa1c13ae713bf8681c4c266d12a26783b97da16fc70d140818846bd2c771737540fb69691ddb99c494c383d339131a334521f51d798fc6397d58e3a307e7a4928b1651bb32bb56214ec586c6596faa0c4ea6bae249a65fe776f08dc07d778764e545192532225a82f504596ee0064722f78764d258b4996d60f1a23b0c705cec8d80a6aa1415734df52fb63b7955fc43e21f15"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "c6f49f45"}], @NL80211_ATTR_IE={0x49, 0x2a, [@mic={0x8c, 0x18, {0x229, "50ff22e229c0", @long="3544c04299c4236daac330b3ba1a9d0a"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @ssid={0x0, 0x6, @default_ap_ssid}, @peer_mgmt={0x75, 0x16, {0x1, 0x3, @val=0x101, @void, @val="2f16b8fc4b1995a9483a3ea948ee0740"}}]}, @NL80211_ATTR_IE={0x14c, 0x2a, [@tim={0x5, 0xb7, {0x3f, 0xe5, 0x0, "d609a2c5baa6fb9cf138224f95248d709030819f2f2f827a7653536a90a3f0d9dde41df0c472401408a8840dfc0f24e6d7308375bd852e427f9b5bed65b4854261e6d53bd71aa9d1d8ff30fa57ba7552b41e56baf0884161696e0fd1c5a673d7986e148341a55f7080fc38aa5ef52884d03344a4f25623c8f1f9d16a8b3470975e6d9b7fb37b9a4c2af24502a85da7f3756e0fe56652442c7225b28b619bd6bb4b4dd5e5abebd6ecb6970a632f726c023dd593bd"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x3, [{0x60, 0x1}, {0x1b}, {0x12}]}, @ssid={0x0, 0x4, @random="dcc2eba0"}, @preq={0x82, 0x41, @ext={{0x0, 0x1, 0x1}, 0x3, 0x20, 0x4, @device_b, 0x0, @device_b, 0x6, 0xfffffffe, 0x3, [{{0x1}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @device_b, 0x52e3a5ec}, {{0x0, 0x0, 0x1}, @device_b, 0x9}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x7, @broadcast, 0x9, "", 0x3, 0x3, @device_a, 0x401}}, @challenge={0x10, 0x1, 0x23}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5, 0x8}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9b, 0x20}}]}, @NL80211_ATTR_IE={0x6f, 0x2a, [@tim={0x5, 0x69, {0x3, 0xf0, 0x8, "21e372a534ec0dd7a6cb1b8f242cc5e70ca1339643be8ed09f8bd3ace3441e0883c11d8a0db24566a382cf3897143d9c1e04248da6babf110b6727b4ee2ca850590be9b77bb12cb7f27edaef3a128465c6144f837cadffccc1c7d439dbc094ec793baa45bc63"}}]}, @NL80211_ATTR_IE={0x108, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x1}}, @supported_rates={0x1, 0x3, [{0x6}, {0x2, 0x1}, {0x48}]}, @ibss={0x6, 0x2, 0x1}, @random={0x4, 0x5, "1a1ccc1520"}, @peer_mgmt={0x75, 0x6, {0x0, 0x0, @void, @val=0xb, @void}}, @supported_rates={0x1, 0x8, [{0x60, 0x1}, {0x2, 0x1}, {0x18}, {0x1b}, {0x24, 0x1}, {0x30, 0x1}, {0x6, 0x1}, {0x3, 0x1}]}, @tim={0x5, 0xd4, {0x3, 0xbe, 0x3, "655e4102e7291355383ea059e40a910411be32ae15f943846e630bfb5199503e399c1a58e54984af34b5ead0dbcc3be26ab210346681be3d1eeb8c1c1733e189ed17f2ee5ad47e867735c2c63c75eb5f5223ba5e2967c2c137be14ce78662409edfdb81ac8dd477db6ff2db3313d27935196bd4f80875df5ebe9327ebe359594ff241a0f2acda1d824873db0bba296a16d26316791aa5f6118178712bf4d7685c371a88676affd07c734fcec76d4c1e9f314bf0b8d01a57c3b492c748cde0cda83685d2257253e4e59492ee39aa5cb53a4"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0x2f, 0xfc, "14a2a8024b022ca195c085200b6ff7e89634dc5b2d46e88c9ed763e24943195bafaad9e2282244c30ee11f"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x15, 0xfc, "e865fec9a41e6f4a5670ac2ee7dc0fcd0a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0xf1, 0xfa, "28d05692049e18d27bba099040a4d99b49ff2259160fc3aa2fc88eceb0f4f19d8b0916383919a2d4469d84281efbe2d109babf80ef01b80811a378695e77f98b2bc2ef5cefc708f0742a16302bf3eb1ae3f69bcecbc3d46da0e83c4ca1ec89e1739ba99a5578c44668d890fd80d84736c772015282ec4dd86122531127781cab0aee724489dc0a38baae98662ccc81aa79f949b81cf4f7a2ac9a751960ec5fe57071f35e06b28ee347e81767c2da7fe644fdbbe2238683b988a29afa3b6f674b78912fa9caf0aaf09818a91df8dcc9f5373510d8dc4ef8703921e5257d9295e135b6d216b511008d86a59acf3d"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "d44863b50812"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xb6c4}, @NL80211_ATTR_FILS_ERP_RRK={0xf8, 0xfc, "5eba35aa631e551fbb20376eae94409260a4ce3ffa8a0109832965fce9cf2172d941f8025bbeb82b317d9e10385198d6c16f391c6d2312a5c973b0ecbdfc7353359959643d3bf755deae0426dc00472d640c7cd931d5e5f6a349494ca263af78c18c4bdb052dfad302173afb057ca70863a4e23534808dca2fc96903d78fd5854e4f0c6e42c83df2cce6d2f622ed2d579cc16080cf93087485becc1c29e94a31bcf68ecc0ca2d884086514a7fbcffbd6b5385f4258ec833291208e4aee858e10cffc595b60389cbdaa706ce639c58d36fb05b74d5e945868fd1a9d52ba68057fcb48e639be729f3a721d62280dd53ff0253ac3cb"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "d166b7f2f37df5c117a741db0affab"}], @NL80211_ATTR_IE={0x45, 0x2a, [@ibss={0x6, 0x2, 0x1}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x0, 0x0, {0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0xc9, 0x1}}, @link_id={0x65, 0x12, {@random="7fe1e59088d2", @device_b, @broadcast}}, @channel_switch={0x25, 0x3, {0x0, 0x68, 0x7}}, @mesh_id={0x72, 0x6}]}]}, 0x7bc}, 0x1, 0x0, 0x0, 0x4080}, 0x8041)

11:45:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="b000000008021100000108021100000008021575afbf04b53b482ae82d0532f6fc1100"/45], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000004002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:30 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1400)

11:45:30 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x60000000)

[ 1014.216360][T11015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1014.226473][T11019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1014.250803][T11019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000005002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1014.253980][T11015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1014.276128][T10290] wlan1: authenticate with 08:02:11:00:00:00
[ 1014.298084][T10290] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1014.330593][T11019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
11:45:30 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1014.371209][T11019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000006002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1014.456268][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1014.493048][T11014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:30 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1500)

11:45:30 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x68000000)

[ 1014.566586][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1014.628685][T11015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000007002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1014.686038][  T158] wlan1: authentication with 08:02:11:00:00:00 timed out
11:45:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x11dc, r3, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x83, 0xf, [@random={0x6, 0x69, "1109f45201be64bcac09889dbd0f3838cf1568d317c353151bca0904d0f87aa7eec552c47a658ee9917c912d59dc549867d42874ef21c24662dc5ecff5871fbe9e943a5c8b6b7a76c5a143ca90e7418182c1214bef685d9a6f8da9754bf1b3b04ac95f2019b64c7b7f"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_FTM_RESPONDER={0x113c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x34, 0x3, "e125fbd46125a9baeb39e6d1bc29575bf70c1f322e22d2df0639af711c697f66706b615d29cbd0c1d1e809d29ae0c63a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa3, 0x3, "e4b70e8f7041f4488bf96db14154551e201b4bcb6197c64809bedafedb5c8baaa813b05b99547a6db18d9047dc8d761c11cc9567cbecc0eefc2a3e885899e99dd5204e06f363066147967e690ba0a87bcc6e5e36ab8a78338bd5df200b48b978eb461a41c9b5c49ccee9ddd714cdb1605242061fe24881fd6e5fa5fc9362d4af4b05c79e191c4fecca5ee8c10b5c639bddd6f2402cbf659a2cf7e97c4bde4b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x51, 0x2, "29f1977c43910e8ac836c8f8dd6b7fcb80f207ecf17d09ac6894f9bd2c501411999144186400efa1eca5a11369a2d95e82211314072a9baf0e07c2a179f67e3959a661a5343810ab9f1796d5e3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x85}, 0x440c0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000003240)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003200)={&(0x7f0000002040)={0x11a0, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a72}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x842, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @mcast1, 0x7}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x105c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "022da638fdf0233f3cd2436d27db12f4e95075d89ad300cd19e18e2213f4088a51"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x84a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6422}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001640)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000001fc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f80)={&(0x7f0000001680)={0x8e8, r1, 0x210, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x15}}}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x97}]}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xca}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x800, 0x401, 0x40, 0x2, 0xfff7, 0x5, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x12, 0x16, 0x24, 0x48, 0x9, 0x30, 0x9, 0x18, 0xc, 0x48, 0x36, 0x5, 0x1, 0x2, 0x1a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x5, 0x5, 0x18, 0x36, 0x30, 0x48, 0x12, 0x3, 0x1, 0x1b, 0x9, 0x3588636081e9b823, 0x5, 0x60, 0x6, 0x5, 0x48]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x24, 0x12, 0xc, 0x24, 0x36, 0x36, 0xc, 0x6c, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {}, {0x3, 0x3}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x5}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0xa}, {0x3, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x8}, {0x1}, {0x3, 0x7}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x5}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x4}, {0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x3, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0xe}, {0x6, 0x9}, {0x3, 0xa}, {0x4, 0x1}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3f, 0x3, 0x6000, 0x826a, 0x2, 0x1, 0x732]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1, 0x60, 0x7f0c6baf41bb8459]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x3, 0x101, 0x7fe, 0x101, 0x100, 0xfc8a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x81, 0x4, 0x81, 0x15a9, 0x4, 0xff96, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x2, 0x6, 0x7, 0x9, 0x3, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x20}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1f}]}]}, @NL80211_ATTR_TID_CONFIG={0x6e8, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x23}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x5e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x12, 0x36, 0x5, 0x1b, 0xb, 0x36, 0xc, 0x60, 0xb, 0x9, 0x5]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x6}, {0x7, 0x6}, {0x1, 0x9}, {0x3, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x7}, {0x5, 0x8}, {0x5, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0x3}, {0x7, 0x9}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x6, 0x5}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x4, 0x5}, {0x7}, {0x0, 0x1}, {0x4}, {0x0, 0x7}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x36, 0x12, 0x18, 0x4, 0x3, 0x11072d231f07dd7d]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x1}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x7, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x31c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x5, 0x3, 0x1, 0xfffa, 0x9, 0x4666]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x6}, {0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x2}, {0x2}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x5, 0x2}, {0x7, 0x7}, {0x7, 0x7}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {}, {0x7, 0xa}, {0x6, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x6}, {0x3, 0x6}, {0x2, 0x3}, {0x4, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc444, 0x8, 0xfc00, 0xef, 0x800, 0x7, 0xaf, 0x100]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x36]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x2}, {0x7, 0x1}, {0x3, 0x2}, {0x6, 0x4}, {0x5, 0x7}, {0x1, 0x9}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x3}, {0x2}, {0x0, 0x9}, {0x2}, {0x5, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x8}, {0x5, 0x5}, {0x6, 0xa}, {}, {0x2, 0xa}, {0x5, 0xa}, {0x7, 0x9}, {0x5, 0xa}, {0x6, 0x6}, {0x4, 0xa}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x18, 0xc, 0x1b, 0x4, 0x5, 0x1, 0x6c, 0x6, 0x24, 0xb, 0x16, 0xc, 0x12, 0x5, 0xc, 0x3, 0xf28b066bf7848a61]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x5, 0x24, 0x3, 0x30, 0xc, 0x3, 0x60, 0x6, 0x0, 0x6c, 0x36, 0x1, 0x34, 0x9, 0x5, 0x60, 0xb, 0x9, 0x3, 0x12, 0x2, 0x12, 0x30, 0xc, 0x64, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x1, 0x36, 0x46]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9e7b, 0xfff, 0x2, 0x1ff, 0x1, 0x8, 0xe27, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffa, 0xfff, 0x2, 0x4, 0x2, 0x8, 0x80]}}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x6, 0x1, 0x3, 0x1, 0x2, 0x4, 0x4, 0x12]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x6}, {0x2, 0x4}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x5}, {0x6, 0x4}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x2}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0x4}, {0x3}, {0x2, 0x5}, {0x4}, {0x6, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x2, 0x8}, {0x5, 0x8}, {0x5, 0x4}, {0x0, 0x1}, {0x2}, {0x6, 0x7}, {0x0, 0x5}, {0x6}, {0x6, 0x6}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x6}, {0x6, 0x6}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x5, 0x4}, {0x4, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x16, 0xf, 0x2, 0x2, 0xc, 0x12, 0x60, 0xb, 0x4, 0x48, 0x1, 0x16, 0x60, 0x9, 0xb, 0x14, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0xff, 0x1ff, 0x8c1, 0x4, 0x8001, 0x2]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x0, 0x12, 0xb, 0xb, 0x36, 0x3, 0x1, 0x12, 0x2, 0x2, 0x0, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf000, 0x7fff, 0x25ea, 0xfffe, 0x0, 0x80, 0x40]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x12, 0x1, 0x1b, 0x1]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0x9}, {0x0, 0x3}, {0x6, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x5, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x6, 0x7}, {0x3, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0xa}, {0x7, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x1b, 0x6e, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x2}, {0x0, 0x8}, {0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x7}, {0x5}, {0x4, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x1, 0x1f, 0x6, 0x4, 0x1, 0xff, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x36, 0x0, 0x77, 0x48, 0x2, 0x36, 0x1e, 0xb, 0x36, 0x3, 0x24, 0x4, 0x4, 0x30, 0x4, 0x9, 0x1b, 0x60, 0x16, 0x24, 0x18, 0xb, 0x16, 0x5, 0x5, 0x6c, 0xc, 0x36, 0x60, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x200, 0x1, 0x20, 0x2, 0x5, 0x8, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x9}, {0x4}, {0x2}, {0x7, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x24, 0x18, 0x57, 0x0, 0xb, 0x1, 0x6, 0x12, 0x6c, 0x2, 0x9, 0x60, 0x24, 0x16, 0x9, 0x5, 0xb, 0x2, 0x0, 0x4, 0x16, 0x6c, 0xc, 0x6c, 0x6, 0x2, 0x4, 0x48, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1000, 0x4, 0x7, 0x1, 0x8, 0x265c]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x7}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x4}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x9}, {0x6, 0x4}, {0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x6, 0x5}, {0x5}, {0x6, 0x4}, {0x2, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x2}, {0x3}, {0x3, 0x3}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x3, 0x7}, {0x5, 0x3}, {0x4, 0x5}, {0x5, 0x5}, {0x7}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {0x7}, {0x0, 0x9}, {0x5, 0x5}, {0x6, 0x3}, {0x4, 0x5}, {0x3, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x2, 0x8}, {0x5, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x218, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x36, 0x1b, 0x18, 0x4, 0x36, 0x1b, 0xc, 0x4, 0x48, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x81, 0x4, 0x3d2, 0xcb, 0x1, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x4}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x8}, {0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0x17}, {0x6, 0xa}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x1}, {0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x8}, {0x3, 0x2}, {0x4, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc1, 0x4e, 0xa000, 0x4, 0x0, 0x8000, 0x4, 0xb95]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x5, 0x9}, {0x3, 0x2}, {0x7, 0x5}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x9}, {0x5}, {0x0, 0x5}, {0x1, 0xa}, {}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0xa}, {0x2}, {0x2, 0x8}, {0x1, 0x3}, {0x7, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x7}, {}, {0x0, 0x3}, {}, {0x4, 0x8}, {0x4}, {0x6, 0x8}, {0x4, 0x3}, {0x7, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x8}]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x48, 0x16, 0x3, 0x60, 0xc, 0x6c, 0x36, 0xb, 0x18, 0x3, 0x30, 0x36, 0x9, 0x2, 0x36, 0x18, 0x36, 0x42, 0x2, 0x9, 0x1b, 0x1b, 0x6c, 0x24, 0x16, 0x16, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x5, 0x18, 0x6c, 0x18, 0x36, 0x24, 0x1b, 0x3, 0x5, 0x24, 0x36, 0x6, 0x1b, 0x3, 0xc, 0x0, 0xac043c33fb5cc458]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x7fff, 0x7ff, 0x8, 0x4, 0xfffa]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x24, 0x5, 0x30, 0x12, 0x1, 0x2, 0x60, 0x6, 0x6c, 0x62, 0x6c, 0x1b, 0x24, 0x18, 0x9, 0x1, 0x16, 0x52, 0xc, 0x1b, 0x4, 0x48, 0x6, 0x2, 0x12, 0x18, 0x24, 0x16, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x3, 0x6}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0x1}, {0x5, 0x8}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x3}, {0x3, 0x5}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0x8}, {0x6, 0x2}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x9}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x3, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x2, 0x4}, {0x1, 0x6}, {}, {0x1, 0x3}, {0x6, 0x3}, {0x4, 0x9}, {0x1, 0x1}, {0x1}, {0x7, 0x2}, {0x1}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4}, {0x2, 0x7}, {0x2, 0xa}, {0x0, 0x3}, {}, {0x6, 0x7}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x3}, {0x7, 0x1}, {0x5, 0x7}, {0x6, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x9}, {0x7}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x3, 0x9}, {0x1, 0x8}, {0x4, 0x7}, {0x6}, {0x1, 0x5}, {0x2}, {0x6, 0x2}, {0x6}, {0x4, 0x7}, {0x0, 0x2}, {0x3, 0x1}, {0x7, 0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x7}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x5, 0x2}, {0x3, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x2, 0x36, 0x12, 0x3, 0x4, 0x5, 0x4, 0x6, 0x6c, 0xb, 0x4, 0x6, 0x3, 0x3, 0x30, 0x1b, 0x60, 0xb, 0x24, 0x1b, 0xe, 0x1, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x499907a6}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x66}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4004}, 0x4000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:30 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x32, 0x22, 0x84, 0x40, 0x424, 0x9d00, 0xfc2a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0x77, 0x69}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000840)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0xe, 0x95, {0x95, 0x1, "050042575c9425d1b957602e22b7161c16ef1361011193cec67e557253a1f1d72251812216cf705f6b2bb5e2814371dec13ea02e600551e74445efcb31dcd9ee3209e6563f16cd5ce7cc059c93245cd98981c6f195918bb6301b73ef9d8ae1328e9631f28483ae04f8f7fd06b83103875359488b1a815fe07a130350b0e6c2de0c18c82e3eb04d56a15866804b44a8eccc6ab3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "30f5a5fa"}, @global=@item_4={0x3, 0x1, 0xe, "32ea9061"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xba4}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0xc, 0xc6, "a9db32c2c4efb92ce82594218f2fa32ae521a68c02a2cf77169b07fc0268f2f1793b180b168fba3574d8994d36be4dc7a24921f51f683e122ee503d8221e3b6b9f1ebc7c831cc9b4aa5c6dfe4f245d0365f76e1abbe27c607d8c8006fa47faad4c4ed2e261d88ca88200664b5fac81739b0844af4da1c5ad95cc36d0c206da7ea501ea4c0b631a9f56847d88f8947fe4e074a2948e2d8ac294f54eb57bc8469f5cd55d3e8a2b3d9ec35184df4120e01a909bf72ee827e5a669880dd5830e33d48adc6b857737"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x1, 0x82, "f43d310f6849269cf7dbf0889b6e6a1546e04b0561f95e45d11d5c69c8a92e98252efe1000bec096b0637efd83e84b3f6658ea8107d5830447e3dba5b74a6bb6a4bef7e4a81a07926d1d60cf7c969e4c3148ce4d46d9e10ae5efab43e5dd56fde0851c5e0770d186260bc2f130c4a72568a699abe8348574195d068a2a2239551a77"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x7}})
syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f00000007c0)={0x20, 0x1, 0xf6, {0xf6, 0x11, "bf5bcb6490d90e96deca9f88842ff0f8a2dc242db59cc16d53eee864c034c762b713724f6c2bf0f4faa09dc00d366a8eb2362dbd3423f40368513c29ede5b623c0540872a8ac98ff1a988bb42aa6c427674db806cdbda3b1a496f971b9aeabe3d9ed2212163dc94c91c72aa1affb2ba16e5d4d762e0f0e89b6af4f009e379ea7ae7195fb03d8e405b5c64436a5a0b0f62b3dbf77f57b411a76add0fc34051a20ae547c9a270bddf0e27d932853708be04a6759e8a0c0d8cb5379c4716b54d8f15eeab9734aa5572c544ae6adc8ea8478b7a3565b9ea1d07f995e98a562c339394dee12f381039d86bbc2b9dd6f78e71a03cd8f74"}}, &(0x7f00000009c0)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "360f110f5249535fd10d9a9c4da8992ccb4a6ae0a72bc4b4dec30a76bebf126f00e8daf4244dad7526f8ede25ff92f6ba3124567252c357c73f6efafe9b870faf5e8986e5a843c70140fba65b7235a4fc8fdbe9c89eefbd30df5ce203e79cecfdd9f6632d0a8ae7472b0d3a62441213a9c2b78559a224e77671aacd4aa3317020c9070400cd189e0f9888a14f2619269f8d02f1a2ed395d697987ba16d61f1da39d5780b2f7d1c7ca3754b28229c2910ef6f80a15fad04bb6c1071d8581b463a09198b0444f9274fb47da0c8ebc53ac4"}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000600)={0x20, 0x10, 0x63, "b558ea14e0971047e7086102e3bcb48822d8551d63df883e68f084b9a4b6b178e745a0c25426fbd04764b1a21ac1bc9bdae91b4440f401bb962e30b6ceed1fb8acaf0afe517076a3985c885b042bb0106aa746f4740238faaf77d0ae7b1365d4f92cb9"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x81, 0x3, "1a14c0"}, &(0x7f00000008c0)={0x20, 0x82, 0x2, "bb50"}, &(0x7f0000000900)={0x20, 0x83, 0x2, "96b8"}, &(0x7f0000000940)={0x20, 0x84, 0x3, "a03f47"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "86a72e"}})
syz_usb_control_io$hid(r0, 0x0, 0x0)

11:45:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000008002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1014.871326][T11049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1014.899047][T11049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1014.928445][T11050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1014.953702][T11050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:30 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1600)

11:45:30 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x6c000000)

11:45:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000009002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000e002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1015.266106][T10289] usb 6-1: new high-speed USB device number 25 using dummy_hcd
11:45:31 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1015.341624][T11050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1015.364934][T11049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1015.383124][T10290] wlan1: authenticate with 08:02:11:00:00:00
11:45:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000f002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1015.404531][T10290] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:45:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000811cbe592b8b61f9fbdf14efaa816acbaf357bd4376a152d0abeef70deadbb5e408261a82f99afcabda99a0891b50848a73b7e04f13bc4e5e862c6fa99380a7fa41044df64b8dff7029fb3027388e88d07e7a24cd04f9c1bcec82274dba0592c3b265b51954123d80730ca"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:31 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1700)

11:45:31 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x74000000)

[ 1015.525993][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:45:31 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1015.623929][T11084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1015.636697][T10289] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=fc.2a
[ 1015.652220][T10289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.660569][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1015.681796][T11084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1015.683810][T10289] usb 6-1: config 0 descriptor??
[ 1015.700146][ T1159] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 1015.722449][ T1159] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1016.049175][T11088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1018.795668][T10289] smscufx: Failed to write register index 0x0000000c with value 0x0fff2222
[ 1018.804304][T10289] smscufx: error writing 0x000C
[ 1018.804321][T10289] smscufx: error -71 initialising DDR2 controller
[ 1018.823926][T10289] smscufx: probe of 6-1:0.0 failed with error -71
[ 1018.845017][T10289] usb 6-1: USB disconnect, device number 25
[ 1019.565458][ T7065] usb 6-1: new high-speed USB device number 26 using dummy_hcd
11:45:35 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x6, 0x0, 0x1})
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
splice(r1, 0x0, r2, 0x0, 0x1f, 0x0)
ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000000c0)={0x0, "305b3f1cfcb7f32c9857e89ad5eea1c41d7fbe32543be29f37201f3c49192b22", 0x40, 0x1, 0x2, 0x10, 0x1})
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x401, 0x4, 0x3ff, 0x100, 0x5, 0x3, 0x2})
openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)

11:45:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000003f002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:35 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x7a000000)

11:45:35 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:35 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1800)

11:45:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_b, @from_mac=@device_b}, 0x0, @random=0x3, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1f, 0x6798d2bf96934b28}}}, 0x3e)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[ 1019.935610][ T7065] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=fc.2a
[ 1019.944946][ T7065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.967030][ T7065] usb 6-1: config 0 descriptor??
[ 1020.020803][ T7065] usb 6-1: can't set config #0, error -71
[ 1020.053037][ T7065] usb 6-1: USB disconnect, device number 26
[ 1020.078243][T11119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1020.126131][T11119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000060002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:36 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1020.168658][T11113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:36 executing program 5:
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r2 = fcntl$dupfd(r0, 0x40a, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdd4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x9, @raw_data="485c8bec36d930750e3303fc5f85c9b9dcc4a2a30bb6f47ef9d74cc1e5ed817b90fca39610d40566ffdba832c6708ecd62adcf624c724e455d9bd1e52eddaec05b711e1c010b7609b9347010563b6c852d77bfe7c09430aa3808e746df30cc9a19e9230c706ff539c699fbe1143d07b18132f2208cb320981999bb30ba9b63c239f3fc1459a912cb37c2685dd0d68625919eabb4656e706a7a0fc8b8b41d631a92ba1320c49b46b35cbaa53da377ba5f6d5965d0d30170865aff4e29d1a9ab6569c86855d6edf8e9"})
clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x80000003c43, 0x802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x3, 0x0, 0x8, 0x277, 0x0, 0x0, 0x0, 0x20, 0x0, 0x100000}, 0x0, 0x0, r2, 0x8)
unshare(0x40000000)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000))
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x5)
unshare(0x1c068a00)
readv(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
unshare(0x34030000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x404000, 0xa0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8055}, {0xffffffffffffffff, 0x102}], 0x2, 0x0, 0x0, 0x0)

11:45:36 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000ffffff9e002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1020.308113][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1020.351308][T11136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:36 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1900)

11:45:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000dd2002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:36 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:36 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x9effffff)

[ 1020.529255][T11119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006413010000060202020202020107008b960c121800"], 0x35)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="c99946"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000fffffff0002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:36 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1020.876446][T11162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1020.906530][T31646] wlan1: authenticate with 08:02:11:00:00:00
[ 1020.921605][T31646] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:45:36 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1a00)

[ 1021.016490][T11166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1021.042354][T11166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:36 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xc0000000)

[ 1021.094138][T11175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1021.114697][ T2577] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 1021.147980][T11161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1021.162502][T11180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1021.180703][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1021.216488][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1021.255840][T11180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1021.357198][ T1159] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1021.583146][T11162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1021.654235][T11175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1021.733569][T11166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1021.748023][T11166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:54 executing program 5:
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r2 = fcntl$dupfd(r0, 0x40a, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdd4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x9, @raw_data="485c8bec36d930750e3303fc5f85c9b9dcc4a2a30bb6f47ef9d74cc1e5ed817b90fca39610d40566ffdba832c6708ecd62adcf624c724e455d9bd1e52eddaec05b711e1c010b7609b9347010563b6c852d77bfe7c09430aa3808e746df30cc9a19e9230c706ff539c699fbe1143d07b18132f2208cb320981999bb30ba9b63c239f3fc1459a912cb37c2685dd0d68625919eabb4656e706a7a0fc8b8b41d631a92ba1320c49b46b35cbaa53da377ba5f6d5965d0d30170865aff4e29d1a9ab6569c86855d6edf8e9"})
clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x80000003c43, 0x802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x3, 0x0, 0x8, 0x277, 0x0, 0x0, 0x0, 0x20, 0x0, 0x100000}, 0x0, 0x0, r2, 0x8)
unshare(0x40000000)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000))
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x5)
unshare(0x1c068a00)
readv(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
unshare(0x34030000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x404000, 0xa0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8055}, {0xffffffffffffffff, 0x102}], 0x2, 0x0, 0x0, 0x0)

11:45:54 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000007fffffff002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:54 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1b00)

11:45:54 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xf0ffffff)

11:45:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[ 1038.529162][T11246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1038.538502][T11246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1038.565260][T11247] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1038.575469][T11247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1038.599766][T11246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:54 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1038.636077][ T7065] wlan1: authenticate with 08:02:11:00:00:00
[ 1038.647661][T11246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.660392][ T7065] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:45:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000ffffffff002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1038.689832][ T2577] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 1038.714674][T11242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.717417][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:45:54 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f0ffffffffffff002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:54 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1c00)

11:45:54 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xfcfdffff)

[ 1038.865295][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1038.982608][ T1159] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1039.075092][T11257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1039.113524][ T1052] wlan1: authenticate with 08:02:11:00:00:00
[ 1039.122881][ T1052] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1039.248331][ T1159] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:45:55 executing program 5:
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r2 = fcntl$dupfd(r0, 0x40a, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdd4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x9, @raw_data="485c8bec36d930750e3303fc5f85c9b9dcc4a2a30bb6f47ef9d74cc1e5ed817b90fca39610d40566ffdba832c6708ecd62adcf624c724e455d9bd1e52eddaec05b711e1c010b7609b9347010563b6c852d77bfe7c09430aa3808e746df30cc9a19e9230c706ff539c699fbe1143d07b18132f2208cb320981999bb30ba9b63c239f3fc1459a912cb37c2685dd0d68625919eabb4656e706a7a0fc8b8b41d631a92ba1320c49b46b35cbaa53da377ba5f6d5965d0d30170865aff4e29d1a9ab6569c86855d6edf8e9"})
clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x80000003c43, 0x802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x3, 0x0, 0x8, 0x277, 0x0, 0x0, 0x0, 0x20, 0x0, 0x100000}, 0x0, 0x0, r2, 0x8)
unshare(0x40000000)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000))
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x5)
unshare(0x1c068a00)
readv(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
unshare(0x34030000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x404000, 0xa0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8055}, {0xffffffffffffffff, 0x102}], 0x2, 0x0, 0x0, 0x0)

11:45:55 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1039.373420][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
11:45:55 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1d00)

11:45:55 executing program 2:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x410100, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x209, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd0}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040881}, 0x4050045)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="8765cb970b39fd3d56ea35596d7c69c218d213329262", @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:55 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xfcffffff)

11:45:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1039.502546][ T1489] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1039.510587][T11308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:55 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1039.575479][T11312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1039.595880][T11312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
11:45:55 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:55 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1e00)

[ 1039.874592][T11313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:55 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xfeffffff)

[ 1039.952948][T11302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a13773c879052854a703d6589f4198b1b226544249db51c60722f12bd49b744e70ebf77f504814c9c2f49d60e7666ebf287cfcc8b1f919119ad084639c9ac178e3d75c58d1a7c06fcc0b0f2681ede23feed5e69b991bccb8507efad09e194efd92a044c6a4c9a58e283360c23d37430c032e859ccbf27f58365f4a3047a1c4a54b1e141700"/147, @ANYRES32=0x0, @ANYBLOB="01f200000000000008001b0000000000"], 0x28}, 0x1, 0xff00}, 0x0)
dup2(r3, r0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x64, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc4}, 0x4000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="ce02000008021100000108027abeedbee3e69781e0ffff0508000000000093a6e3976c369ccf3cbbe371cfeb8cec81484a534532224bd9d3f5bddf74667a0036777d0ee25d8d214c9fa5f2e0f689a50473a3d59b9672ca74c6a6f29219e677e28694f5f61b3c7d5c825787a6e746a54c028c4c1ceecf7419978e92ea1a63a3"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050005000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:56 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x1f00)

11:45:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000006413010000060202020202020107008b960c121800"], 0x35)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='V'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="c99946"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:56 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xff0f0000)

11:45:56 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1040.638399][T11366] wlan1: authenticate with 08:02:11:00:00:00
[ 1040.652687][T11368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1040.676443][T11366] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:45:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050006000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:56 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1040.701549][T11368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1040.705096][T11370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1040.712752][T10290] Bluetooth: hci3: command 0x0406 tx timeout
[ 1040.732170][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1040.757664][T11366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1040.773179][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1040.798454][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1040.834529][T11368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1040.851862][T11373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1040.863098][ T2577] wlan1: authentication with 08:02:11:00:00:00 timed out
11:45:56 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x2000)

11:45:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050007000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:56 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:56 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xfffff000)

[ 1041.135093][T11366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1041.146182][T11370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1041.172496][ T1052] wlan1: authenticate with 08:02:11:00:00:00
11:45:57 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d40), 0x446081, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001d80)={0x0, 0x4, 0x8000000000000000, 0x7ff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x16b0, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x12f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "00eefb41b52cb33b352dac64f7192c837215c15a8020b4af45f8fab328be6f661a30f4ac604cc5b9d84f94fd39994979426283a859f92b9f3e20176a324b44a1d1ef06035ba19d51a8fe99292d47d9231a5ab20701e993d5e1cfacee3d31f35907e4385dd1fb38dd7ab59c214fb5f73a2ca4e5ad4ffbe44818cb276af987c00b47cba93a038b5a9744b7542f8371db9adddbb44d9d93f124b1d8ac457755b499d07bffec64676a3e392cfdde031c86c4883c1d630433fce3ee3d527ff4b8ded8f498aedcc31303c8c338dfbd3fa2f7c63a65cfc422101d97f709e76f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf9, 0x4, "9541ee7855384819ef9787fc2174bcebbe6315ad58e07d9ed4e2d9ff2974d04c6d5f814eb69b6d055496fe18ed10472bb759472d068ff395ee565a0c324609f18ed34b7a2fe06092eecc76fbd137bd382998a9c6fc8de6da29c8f26881762767ef19317bcc1cc8056d89c87b3e78f9a97aa55a99fa53e9499b489446f0be7a717beb78a68eb0ed29a5fe865b649b7da31e7f41b078e958fc69db28ba522a6ae5e3bda7c230e60a3b8e6d6ddf4fa96faff5dfc3b508aacd7a4ee7331767d9764de4c714554e7d45626ba1e0e30d893f6241702fb5c8bbabfebf0046e27ead7d7f4d9f323db435cdd0fd4c819884325ff07a33f0f0b9"}, @ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "5f452576d31861a668fd9e94b5c0882d7ef05614943735885a85dbf1192540b07e5053493b65c6cd525c4559cf75b119336b90e6eb963c225bddbfd1625b1e360c961859195468bea253973131faa1fd7420f535ed1fc0e2655c930df87de710204b288df317ce7f607dfceb7827ca92f88c3f3ae5b0cb0852e3a91cb701af3ff42e7aae2756de9d73c57ec6fe0bf6c8b5fba003736b2f133615f5ca1e1e525ed3211d74cc381cb9dafaf22cba7f123521e6f268"}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "d2b7fa4191c8"}, @ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "1e0d0a8e2bc4272d55e91cab3cbb45f9d2044648a7842a9bc973dc1bea03f5fe63c0e5ad02e850e46d5042c6c6c549a6b899b9febf7c997937500df31c761644aab761cc537de166"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_WOL_SOPASS={0x85, 0x3, "bf54047ccd1b8f4d2daed5b77287a78dd310dde6a2d6e4cf2d43588b0861e0f0e705e4a117ae679c518fb956121b3bf80c265a6cfeb072131029dc0bccac3a91c609b2f93749bb87d847362f8637e395e5bc89c07ec41b7754a2333564b2faa87ea8b96cd810d2452a63d5ac38f250c3db66b51962cbe7079ea4843fc1479c4133"}, @ETHTOOL_A_WOL_MODES={0x2f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x93, 0x5, "67062b78a2e77e42703600267040f19955472ec98d1e654e32505774989aab39e76b54de1b1a5169dd4c48295b215b8842711431daa14fd85cbeddb9b46fc546be71791d49cbc4a3eea36460d5e78faf838168c5e9b907470f852b7244a1cd1c599d51a5bd0fc9544ded1feb1984740dafa5447facbdc5016f02a062cfeaf8f409871348b1ee5aa53c032edc9b0ca2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xebc4}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "634d9ffdcdde718749ba"}, @ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "a2f2c4023208ecc53cc84b02c6564a8aab35ba8a63d5ebf9b9e8d79643ba2843e9bda1a936ce0bd51cfe7a4a53e4ce76fefcb3c31fd8365300fb2d804e032b3771a3d70d39fb58b3733bad923022e891b841453d85bb2ff0f18c979ab1ef415d0e62dfb1e2b65e70c26c71e0c8f4c3f2f864718a31b4496f357ba00b475b0f3ee81b48221a637d9b3a5312e11763f3ce08f8167a135348e023522ad63022bb9a17e9be7c07b312a2b79c2222c250674a10271393a2138b2eb94ad47aece549e6d9358703"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "f20c22f48ab2c078efba19c4da68934474a77f72747ac95ab6cce98ebb6028bc9bb10f88a6189c1eb092ae1a35abfac76126afe92ab1879deced00f1cbc0c8c76df7b6697c5ed174aced496b54032df6c4f11a37993c40249ebc0b2329ef76860367e37068fefa5c4548370adfe8bbbfd45f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "17a9951c9f92e48d84bf13054521b22071eb20a5414cc59d85ed80ce4cc5e2e929d652228a36778d9499c247c772e73041308d581d97f7275d176b32af5c02db0d8b735172bee4ea210d98e5f5c933b49d1ffae8b608770dca3fb3bb462109d93d4c533ac089c1c68f8ba6fa492449a2de0c62135ca6ae78dab431f9f146db852de26e2526ccb43bb851a15589f56add62cd1368ab37fcc6f152910af22098454df8e46dc530e6f3e6a482918d7d5ec488928340bf0c278062076999f629bad66d0c02f4cb43c7032c5afbb7553fb9e0b4e0f26cc31922a351206ab34bdb56a38fc5afe90e41204f89d68d16b15f2d1e522210091f"}]}, @ETHTOOL_A_WOL_SOPASS={0x13, 0x3, "1334a2651582db8b8c73a1042b7225"}, @ETHTOOL_A_WOL_SOPASS={0x11, 0x3, "07746335d75286f11bf10b5e7b"}, @ETHTOOL_A_WOL_MODES={0x4}]}, 0x16b0}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[ 1041.187443][ T1052] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1041.339603][T11393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1041.343333][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1041.361480][ T4033] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1041.382457][ T4033] wlan1: authentication with 08:02:11:00:00:00 timed out
11:45:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050008000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a13773c879052854a703d6589f4198b1b226544249db51c60722f12bd49b744e70ebf77f504814c9c2f49d60e7666ebf287cfcc8b1f919119ad084639c9ac178e3d75c58d1a7c06fcc0b0f2681ede23feed5e69b991bccb8507efad09e194efd92a044c6a4c9a58e283360c23d37430c032e859ccbf27f58365f4a3047a1c4a54b1e141700"/147, @ANYRES32=0x0, @ANYBLOB="01f200000000000008001b0000000000"], 0x28}, 0x1, 0xff00}, 0x0)
dup2(r3, r0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x64, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc4}, 0x4000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="ce02000008021100000108027abeedbee3e69781e0ffff0508000000000093a6e3976c369ccf3cbbe371cfeb8cec81484a534532224bd9d3f5bddf74667a0036777d0ee25d8d214c9fa5f2e0f689a50473a3d59b9672ca74c6a6f29219e677e28694f5f61b3c7d5c825787a6e746a54c028c4c1ceecf7419978e92ea1a63a3"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:57 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1041.407367][T11393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:57 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x2100)

[ 1041.556889][T11402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:57 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xfffffdfc)

11:45:57 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050009000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1041.607636][T11398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1041.773321][T11393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1041.802700][ T7065] wlan1: authenticate with 08:02:11:00:00:00
11:45:57 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000e000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1041.817420][ T7065] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
11:45:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xd4, 0x14, 0x100, 0x70bd29, 0x25dfdbfb, {0x1a}, [@generic="02e7f776d99a920b3a2e8eb36f9a183644215e880a7b0656bf1cd21188eab9033298b03782c9c2c610ec9fce09db95c914ffad8d1229608e041d3de656ee43faa17784d234aa8340d05d70f53854405c8dea112c0c1c98141b747fa9bc05ce28a38a754ac87d7a7675da703b584ebb0aa6059a4d949c516fd43e2285f974a89daa79086136b446d5338cb5f1caae5a83d5906896e446a6d4d51234cd213c6cc3fb8879f2ab2cbe688935cf40eb29e6a217f1edce76fb2955979643453b8ae299"]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7c, 0x11}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008911164b5d083da6b05d3242fbe000001080211000000080211000000000000000000000000006400010000060202020202020907008b960c121800"], 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

[ 1041.952257][  T692] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
11:45:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000f000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:57 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d40), 0x446081, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001d80)={0x0, 0x4, 0x8000000000000000, 0x7ff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x16b0, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x12f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "00eefb41b52cb33b352dac64f7192c837215c15a8020b4af45f8fab328be6f661a30f4ac604cc5b9d84f94fd39994979426283a859f92b9f3e20176a324b44a1d1ef06035ba19d51a8fe99292d47d9231a5ab20701e993d5e1cfacee3d31f35907e4385dd1fb38dd7ab59c214fb5f73a2ca4e5ad4ffbe44818cb276af987c00b47cba93a038b5a9744b7542f8371db9adddbb44d9d93f124b1d8ac457755b499d07bffec64676a3e392cfdde031c86c4883c1d630433fce3ee3d527ff4b8ded8f498aedcc31303c8c338dfbd3fa2f7c63a65cfc422101d97f709e76f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf9, 0x4, "9541ee7855384819ef9787fc2174bcebbe6315ad58e07d9ed4e2d9ff2974d04c6d5f814eb69b6d055496fe18ed10472bb759472d068ff395ee565a0c324609f18ed34b7a2fe06092eecc76fbd137bd382998a9c6fc8de6da29c8f26881762767ef19317bcc1cc8056d89c87b3e78f9a97aa55a99fa53e9499b489446f0be7a717beb78a68eb0ed29a5fe865b649b7da31e7f41b078e958fc69db28ba522a6ae5e3bda7c230e60a3b8e6d6ddf4fa96faff5dfc3b508aacd7a4ee7331767d9764de4c714554e7d45626ba1e0e30d893f6241702fb5c8bbabfebf0046e27ead7d7f4d9f323db435cdd0fd4c819884325ff07a33f0f0b9"}, @ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "5f452576d31861a668fd9e94b5c0882d7ef05614943735885a85dbf1192540b07e5053493b65c6cd525c4559cf75b119336b90e6eb963c225bddbfd1625b1e360c961859195468bea253973131faa1fd7420f535ed1fc0e2655c930df87de710204b288df317ce7f607dfceb7827ca92f88c3f3ae5b0cb0852e3a91cb701af3ff42e7aae2756de9d73c57ec6fe0bf6c8b5fba003736b2f133615f5ca1e1e525ed3211d74cc381cb9dafaf22cba7f123521e6f268"}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "d2b7fa4191c8"}, @ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "1e0d0a8e2bc4272d55e91cab3cbb45f9d2044648a7842a9bc973dc1bea03f5fe63c0e5ad02e850e46d5042c6c6c549a6b899b9febf7c997937500df31c761644aab761cc537de166"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "4e7f5ed8fb1d966e0fb4aded95e92e9040921639a5e04a632e378844e47a3342878de4bb86313539f27e52752d3634531eca547bc552a4f937321f41462a2e106301c34e7de2feba4cf036f84bf373eacb2f0d38389ea5acfc8f04e3319407134c572c7cd841fb9abf5a00c9bc6d5d8ba744321abfed50ae714dffc82c0475a565809d0ca303b913b4556602fbfb04929246b6a943177587b9ea944e300ade559e65e1e3b568e1cc5683717bb6980d5a58a42dc9bd0fcfd72584090d0787774acc13a3b8075e77756070c29bdadb26ae3631727893f636d12a282124d778998e2274401438ce05ff522b0c27a36c31aba9074d7bcaa008fb0a06e7179fb763cb6cf6075fbf0b99cecbc99ad68921c6b8bb1694b4267863f9dab19490fa1f2890d2b0c1cb01608c49232f7d6ac291f8b28f26c02170bbfe05373e00ebf95f9524ce52ba443565585669bce67e866ba10129c5a72c4b1c76b37ad51db5e8a208072100b867be1390bed13d3f823485de427813257fd91d9acb0f717433354c534822e4678df87ebfb30a90830c5e455e8ff9cd3f405f3b34ea0d5653da23f131f2b153291c06d6246e04a0fab4995898d26d6ce44261b15359f320166a08f5d2f30b23ad80ad662c86d8d4c4fd3c81369ea0aab0167d85247581563977967adf99196544a98d88c154ef7d87f446f5ed66c63e2d1b0f2afbbf7f65602e0d95d4bca8f7f741829c58033c9ccef6944009d0148b0312edebcfc1fb21b3b782c6dd0cb18d1bdafdcefd8d94a42471ace5221e8f3670a7790449dc2d917fbf318957415948c07a1f3038977f6e8e0dde15d6ac6878091b1088e339bd28df2ecff142ef81879da24ae28b866727c2b39e1633489a373a5d470977bef5598123fd68c765d05dceacb00e578c4962e6a16a6aa0721276602cdf9c77f7e529d1ca378d55c290bd1cbd225df580da444e9fce97dbfc21be8b62bbab8321fd08842c49a06ce42a99e8bc845c4c13b4f4ead2d765817a373d3e6c6dfe159ed4d89cf102b2279b1f3db754193799d9cbe75935739b0c71e0d00f87c0030f7a3f84ccb8ff254a8bcba822e283f0f75143f1e017c61bf02c61d5c1b45051737d8846a9d67d0c8ad6e3b7430a7064603031bebd8d93a874143d2405aed033a027b6b6c8fce945744492cf4aa9757e039b0739b9222b62350149a7c38a1a282b439e67862ec541e142a270d7c927aa57af0358fe695096a9fd06153cc41aaddb6637fcb7bdd2c7a705f95b033bbed3529bed73c444b5f51a578c907f3f68af138ecb4a4de001008e6ec4cdba959137f3e1b3cca85836d88f7e8738ea68da99107055f8f93741d69efdfdd9264a764b69555e3d8bb9b227e3e5f74f18c1da1e275c842927201f2bada35f9ecb36ea2db11f2e58e5fb36614120695f7e168f4e21a72f1ec17d26a58dbec40aec165ee571131b3a39651097f7b7f7b0eb8394d74aea71595ce90d990ffb500e556e1b7dd84c524c44e657b3aa2a8194cec19095dae1876a36540772428d7a81cd9336918890a53eaa0ff1d6ac3b83bfeb59d4703e83006868c7b8ff1fddf841e84527732c67df6c5d1b6ecf12f5cea582c5b4f76c53d0b71080302da25b8b21f03a93173a700a5b6d64a3f5e5363b69027c4007af7f2c6d32f6ce0c3774a04c0b9e6fa04793fd59572cf6d8acf7e6cee9cb1e7471b00a93fa774979c8100625da344a651f789718ac974d741e383437376e53ed095faee06188217a8cb442c6fbc9cf32ab71be6aca928abf9ec019bfcbaad26224974900231d888c23d2de861ca17484cffceb7ebd8f1401a1ae7d506ca8c1e1076f1ba06683067c7c2151e06d6fe0e0eafede5b2c344e8e1446398e7ac36c301bac25ee3d46987e4fca6838e8e8f82a6ea5c9e09faaef14e4225e89098e96450cc71471f6aa343c6178e3a6a26e4acbc28174e17f2fe2a82c80b3baf639979bf1b4ae8942db27f9a5f6ad11b0f22a15279e118d44a329a441e07f90cfc06d333ff126d35757aa173a7706861378fb44a3b7b9e58f5d59030d811b63d725c79ae3e5fa83871d6dd71b4e67be9710767523750908fc4a0df376ce2643e9f5e126cb56744fd57f5ff47a18943873f642a588f7d27325167e3cd11845c1056378e3c176bb0b4bcc92192e628ed4555de2c644d863f15859f6170aab0ac8eef63a84f425f5e5b5ff65b3fe9f88a39be2f32b3666aca75918aaea6173716aa2488d073d6f27067b4b5ffc3273e504c565f11e504a040be974a8da9fb929e74e77361ad19dc48a5ec64f7cd3a82c4ba06773085828014ed707422bf45928ce29374694b633dbd0ca8dc9f2a47d8e092911b66fe74300f26f9a8fd224268a7bd2418704f6ae0847e14c156b32bb624c240552f6c3e52fd0e2492d5652bd37f1e0e8e939c7a32021ac485d78e006c204a9fe99f402c252579ef6ec80cde9f4ea834b07e2c8f42c19892c77b04e02f0167d7c0d1c96d5b2e2b37974442bb68197b4b4fef225b5650569f323b6b0726550607404bf77bfd0133741a43e10143077a073d254764e6b5e68a2d3be2711d0e5fc385c5afd8c3da17d037484ec33d6c011efd0fd8ae5470d307a92379ea3396d33727a3979fbdaf298060afdbd4b32b1af98c715b5994a28287200ccac7d3f4588c2fb0517bd1b811a72c7f02b50f999f361497b7774c868d1de83be4d4539963d09183193958f0704191bdd38dd0c09cc9542d11b0d313e390719de9c8d5f7363cb6bf6aabf8fa8f2d061f98d90456bdabb4b5fbed856267b16858fce3663da602ab3abbb3c85a0518ff08af893c0b83d409a8aa8b04c9533c6f091777afba5dcad602e80da8271bcb2d1b990ce93bfd6ebb04d0dbca90a395d91aebc313d9510b0f8a1a9de9bf562c2f73137ccd53d76280ee7a571425830a518c08d78d3c88816e9f6ca7f5667a876964a8d4d54badbde5f28b172dc1320dcf8ee9c806c4ab6549458f55d586c23aeb66450e3653ed1ac553caf340725bf2b1f38604b20870e915e0bed198aa3811e890b77b7462d3cc247f02a0ca3d1818025c68fb4f4957be68c7fe1231c22817cc8e531bfb0dcdecb1155a0ba9c0b5264164d501ee2d16ebeb4921c20181bb3e1e2b997c574adea9ae63d936f4aed6e414d34a2badce5d34ec3a387c0262e2dbd4179e8f7048d12a6be6adf960d4f2d1a819507879ceacaf4af81cda9a3bb2fc29814b802f6cde664b257dd892263bdd21e0474f31ab7c529e173323d8d8b5367b4e36cf3231d7df9e9c045c900473dc03ad737fad07f3c0f1c10aaf7c9e14e1c26e6a9826256148ff8b1eaf698e0942027e44c7e64d136e9faf5fe6355908c952123a51e1721feb546ba0e5a62c260476567d7b634c5b2d66ccdfb80483f6664692f4d91c2c0fbe0e6d5595877f34655ddb11c489d4266991d457c68ad20d4f50412fa667406844be4176528304c9c14b367896a2de44e59048a517aad34115d62d39983cf916935d36a2b6648408db3ae8e36d70bfc70e6a0fdfaaff16460363178859c53cf461dc93a185029f80cb07b8fbf228d42972ad852ff6e9d126949f7ba73139069800cc5cb8fffe8dcc349a034a117755a99525a5d176c3214341fcbab95b95ff5721089a04c896308a1d9f7831acfce834831a5a4fcca6a51d72e4a336bf8b30ebfd699c4c1f68cfca73fae9e60a4273f0474be798b6c68559265d9b8b2df3d3abce63608b1a76e8fee1d43dd55e2b428d1f756ef98a94fc58457789c33adf3aaedc1bd113e3ed878e57e24f7a821594bd6e4d7b054b0c0206adc9f6bff71027821c6c1ceb7597bcefdcce4a19266b12b5a19a4d974be9554fa5379044beea9fe91a495b4bf58a06c603096c31eba0ade23c841c183b609ca5f17be26467d0548bfb8d6cb099e8072e486fdc12d7931cfb6d29daa5e3472aa74d496ad4e6fff6c0da980780c9b79ef767f9748d955e5ff28349fe1eca71a9bbea50238fa15c55ff47f90eecc6259a15582536e66719f334336b4116072b790c6e353e07b1e5de02a079b843a091a976c59c352bb08e37d026f58676e64b1bcbe405367a057720ea4b6cc9b03aed02527b0694dabcd9603649e5a69463f32c1f6a201afd079003221bab79bb999f18d86bf2fb097032c2fb909d16809082027950b64ce7a0b786ddacf96c2a7ed90554091c0ebe9634239611bbbbf320ce908631ef089c0aa87afe0a0d3b233d780f59c60ba50ba7fb45cd4fd719134079706d1ca60e454e17a06bf099d9a1afba9501f3dc9db6ee3c06ce1dcfd5333b6be5567e998f727a180b51a9aea02d38f800fbf273c20187b544dc51134d1f3bad08a4dd95231cba8e64f34fb9fcb4835e7a74e6c34391005113645947c8b9ebdc6b9d786fad90aba40e5500c70cd61896ac441427212020960f40a02599bf2d81c83e0631336664b72638ac83be766564075055f74f47e15b10b61ff14e40735c20545f35cfe070bc20913ed3ea6f3a948d39bee261b7f9ffc4863c65fb46623eac9bbd0f39aa94a11ec0653ce925e9605c76644a9c572a24a7ce29949222f0f4323ba194a73ca279eff1f98246d66a09bd726a6fb466c74d258a737906b5c839d054c14fceefdae29a11d920fb0cf0c807c85f5c10805ae2c51ea96baf14bdb1b142cbfa8c94c705ce132a2abb5acaf84bb214c8b2a5ed9cddbcebf735fc068e47b63382b870fc17ae5f25bc5f329932730bbe39c71ebd587091776bd2281520047bf0d927ab6154dd0ee1c5f85291e2fab3fd54827533c89f7b8edb7cf02d434de99d8efc18201756e9e8b7b66376cc8920278abed8b4b4b9a972aaa288e80f1ff1a08986e0a4375a68bf1ede04661d617879861c370a63e053fc8ff9f19aa3a0eb7eecea13add7f2750ff4b9abe80bb57227f22aea38cc7145b5ebb3cf71052c308baab4a1ce5b1ef33af344cd0ff356ad42467f641612a039e7a016aac986292792756ccbf6ca6f4135fd34a044d1023c57bc594f129dee3abeefa19b8ef341588eac33c137d1c0721805861dfdb305ba5edaa922d8fa9bdfcee62ddc295b7e7da12d54bd5e589ae7ba271a736415d80db1e88e606c31d4fe263edf9fbc199f8fb1bc7f05365dc4613b410d71e2ba2208488e8015d76822fadec70933ce7749795d7cc70c9d3f2a491a2ef8a5f83e4f306d5f8083dd64f3b7fd25c6e2107f7156b55a97695729a7f9636f5f25d7628406c4e42a8741c7aba3a077c8b9d0d1bae9e82716c7db08c8e12b0966029836f7b502901d0aa9bd18a29a99b3e72da039cba36b689fa15ef52dc97452192388558237cae295fcef012ee47943c8292057a5d31236e01036a3ef1dd20f413f46cfd809f43d56bbbb50abb7213396eef16ccf4b8166ede0315e436798158afbdb79a5932b036de5ef9fea16aa2877122ffeb75f06075bacb8fc956215bc87e5e6ddd8ed55841c0a83d30e50c0dce2ad447aa95d80c86942f653ae1f213bc067b3e1feebc24cc9e80b7c6ddcda65bb3393fcedf2d513571b958b4d158a21c42c0a395e320022a4997aec1630501b0f343ff482c325c07c9b7bc419745c686024838b2f807c7944c1d7cb2f5545977455ebde84dfec8f9bdc2ec69d79a8da5aacdb95a83e6aac5a807a8447bca7f98355d62085340eb84d220097015a510d2aa3a6d0614662341d445b0877c86bfd3a28437a061bbebb96dd4747c04dc28db9d58a98d13bff593153f09a907f07c399f4e0323ec4e417db2eae3050a060dd1b92946394c1767b9fba6"}]}, @ETHTOOL_A_WOL_SOPASS={0x85, 0x3, "bf54047ccd1b8f4d2daed5b77287a78dd310dde6a2d6e4cf2d43588b0861e0f0e705e4a117ae679c518fb956121b3bf80c265a6cfeb072131029dc0bccac3a91c609b2f93749bb87d847362f8637e395e5bc89c07ec41b7754a2333564b2faa87ea8b96cd810d2452a63d5ac38f250c3db66b51962cbe7079ea4843fc1479c4133"}, @ETHTOOL_A_WOL_MODES={0x2f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x93, 0x5, "67062b78a2e77e42703600267040f19955472ec98d1e654e32505774989aab39e76b54de1b1a5169dd4c48295b215b8842711431daa14fd85cbeddb9b46fc546be71791d49cbc4a3eea36460d5e78faf838168c5e9b907470f852b7244a1cd1c599d51a5bd0fc9544ded1feb1984740dafa5447facbdc5016f02a062cfeaf8f409871348b1ee5aa53c032edc9b0ca2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xebc4}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "634d9ffdcdde718749ba"}, @ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "a2f2c4023208ecc53cc84b02c6564a8aab35ba8a63d5ebf9b9e8d79643ba2843e9bda1a936ce0bd51cfe7a4a53e4ce76fefcb3c31fd8365300fb2d804e032b3771a3d70d39fb58b3733bad923022e891b841453d85bb2ff0f18c979ab1ef415d0e62dfb1e2b65e70c26c71e0c8f4c3f2f864718a31b4496f357ba00b475b0f3ee81b48221a637d9b3a5312e11763f3ce08f8167a135348e023522ad63022bb9a17e9be7c07b312a2b79c2222c250674a10271393a2138b2eb94ad47aece549e6d9358703"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "f20c22f48ab2c078efba19c4da68934474a77f72747ac95ab6cce98ebb6028bc9bb10f88a6189c1eb092ae1a35abfac76126afe92ab1879deced00f1cbc0c8c76df7b6697c5ed174aced496b54032df6c4f11a37993c40249ebc0b2329ef76860367e37068fefa5c4548370adfe8bbbfd45f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "17a9951c9f92e48d84bf13054521b22071eb20a5414cc59d85ed80ce4cc5e2e929d652228a36778d9499c247c772e73041308d581d97f7275d176b32af5c02db0d8b735172bee4ea210d98e5f5c933b49d1ffae8b608770dca3fb3bb462109d93d4c533ac089c1c68f8ba6fa492449a2de0c62135ca6ae78dab431f9f146db852de26e2526ccb43bb851a15589f56add62cd1368ab37fcc6f152910af22098454df8e46dc530e6f3e6a482918d7d5ec488928340bf0c278062076999f629bad66d0c02f4cb43c7032c5afbb7553fb9e0b4e0f26cc31922a351206ab34bdb56a38fc5afe90e41204f89d68d16b15f2d1e522210091f"}]}, @ETHTOOL_A_WOL_SOPASS={0x13, 0x3, "1334a2651582db8b8c73a1042b7225"}, @ETHTOOL_A_WOL_SOPASS={0x11, 0x3, "07746335d75286f11bf10b5e7b"}, @ETHTOOL_A_WOL_MODES={0x4}]}, 0x16b0}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:57 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:57 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x2200)

[ 1042.072420][ T2577] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1042.080325][T11423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1042.143048][T11423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1042.182179][ T2577] wlan1: authentication with 08:02:11:00:00:00 timed out
11:45:58 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xffffff9e)

[ 1042.222826][T11433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1042.222939][T11432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:58 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050060000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f0000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:58 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1042.578442][T11433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1042.614923][T11423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:58 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x2300)

11:45:58 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000030000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = gettid()
ptrace$cont(0x7, r3, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x8}, 0x140, 0xfffffffffffffff8, 0x400000, 0x1, 0x40, 0x5, 0x2000, 0x0, 0xfffffff9, 0x0, 0x8000}, r3, 0xf, r4, 0x8)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x20, 0x35}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x2}, @device_a, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x4000000)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0xd3, 0x5, 0x4, 0x0, 0x80000000, 0x8010, 0xf, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffff8001}, 0x20, 0x1, 0xffffffff, 0x0, 0x3, 0xfffffffc, 0x100, 0x0, 0x9, 0x0, 0x4}, r3, 0x3, 0xffffffffffffffff, 0xc)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x0, "761f2d9475cfce3089c6e0cef79c770479b54ba565de8ba076dd3f491ef36e72eff7b7a9dddffe9f059384d8f325f5509001f3a6faf406f027cf2bb466de23765d76c48d72"}]}, 0x59)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="b000000000000000000e005663ce949afde5fa079939110000000000000000000000000000740e95"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a13773c879052854a703d6589f4198b1b226544249db51c60722f12bd49b744e70ebf77f504814c9c2f49d60e7666ebf287cfcc8b1f919119ad084639c9ac178e3d75c58d1a7c06fcc0b0f2681ede23feed5e69b991bccb8507efad09e194efd92a044c6a4c9a58e283360c23d37430c032e859ccbf27f58365f4a3047a1c4a54b1e141700"/147, @ANYRES32=0x0, @ANYBLOB="01f200000000000008001b0000000000"], 0x28}, 0x1, 0xff00}, 0x0)
dup2(r3, r0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x64, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc4}, 0x4000)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="ce02000008021100000108027abeedbee3e69781e0ffff0508000000000093a6e3976c369ccf3cbbe371cfeb8cec81484a534532224bd9d3f5bddf74667a0036777d0ee25d8d214c9fa5f2e0f689a50473a3d59b9672ca74c6a6f29219e677e28694f5f61b3c7d5c825787a6e746a54c028c4c1ceecf7419978e92ea1a63a3"], 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:58 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xfffffff0)

[ 1042.926559][T11461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1042.957955][T11461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1042.981691][T11467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1043.006915][T11467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1043.025757][T11464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:58 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1043.068542][T11464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1043.108005][T11463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000050000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

11:45:59 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x2400)

11:45:59 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xfffffffc)

11:45:59 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000060000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1043.407580][T11467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:59 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x104, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}], @NL80211_ATTR_IE={0xc4, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb8, 0x7}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @dsss={0x3, 0x1, 0xab}, @challenge={0x10, 0x1, 0xb4}, @tim={0x5, 0xb0, {0x9, 0xd, 0x7, "143ba4911cce34e94acaa1e89baf36772f0a55fa892c74c9735ae8b7a4457ac647ac80ab79b53b758dca74f762b803358a1a22a441265f9d9e44aed6ff1084507189ad8ed19c36fa246556b2f8e709b9048e3bfa9552fd60dc88e76b5826e469993b4e30a25426882ae19b4890e6e625b2782d05de369afb0a7d5567fb9c7c6cd5480820ae51b34e4738927307ffc4b7212d000c7f898b8623869b5d5879451ddffc1dbdd4fe50aec11b984a32"}}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x104}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)
syz_80211_inject_frame(0x0, 0x0, 0x0)

11:45:59 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000070000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1043.639393][T11492] wlan1: authenticate with 08:02:11:00:00:01
[ 1043.680397][T11492] ------------[ cut here ]------------
[ 1043.704852][T11496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:45:59 executing program 5:
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x4, 0xe37, 0x6, <r0=>0x0}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r0, 0x2, 0x20}, &(0x7f00000000c0)=0xc)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001a40)=ANY=[@ANYBLOB="1201000050cb5320450c10108e490102030109021b0001000000000904"], 0x0)

[ 1043.722927][T11492] WARNING: CPU: 1 PID: 11492 at net/mac80211/sta_info.c:545 sta_info_insert_rcu+0x283/0x2ce0
11:45:59 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0xfffffffe)

11:45:59 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x2500)

11:45:59 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/236, 0xec}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 1043.814541][T11492] Modules linked in:
[ 1043.831034][T11492] CPU: 1 PID: 11492 Comm: syz-executor.2 Not tainted 5.15.0-rc4-syzkaller #0
[ 1043.878019][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1043.914167][T11492] RIP: 0010:sta_info_insert_rcu+0x283/0x2ce0
11:45:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000090000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1043.927071][T11492] Code: f2 f8 44 89 e6 31 ff 83 e6 01 40 88 b5 38 ff ff ff e8 51 b7 f2 f8 0f b6 85 38 ff ff ff 84 c0 0f 84 fa 00 00 00 e8 fd b0 f2 f8 <0f> 0b 41 bc ea ff ff ff e8 f0 b0 f2 f8 4c 89 f6 4c 89 ff e8 b5 f9
[ 1044.024280][T11492] RSP: 0018:ffffc9000f11eb48 EFLAGS: 00010216
[ 1044.044874][T11492] RAX: 000000000000333b RBX: ffff888082718c80 RCX: ffffc90013fd1000
[ 1044.054634][T11492] RDX: 0000000000040000 RSI: ffffffff88834d83 RDI: 0000000000000003
11:45:59 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:45:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500d20d0000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000028"], 0x3c}}, 0x0)

[ 1044.078063][T11492] RBP: ffffc9000f11ec90 R08: 0000000000000000 R09: 0000000000000001
[ 1044.098502][T11492] R10: ffffffff88834d4c R11: 0000000000000000 R12: 0000000000110208
[ 1044.113703][T10290] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1044.151451][T11492] R13: ffff88803e190048 R14: ffff88803e190000 R15: ffff888081d50d60
[ 1044.174312][T11492] FS:  00007fa891822700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 1044.194716][T11492] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1044.214864][T11492] CR2: 00007f5c98479e20 CR3: 0000000019812000 CR4: 00000000003506e0
11:46:00 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:46:00 executing program 3:
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b={0xc}, 0x0, 0x2600)

[ 1044.262285][T11492] Call Trace:
[ 1044.280594][T11492]  ? memcpy+0x39/0x60
[ 1044.302140][T11492]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1044.338835][T11492]  ? mac80211_hwsim_bss_info_changed+0x512/0xf10
[ 1044.362161][T10290] usb 6-1: Using ep0 maxpacket: 32
[ 1044.371308][T11492]  ? sta_info_free+0x3b0/0x3b0
[ 1044.405715][T11492]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 1044.425305][T11492]  ? trace_drv_return_void+0x1c2/0x280
[ 1044.450971][T11492]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 1044.471521][T11492]  ? drv_bss_info_changed+0x2d3/0x5f0
[ 1044.482070][T10290] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1044.501340][T11492]  sta_info_insert+0x13/0xb0
[ 1044.532027][T11492]  ieee80211_prep_connection+0x1701/0x31c0
[ 1044.538159][T11492]  ? ieee80211_csa_connection_drop_work+0x20/0x20
[ 1044.570187][T11492]  ? record_print_text.cold+0x16/0x16
[ 1044.592036][T11492]  ? rcu_read_lock_sched_held+0x3a/0x70
[ 1044.597722][T11492]  ieee80211_mgd_auth.cold+0x26c/0x448
[ 1044.611905][T11492]  ? trace_cfg80211_return_bss+0x1c2/0x280
[ 1044.617825][T11492]  ? ieee80211_mlme_notify_scan_completed+0x360/0x360
[ 1044.652723][T11492]  cfg80211_mlme_auth+0x3bd/0x760
[ 1044.657876][T11492]  ? cfg80211_rx_mgmt_khz+0xb80/0xb80
[ 1044.671915][T10290] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1044.681297][T10290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.701820][T11492]  cfg80211_conn_do_work+0xc3f/0xf50
[ 1044.707176][T11492]  ? cfg80211_conn_scan+0xfe0/0xfe0
[ 1044.712528][T10290] usb 6-1: Product: syz
[ 1044.716953][T10290] usb 6-1: Manufacturer: syz
[ 1044.721564][T10290] usb 6-1: SerialNumber: syz
[ 1044.727711][T11492]  ? lock_downgrade+0x6e0/0x6e0
[ 1044.742883][T10290] usb 6-1: config 0 descriptor??
[ 1044.748833][T11492]  ? queue_work_on+0xb3/0x110
[ 1044.782690][T11492]  ? cfg80211_get_conn_bss+0x2f9/0x4d0
[ 1044.788215][T11492]  cfg80211_connect+0x10a5/0x2010
[ 1044.796122][T10290] yurex 6-1:0.0: Could not find endpoints
[ 1044.801482][T11496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1044.815859][T11492]  ? __cfg80211_disconnected+0x14a0/0x14a0
[ 1044.841830][T11492]  ? memset+0x20/0x40
[ 1044.845870][T11492]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 1044.861810][T11492]  ? ieee80211_get_channel_khz+0x14a/0x1e0
[ 1044.867761][T11492]  nl80211_connect+0x1647/0x22a0
[ 1044.879433][T11492]  ? nl80211_parse_connkeys+0xa50/0xa50
[ 1044.886463][T11492]  ? netlink_unicast+0x533/0x7d0
[ 1044.891511][T11492]  ? wait_for_completion_io+0x280/0x280
[ 1044.898595][T11492]  ? nl80211_pre_doit+0xa6/0x620
[ 1044.922053][T11492]  genl_family_rcv_msg_doit+0x228/0x320
[ 1044.927670][T11492]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 1044.946324][T11492]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1044.959263][T11492]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1044.977370][T11492]  ? ns_capable+0xd9/0x100
[ 1044.987254][T10290] usb 6-1: USB disconnect, device number 27
[ 1044.992640][T11492]  genl_rcv_msg+0x328/0x580
[ 1045.007084][T11492]  ? genl_get_cmd+0x480/0x480
[ 1045.018622][T11492]  ? nl80211_parse_connkeys+0xa50/0xa50
[ 1045.026719][T11492]  ? lock_release+0x720/0x720
[ 1045.031603][T11492]  ? __lockdep_reset_lock+0x1a0/0x1a0
[ 1045.051165][T11492]  netlink_rcv_skb+0x153/0x420
[ 1045.056779][T11492]  ? genl_get_cmd+0x480/0x480
[ 1045.061602][T11492]  ? netlink_ack+0xa60/0xa60
[ 1045.066937][T11492]  ? netlink_deliver_tap+0x1b1/0xc30
[ 1045.072373][T11492]  genl_rcv+0x24/0x40
[ 1045.076380][T11492]  netlink_unicast+0x533/0x7d0
[ 1045.081226][T11492]  ? netlink_attachskb+0x890/0x890
[ 1045.087883][T11492]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1045.094405][T11492]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1045.100785][T11492]  ? __phys_addr_symbol+0x2c/0x70
[ 1045.106664][T11492]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 1045.114164][T11492]  ? __check_object_size+0x16e/0x3f0
[ 1045.119493][T11492]  netlink_sendmsg+0x86d/0xdb0
[ 1045.125628][T11492]  ? netlink_unicast+0x7d0/0x7d0
[ 1045.130609][T11492]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1045.137316][T11492]  ? netlink_unicast+0x7d0/0x7d0
[ 1045.142769][T11492]  sock_sendmsg+0xcf/0x120
[ 1045.147322][T11492]  ____sys_sendmsg+0x6e8/0x810
[ 1045.152432][T11492]  ? kernel_sendmsg+0x50/0x50
[ 1045.157210][T11492]  ? do_recvmmsg+0x6d0/0x6d0
[ 1045.162752][T11492]  ? perf_trace_lock+0xeb/0x4d0
[ 1045.167751][T11492]  ? lock_chain_count+0x20/0x20
[ 1045.172958][T11492]  ? __lockdep_reset_lock+0x1a0/0x1a0
[ 1045.178433][T11492]  ___sys_sendmsg+0xf3/0x170
[ 1045.183364][T11492]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1045.189585][T11492]  ? __fget_files+0x21b/0x3e0
[ 1045.197766][T11492]  ? lock_downgrade+0x6e0/0x6e0
[ 1045.204449][T11492]  ? __fget_files+0x23d/0x3e0
[ 1045.209271][T11492]  ? __fget_light+0xea/0x280
[ 1045.214568][T11492]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1045.220909][T11492]  __sys_sendmsg+0xe5/0x1b0
[ 1045.226228][T11492]  ? __sys_sendmsg_sock+0x30/0x30
[ 1045.231461][T11492]  ? syscall_enter_from_user_mode+0x21/0x70
[ 1045.237966][T11492]  do_syscall_64+0x35/0xb0
[ 1045.242691][T11492]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1045.248736][T11492] RIP: 0033:0x7fa8942ab8d9
[ 1045.254463][T11492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1045.275079][T11492] RSP: 002b:00007fa891822188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1045.284892][T11492] RAX: ffffffffffffffda RBX: 00007fa8943aff60 RCX: 00007fa8942ab8d9
[ 1045.294049][T11492] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 1045.303695][T11492] RBP: 00007fa894305cb4 R08: 0000000000000000 R09: 0000000000000000
[ 1045.312256][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1045.320396][T11492] R13: 00007fa8948e3b2f R14: 00007fa891822300 R15: 0000000000022000
[ 1045.329382][T11492] Kernel panic - not syncing: panic_on_warn set ...
[ 1045.335988][T11492] CPU: 1 PID: 11492 Comm: syz-executor.2 Not tainted 5.15.0-rc4-syzkaller #0
[ 1045.344768][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1045.354823][T11492] Call Trace:
[ 1045.358103][T11492]  dump_stack_lvl+0xcd/0x134
[ 1045.362712][T11492]  panic+0x2b0/0x6dd
[ 1045.366599][T11492]  ? __warn_printk+0xf3/0xf3
[ 1045.371187][T11492]  ? __warn.cold+0x1a/0x44
[ 1045.375596][T11492]  ? sta_info_insert_rcu+0x283/0x2ce0
[ 1045.381097][T11492]  __warn.cold+0x35/0x44
[ 1045.385332][T11492]  ? sta_info_insert_rcu+0x283/0x2ce0
[ 1045.390940][T11492]  report_bug+0x1bd/0x210
[ 1045.395403][T11492]  handle_bug+0x3c/0x60
[ 1045.399558][T11492]  exc_invalid_op+0x14/0x40
[ 1045.404060][T11492]  asm_exc_invalid_op+0x12/0x20
[ 1045.408946][T11492] RIP: 0010:sta_info_insert_rcu+0x283/0x2ce0
[ 1045.414936][T11492] Code: f2 f8 44 89 e6 31 ff 83 e6 01 40 88 b5 38 ff ff ff e8 51 b7 f2 f8 0f b6 85 38 ff ff ff 84 c0 0f 84 fa 00 00 00 e8 fd b0 f2 f8 <0f> 0b 41 bc ea ff ff ff e8 f0 b0 f2 f8 4c 89 f6 4c 89 ff e8 b5 f9
[ 1045.434734][T11492] RSP: 0018:ffffc9000f11eb48 EFLAGS: 00010216
[ 1045.440802][T11492] RAX: 000000000000333b RBX: ffff888082718c80 RCX: ffffc90013fd1000
[ 1045.448793][T11492] RDX: 0000000000040000 RSI: ffffffff88834d83 RDI: 0000000000000003
[ 1045.456898][T11492] RBP: ffffc9000f11ec90 R08: 0000000000000000 R09: 0000000000000001
[ 1045.464863][T11492] R10: ffffffff88834d4c R11: 0000000000000000 R12: 0000000000110208
[ 1045.472827][T11492] R13: ffff88803e190048 R14: ffff88803e190000 R15: ffff888081d50d60
[ 1045.480797][T11492]  ? sta_info_insert_rcu+0x24c/0x2ce0
[ 1045.486230][T11492]  ? sta_info_insert_rcu+0x283/0x2ce0
[ 1045.491614][T11492]  ? sta_info_insert_rcu+0x283/0x2ce0
[ 1045.497013][T11492]  ? memcpy+0x39/0x60
[ 1045.500999][T11492]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1045.507236][T11492]  ? mac80211_hwsim_bss_info_changed+0x512/0xf10
[ 1045.513589][T11492]  ? sta_info_free+0x3b0/0x3b0
[ 1045.518350][T11492]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 1045.524593][T11492]  ? trace_drv_return_void+0x1c2/0x280
[ 1045.530075][T11492]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 1045.535461][T11492]  ? drv_bss_info_changed+0x2d3/0x5f0
[ 1045.540831][T11492]  sta_info_insert+0x13/0xb0
[ 1045.545416][T11492]  ieee80211_prep_connection+0x1701/0x31c0
[ 1045.551355][T11492]  ? ieee80211_csa_connection_drop_work+0x20/0x20
[ 1045.557764][T11492]  ? record_print_text.cold+0x16/0x16
[ 1045.563236][T11492]  ? rcu_read_lock_sched_held+0x3a/0x70
[ 1045.568780][T11492]  ieee80211_mgd_auth.cold+0x26c/0x448
[ 1045.574242][T11492]  ? trace_cfg80211_return_bss+0x1c2/0x280
[ 1045.580091][T11492]  ? ieee80211_mlme_notify_scan_completed+0x360/0x360
[ 1045.587053][T11492]  cfg80211_mlme_auth+0x3bd/0x760
[ 1045.592100][T11492]  ? cfg80211_rx_mgmt_khz+0xb80/0xb80
[ 1045.597525][T11492]  cfg80211_conn_do_work+0xc3f/0xf50
[ 1045.602819][T11492]  ? cfg80211_conn_scan+0xfe0/0xfe0
[ 1045.608014][T11492]  ? lock_downgrade+0x6e0/0x6e0
[ 1045.612878][T11492]  ? queue_work_on+0xb3/0x110
[ 1045.617563][T11492]  ? cfg80211_get_conn_bss+0x2f9/0x4d0
[ 1045.623019][T11492]  cfg80211_connect+0x10a5/0x2010
[ 1045.628046][T11492]  ? __cfg80211_disconnected+0x14a0/0x14a0
[ 1045.633850][T11492]  ? memset+0x20/0x40
[ 1045.637848][T11492]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 1045.643563][T11492]  ? ieee80211_get_channel_khz+0x14a/0x1e0
[ 1045.649365][T11492]  nl80211_connect+0x1647/0x22a0
[ 1045.654334][T11492]  ? nl80211_parse_connkeys+0xa50/0xa50
[ 1045.659902][T11492]  ? netlink_unicast+0x533/0x7d0
[ 1045.664894][T11492]  ? wait_for_completion_io+0x280/0x280
[ 1045.670502][T11492]  ? nl80211_pre_doit+0xa6/0x620
[ 1045.675446][T11492]  genl_family_rcv_msg_doit+0x228/0x320
[ 1045.681010][T11492]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 1045.688377][T11492]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1045.694710][T11492]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1045.700972][T11492]  ? ns_capable+0xd9/0x100
[ 1045.705566][T11492]  genl_rcv_msg+0x328/0x580
[ 1045.710067][T11492]  ? genl_get_cmd+0x480/0x480
[ 1045.714738][T11492]  ? nl80211_parse_connkeys+0xa50/0xa50
[ 1045.720319][T11492]  ? lock_release+0x720/0x720
[ 1045.724991][T11492]  ? __lockdep_reset_lock+0x1a0/0x1a0
[ 1045.730378][T11492]  netlink_rcv_skb+0x153/0x420
[ 1045.735141][T11492]  ? genl_get_cmd+0x480/0x480
[ 1045.739827][T11492]  ? netlink_ack+0xa60/0xa60
[ 1045.744411][T11492]  ? netlink_deliver_tap+0x1b1/0xc30
[ 1045.749703][T11492]  genl_rcv+0x24/0x40
[ 1045.753717][T11492]  netlink_unicast+0x533/0x7d0
[ 1045.758481][T11492]  ? netlink_attachskb+0x890/0x890
[ 1045.763592][T11492]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1045.769838][T11492]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1045.776075][T11492]  ? __phys_addr_symbol+0x2c/0x70
[ 1045.781097][T11492]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 1045.786818][T11492]  ? __check_object_size+0x16e/0x3f0
[ 1045.792111][T11492]  netlink_sendmsg+0x86d/0xdb0
[ 1045.796873][T11492]  ? netlink_unicast+0x7d0/0x7d0
[ 1045.801808][T11492]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 1045.808055][T11492]  ? netlink_unicast+0x7d0/0x7d0
[ 1045.813020][T11492]  sock_sendmsg+0xcf/0x120
[ 1045.817466][T11492]  ____sys_sendmsg+0x6e8/0x810
[ 1045.822330][T11492]  ? kernel_sendmsg+0x50/0x50
[ 1045.826998][T11492]  ? do_recvmmsg+0x6d0/0x6d0
[ 1045.831591][T11492]  ? perf_trace_lock+0xeb/0x4d0
[ 1045.836451][T11492]  ? lock_chain_count+0x20/0x20
[ 1045.841315][T11492]  ? __lockdep_reset_lock+0x1a0/0x1a0
[ 1045.846682][T11492]  ___sys_sendmsg+0xf3/0x170
[ 1045.851268][T11492]  ? sendmsg_copy_msghdr+0x160/0x160
[ 1045.856565][T11492]  ? __fget_files+0x21b/0x3e0
[ 1045.861271][T11492]  ? lock_downgrade+0x6e0/0x6e0
[ 1045.866145][T11492]  ? __fget_files+0x23d/0x3e0
[ 1045.870828][T11492]  ? __fget_light+0xea/0x280
[ 1045.875417][T11492]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 1045.881780][T11492]  __sys_sendmsg+0xe5/0x1b0
[ 1045.886277][T11492]  ? __sys_sendmsg_sock+0x30/0x30
[ 1045.891309][T11492]  ? syscall_enter_from_user_mode+0x21/0x70
[ 1045.897201][T11492]  do_syscall_64+0x35/0xb0
[ 1045.901616][T11492]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1045.907509][T11492] RIP: 0033:0x7fa8942ab8d9
[ 1045.911916][T11492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1045.931517][T11492] RSP: 002b:00007fa891822188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1045.939943][T11492] RAX: ffffffffffffffda RBX: 00007fa8943aff60 RCX: 00007fa8942ab8d9
[ 1045.947910][T11492] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 1045.955874][T11492] RBP: 00007fa894305cb4 R08: 0000000000000000 R09: 0000000000000000
[ 1045.963841][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1045.971806][T11492] R13: 00007fa8948e3b2f R14: 00007fa891822300 R15: 0000000000022000
[ 1045.980007][T11492] Kernel Offset: disabled
[ 1045.984541][T11492] Rebooting in 86400 seconds..